BIMI: A Visual Take on Email Authentication and Security

Defending Against Credential-Based and Privilege Escalation Attacks

Provisioning secure access to a system, resource, application, or network goes beyond confirming the user’s identity based on their authorization and authentication. It must also include accurately making sure that the tools they use are entitled to this access. Without this additional layer of protection, threat actors can masquerade as real users and gain unwarranted access.

Several Bugs Found in 3 Open-Source Software Used by Several Businesses

Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provide a pathway to more sophisticated attacks. All ...

Hackers Turning to 'Exotic' Programming Languages for Malware Development

Threat actors are increasingly shifting to "exotic" programming languages such as Go, Rust, Nim, and Dlang that can better circumvent conventional security protections, evade analysis, and hamper reverse engineering efforts. "Malware authors are known for their ability to adapt and modify their ...

Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices

Apple on Monday rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited, making it the thirteenth such vulnerability Apple has patched since the start of this year. The updates, which arrive less than a week after the ...

BIMI: A Visual Take on Email Authentication and Security

There is a saying that goes something like, "Do not judge a book by its cover." Yet, we all know we can not help but do just that - especially when it comes to online security. Logos play a significant role in whether or not we open an email and how we assess the importance of each message. Brand ...

How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability

Microsoft Windows 10 and Windows 11 users are at risk of a new unpatched vulnerability that was recently disclosed publicly. As we reported last week, the vulnerability — SeriousSAM — allows attackers with low-level permissions to access Windows system files to perform a Pass-the-Hash (and ...

Defending Against Credential-Based and Privilege Escalation Attacks

Provisioning secure access to a system, resource, application, or network goes beyond confirming the user’s identity based on their authorization and authentication. It must also include accurately making sure that the tools they use are entitled to this access. Without this additional layer of protection, threat actors can masquerade as real users and gain unwarranted access.