Cybersecurity

Not Your Old ActiveState: Introducing our End-to-End OS Platform 

Not Your Old ActiveState: Introducing our End-to-End OS Platform 

Having been at ActiveState for nearly eight years, I’ve seen many iterations of our product. However, one thing has stayed true over the years: Our commitment to the open source community and companies using open source in their code.
ActiveState has been helping enterprises manage open source for over a decade. In the early days, open source was in its infancy. We focused mainly on the

APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP 

APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP 

The Russia-linked APT29 threat actor has been observed repurposing a legitimate red teaming attack methodology as part of cyber attacks leveraging malicious Remote Desktop Protocol (RDP) configuration files.
The activity, which has targeted governments and armed forces, think tanks, academic researchers, and Ukrainian entities, entails adopting a “rogue RDP” technique that was previously

ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation 

ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation 

Across small-to-medium enterprises (SMEs) and managed service providers (MSPs), the top priority for cybersecurity leaders is to keep IT environments up and running. To guard against cyber threats and prevent data breaches, it’s vital to understand the current cybersecurity vendor landscape and continually assess the effectiveness of available solutions. Luckily, the 2024 MITRE ATT&CK

BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products 

BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products 

BeyondTrust has disclosed details of a critical security flaw in Privileged Remote Access (PRA) and Remote Support (RS) products that could potentially lead to the execution of arbitrary commands.
Privileged Remote Access controls, manages, and audits privileged accounts and credentials, offering zero trust access to on-premises and cloud resources by internal, external, and third-party users.

INTERPOL Pushes for “Romance Baiting” to Replace “Pig Butchering” in Scam Discourse 

INTERPOL Pushes for “Romance Baiting” to Replace “Pig Butchering” in Scam Discourse 

INTERPOL is calling for a linguistic shift that aims to put to an end to the term “pig butchering,” instead advocating for the use of “romance baiting” to refer to online scams where victims are duped into investing in bogus cryptocurrency schemes under the pretext of a romantic relationship.
“The term ‘pig butchering’ dehumanizes and shames victims of such frauds, deterring people from coming

Meta Fined €251 Million for 2018 Data Breach Impacting 29 Million Accounts 

Meta Fined €251 Million for 2018 Data Breach Impacting 29 Million Accounts 

Meta Platforms, the parent company of Facebook, Instagram, WhatsApp, and Threads, has been fined €251 million (around $263 million) for a 2018 data breach that impacted millions of users in the bloc, in what’s the latest financial hit the company has taken for flouting stringent privacy laws.
The Irish Data Protection Commission (DPC) said the data breach impacted approximately 29 million

Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected 

Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected 

Threat actors are attempting to exploit a recently disclosed security flaw impacting Apache Struts that could pave the way for remote code execution.
The issue, tracked as CVE-2024-53677, carries a CVSS score of 9.5 out of 10.0, indicating critical severity. The vulnerability shares similarities with another critical bug the project maintainers addressed in December 2023 (CVE-2023-50164, CVSS

The AI Fix #29: AI on OnlyFans, and the bot that wants to be a billionaire 

The AI Fix #29: AI on OnlyFans, and the bot that wants to be a billionaire 

In episode 29 of The AI Fix, an AI company makes the bold step of urging us to “stop hiring humans”, Graham is wrong about GB AI, parents prepare their kids for the imminent Moxie-mageddon, Google releases Gemini 2.0, and a robot is found dead at work and nobody knows why.

Graham inspects the AI Miss World competition for research purposes and wonders if our hosts should start an OnlyFans, and Mark meets an “evolving” AI that wants to be a billionaire.

All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley.

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware 

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware 

A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate.
“An attacker used social engineering via a Microsoft Teams call to impersonate a user’s client and gain remote access to their system,” Trend Micro researchers Catherine Loveria, Jovit Samaniego, and Gabriel Nicoleta said.
“The attacker failed to install a

Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks 

Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks 

A new phishing campaign has been observed employing tax-themed lures to deliver a stealthy backdoor payload as part of attacks targeting Pakistan.
Cybersecurity company Securonix, which is tracking the activity under the name FLUX#CONSOLE, said it likely starts with a phishing email link or attachment, although it said it couldn’t obtain the original email used to launch the attack.
“One of the

CALL US TODAY TO SPEAK TO A SECURITY EXPERT: 720.221.6804

X