Fortra, in collaboration with Microsoft and other partners, has achieved an 80% reduction in unauthorized use of the penetration testing tool Cobalt Strike through a series of global takedown operations and enhanced security measures.
View full story…

A recent report reveals that 87% of security professionals have encountered AI-driven cyberattacks in the past year, highlighting the urgent need for improved detection and defense mechanisms against increasingly sophisticated threats.
View full story…

Ransomware groups have increasingly targeted organizations by exploiting weak credentials in virtual private networks (VPNs) and gateway accounts lacking multifactor authentication (MFA), leading to a significant rise in ransomware activity throughout 2024.
View full story…

Medusa ransomware, linked to the Spearwing group, has significantly increased its activity in the US healthcare sector, targeting over 40 victims in early 2025 and employing double extortion tactics to demand ransoms ranging from $100,000 to $15 million.
View full story…

This document outlines essential strategies for website owners to protect against common online threats such as DDoS attacks, brute force attempts, and SQL injection attacks, ensuring optimal performance and security.
View full story…

The US has indicted 12 Chinese nationals, including members of a cybersecurity firm and government officials, for their involvement in a decade-long cyber-espionage campaign that targeted US critics and various foreign ministries, causing significant financial damages and escalating tensions between the US and China.
View full story…

A sophisticated cyber-intrusion campaign exploiting the CVE-2024-4577 vulnerability in PHP on Windows servers has been identified, primarily affecting various sectors in Japan and utilizing tools like Cobalt Strike for persistent access.
View full story…

The European Union’s ENISA has highlighted significant compliance challenges faced by six critical infrastructure sectors, including IT, health, and maritime, in meeting the new cybersecurity requirements of the NIS2 directive enacted in January 2023.
View full story…

Job satisfaction among women in the cybersecurity sector has significantly decreased from 82% in 2022 to 67% in 2024, largely due to economic pressures, increased workloads, and organizational changes such as layoffs and budget cuts.
View full story…

A critical security flaw in the Chaty Pro plugin allows attackers to exploit arbitrary file uploads, potentially taking control of affected WordPress sites.
View full story…

ACRStealer, a sophisticated infostealer malware, has gained notoriety for its ability to covertly extract sensitive information by leveraging legitimate platforms like Google Docs and Steam since its emergence in mid-2024.
View full story…

A security service is crucial for defending websites from various online attacks, ensuring their integrity and availability in an evolving cyber threat landscape.
View full story…