PDFSIDER Malware – Exploitation of DLL Side-Loading for AV and EDR Evasion

Threat actors use PDFSIDER malware with social engineering and DLL sideloading to bypass AV/EDR, and ransomware gangs already abuse it. Resecurity has learned about PDFSIDER during an investigation of... Read more »

Access broker caught: Jordanian pleads guilty to hacking 50 companies

A Jordanian man pleaded guilty in the US to selling illegal access to 50 compromised enterprise networks after an undercover sting. A Jordanian national Feras Khalil Ahmad Albashiti (40),... Read more »

New iOS and iPadOS Flaws Leave Millions of iPhones at Risk

Critical iOS and iPadOS WebKit flaws put millions of iPhones and iPads at risk of silent takeover. Apple urges users to update immediately. The post New iOS and iPadOS... Read more »

Google Gemini Flaw Let Attackers Access Private Calendar Data

Security researchers found a Google Gemini flaw that let hidden instructions in a meeting invite extract private calendar data and create deceptive events. The post Google Gemini Flaw Let... Read more »

AI slop pushes data governance towards zero-trust models

Organisations are beginning to implement zero-trust models for data governance thanks to the proliferation of poor quality AI-generated data, often known as AI slop. Read more »

Critical TP-Link VIGI camera flaw allowed remote takeover of surveillance systems

TP-Link fixed a critical flaw that exposed over 32 VIGI C and VIGI InSight camera models to remote hacking, with over 2,500 internet-exposed devices identified. TP-Link fixed a high-severity... Read more »

UK public sector, CNI in Russian hacktivist crosshairs

Hacktivists aligned to the Russian state are ramping up their targeting of UK organisations with denial of service attacks Read more »

New Windows Flaw Lets Attackers Bypass Mark of the Web

Microsoft patched a Windows Remote Assistance flaw that lets attackers bypass Mark of the Web, weakening protections against malicious downloads and phishing files. The post New Windows Flaw Lets... Read more »

Secure Your Business Traffic With Military-Grade VPN for Only $20

This no-logging VPN with AES-256 encryption protects your remote teams and client data for the low price of $19.99 annually. The post Secure Your Business Traffic With Military-Grade VPN... Read more »

Ping Identity launches Universal Services for ongoing identity assurance

Ping Identity announced its Universal Services, a set of identity services that enable organizations to move beyond authentication and continuously establish, validate, and protect trust across every digital interaction.... Read more »
Subscribe to our Newsletter