Our news

  • Updated Guidance on Play Ransomware

    CISA, the Federal Bureau of Investigation (FBI), and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) have issued an updated advisory on Play ransomware, also known as Playcrypt. This advisory highlights new tactics, techniques, and procedures used by the Play ransomware group and provides updated indicators of compromise (IOCs) to enhance threat detection. Since

    READ MORE

  • Preparing Global SOCs for Emerging Cyber Threat Trends

    The cyber threat landscape is evolving as threats shift to emerging technologies. Today, it is not just healthcare, finance, or a government institution. Organizations and infrastructures of all kinds, from ransomware that paralyzes or shuts down operations to supply-chain breaches that expose sensitive data, are in the crosshairs of rampant cybercriminals who are constantly evolving

    READ MORE

  • Vulnerability Summary for the Week of May 26, 2025

    High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1000 Projects–Daily College Class Work Report Book A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /dcwr_entry.php. The manipulation of the argument Date leads to sql injection.

    READ MORE

  • Vulnerability Summary for the Week of May 19, 2025

    High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info AutomationDirect–MB-Gateway The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality. 2025-05-21 10 CVE-2025-36535 mojoomla–Hospital Management System Unrestricted Upload of File with

    READ MORE

  • New Guidance for SIEM and SOAR Implementation

    Today, CISA, in collaboration with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other international and U.S. partners, released new guidance for organizations seeking to procure Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms. This guidance includes the following three resources: Implementing SIEM and SOAR Platforms

    READ MORE

  • Advisory Update on Cyber Threat Activity Targeting Commvault’s SaaS Cloud Application (Metallic)

    Commvault is monitoring cyber threat activity targeting their applications hosted in their Microsoft Azure cloud environment. Threat actors may have accessed client secrets for Commvault’s (Metallic) Microsoft 365 (M365) backup software-as-a-service (SaaS) solution, hosted in Azure. This provided the threat actors with unauthorized access to Commvault’s customers’ M365 environments that have application secrets stored by Commvault.

    READ MORE

  • New Best Practices Guide for Securing AI Data Released

    Today, CISA, the National Security Agency, the Federal Bureau of Investigation, and international partners released a joint Cybersecurity Information Sheet on AI Data Security: Best Practices for Securing Data Used to Train & Operate AI Systems.  This information sheet highlights the critical role of data security in ensuring the accuracy, integrity, and trustworthiness of AI

    READ MORE

  • Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations

    Summary The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint advisory to disseminate known tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) associated with threat actors deploying the LummaC2 information stealer (infostealer) malware. LummaC2 malware is able to infiltrate victim computer networks and exfiltrate

    READ MORE

  • Russian GRU Targeting Western Logistics Entities and Technology Companies

    Executive Summary This joint cybersecurity advisory (CSA) highlights a Russian state-sponsored cyber campaign targeting Western logistics entities and technology companies. This includes those involved in the coordination, transport, and delivery of foreign assistance to Ukraine. Since 2022, Western logistics entities and IT companies have faced an elevated risk of targeting by the Russian General Staff

    READ MORE

  • Threat Actors Target U.S. Critical Infrastructure with LummaC2 Malware

    Today, CISA and the Federal Bureau of Investigation released a joint Cybersecurity Advisory, LummaC2 Malware Targeting U.S. Critical Infrastructure Sectors. This advisory details the tactics, techniques, and procedures, and indicators of compromise (IOCs) linked to threat actors deploying LummaC2 malware. This malware poses a serious threat, capable of infiltrating networks and exfiltrating sensitive information, to

    READ MORE