A high-severity vulnerability (CVE-2024-21894) has been discovered in Ivanti Connect Secure and Poly Secure VPN gateways, putting over 16,000 internet-exposed devices at risk of remote code execution (RCE) attacks. This is a critical issue that demands immediate attention from IT…
There’s a bit of a controversy brewing around Google One VPN on Windows 10 and 11. Users are reporting that the service might be taking control of their DNS settings in a way that’s raising eyebrows. Let’s delve deeper into…
Financial institutions across the Asia-Pacific (APAC) and Middle East and North Africa (MENA) regions are under attack by a new wave of sophisticated malware called JSOutProx. This isn’t the first rodeo for JSOutProx, but it’s important to be aware of…
This week has seen a surge in ransomware attacks targeting virtual machines (VMs). Virtual machines are essentially software-created computers that run within a physical computer system. They offer businesses flexibility and scalability, but they also present a unique attack surface…
Cybercriminals are increasingly turning to a familiar tool for nefarious purposes: Remote Desktop Protocol (RDP). A recent report by cybersecurity firm Sophos revealed a troubling trend – RDP was abused in a whopping 90% of attacks investigated by their incident…
A recent US cybersecurity report has cast a critical eye on Microsoft, alleging the company could have prevented a major email hack by a Chinese hacking group. The incident, discovered in 2023, involved unauthorized access to cloud-based email accounts belonging…