Tag: pro
Cybercriminals launch new malware that can completely wipe out your antivirus
Cybercriminals have been spotted using a new piece of malware designed to completely wipe out any antivirus programs the victim might have installed on their endpoint and infect them with ransomware. Researchers from Sophos have reported encountering a new utility tool designed to kill EDRs (Endpoint Detection and Response), which…
Read More
Thousands of Oracle NetSuite ERP websites found leaking private customer information
Researchers have discovered a vulnerability in Oracle Netsuite’s SuiteCommerce ecommerce platform that could allow threat actors to steal sensitive data from websites. A report from AppOmni revealed the vulnerability comes from misconfigured access controls in SuiteCommerce instances, specifically within custom record types (CRTs) – tables created by the SuiteCommerce enterprise…
Read More
This crafty ransomware uses an unusual social-engineering tactic to gain access to victim systems
Cybersecurity researchers from the Sophos X-Ops Incident Response team have observed hackers deploying an unusual social engineering tactic to gain access to victim systems and steal sensitive data. The team outlined how a new ransomware player called Mad Liberator emerged in mid-July 2024, mostly focused on data exfiltration (rather than…
Read More
GitHub rolls out new tool to fix code errors even before you see them
GitHub has announced the general availability of Copilot Autofix within its GitHub Advanced Security (GHAS) suite, designed to prevent new vulnerabilities from entering code before you even see them. The tool, announced by Chief Security Officer Mike Hanley in a blog post, will also tackle existing vulnerabilities in code, which…
Read More
M&A Success: Why unpacking the tech dynamics is mission critical
In recent years, the corporate world has shown resilience to pandemics, geopolitical conflict and economic shocks. The appetite for growth is recovering, and in the first quarter of 2024, Merger and Acquisition (M&A) activity increased by 58% in Europe compared to the same period last year. M&As tend to bring…
Read More
Why MFA alone isn’t enough: The crucial role of security awareness training
The evolving and sophisticated nature of phishing campaigns has allowed cybersecurity threats via email to penetrate organizations more effectively than ever before. Credential phishing was the threat of choice in 2023, accounting for 91% of active threat reports published. This represented a 67% increase in volume compared to 2022, which…
Read More