North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

Backups: The Key to Cybersecurity

How Much Cybersecurity is Enough? Recovery + Resistance = Resilience

North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

Threat actors affiliated with North Korea have been observed leveraging LinkedIn as a way to target developers as part of a fake job recruiting operation. These attacks employ coding tests as a ...

FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals

Two men have been indicted in the U.S. for their alleged involvement in managing a dark web marketplace called WWH Club that specializes in the sale of sensitive personal and financial information. ...

Vonahi Security Earns CREST Accreditation in EMEA)

Vonahi Security is now CREST-accredited in EMEA, offering vPenTest users CREST-certified network penetration tests. Get affordable, on-demand pentests and reports that meet SOC2, PCI DSS, HIPAA, and ISO 27001 standards. See vPenTest in action - Schedule a ...

SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

SonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible. ...

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a known ...

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

Threat actors have long leveraged typosquatting as a means to trick unsuspecting users into visiting malicious websites or downloading booby-trapped software and packages. These attacks typically ...

Achieving Data Resilience in Microsoft 365)

Protect your business from ransomware and cyber threats. Learn key strategies for data resilience and Microsoft 365 security.

The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025

The 2024 State of the vCISO Report continues Cynomi’s tradition of examining the growing popularity of virtual Chief Information Security Officer (vCISO) services. According to the independent ...

Intel From The Cyber Battlefield

Current Stories from the Front Lines