Reports

Black Basta was at it again with a ransomware attack against Ascension healthcare system in the United States. Check out our latest report for detailed analysis (Tactics, Techniques and Procedures) and mitigation strategies...

Dive into our latest report on QakBot malware for a comprehensive technical analysis. Discover its evolution, attack methods, and effective defense strategies to protect your organization...

Zloader malware is back in action! This in-depth technical analysis unveils its latest attack methods, explores its evolution, and provides crucial detection helping organizations minimize security risks...

Three new exploited vulnerabilities found within Cisco’s ASA and FTD software labeled CVE-2024-20353 (CVSS score 8.6), CVE-2024-20359 (CVSS score 6.0), and CVE-2024-20358 (CVSS score 6.0). CISA strongly recommends affected Cisco customers apply the patches as quickly as their patch policy allows...

The UltraViolet Security Operations Center (SOC) monitors security events and detections 24 hours a day, 7 days a week. During our security operations, we can analyze various stages of Cyber-attacks using ingested logs, tools, threat intelligence and human intelligence...

A recent vulnerability labeled CVE-2024-3094 has been detected within the XZ Utils package. It affected the versions of xz/liblzma 5.6.0 and 5.6.1 before being quickly discovered by the OSS community...

The ‘Loop DoS’ attack generally follows this pattern: a threat actor identifies two DNS resolvers with a configuration which causes the servers to respond to messages with an error message of their own.

ZeroLogon is a Windows Netlogon vulnerability first detected in 2020. CVE-2020-1472 was assigned for this vulnerability. While Microsoft has released appropriate patching for this vulnerability following its discovery with several updates...

A proof-of-concept RCE (Remote Code Execution) exploit was co-discovered by researchers against Fortinet's FortiClient Enterprise Management Server (EMS); FortiClient EMS 7.2 (Versions 7.2.0 through 7.2.2) and FortiClient EMS 7.0 (7.0.1 through 7.0.10)...

RCE flaws found in ScreenConnect came into light recently. Identified vulnerabilities were CVE-2024-1709 and CVE-2024-1708. Exploiting this flaw, attackers could upload malicious files, bypass authentication and potentially gain control user account...