September 2020

In the last 48 hours, our Security Operations Centre Support Team has identified a very large number of infection attempts – a combination of Emotet, Qakbot, and Cobalt Strike compromises. Their entire team has been working around the clock for 2 straight days identifying these infection attempts.  At this time, none of our clients have […]

The FBI has sent a private security alert to the US financial sector last week warning organizations about the increasing number of credential stuffing attacks that have targeted their networks and have led to breaches and considerable financial losses. Credential stuffing is a relatively new term in the cyber-security industry. It refers to a type of

Researchers have developed and published a proof-of-concept exploit for a recently patched Windows vulnerability that can allow access to an organization’s crown jewels—the Active Directory domain controllers that act as an all-powerful gatekeeper for all machines connected to a network. CVE-2020-1472, as the vulnerability is tracked, carries a critical severity rating from Microsoft as well

Razer accidentally exposed over 100,000 gamers’ personal information for close to a month, according to a new report. Security researcher Volodymyr Diachenko discovered that customer data on Razer’s website was made publicly available on August 18th because of a server misconfiguration. A redacted sample pictured below shows records of orders made on the company’s digital