Application Security

Can Cl0p Breach Your Network via PTC Windchill Exploits?
Malware & Threats Can Cl0p Breach Your Network via PTC Windchill Exploits?

The Cl0p group’s specialized implant is designed to efficiently extract sensitive information from the PTC Windchill keystore for large-scale data theft. This development represents a significant shift in the threat landscape where Product Lifecycle Management systems, which contain the crown

Top 9 SAST Solutions for Enterprise Security Environments
Security Operations & Management Top 9 SAST Solutions for Enterprise Security Environments

Corporate mergers and acquisitions often result in a long tail of programming languages and disparate source control systems that complicate unified security policies. The modern enterprise security landscape is increasingly defined by this inherent complexity, where large organizations no longer

ToxicPanda and GoldDigger Elevate Android Banking Threats
Endpoint & Device Security ToxicPanda and GoldDigger Elevate Android Banking Threats

Sophisticated malware strains like ToxicPanda 2.0 leverage Android Accessibility Services to see and act on behalf of the user during financial sessions. This shift marks a significant departure from historical data-stealing trojans that focused primarily on intercepting SMS messages or displaying

How Does SilkParasite Use Google Drive for Cyberespionage?
Infrastructure & Network Security How Does SilkParasite Use Google Drive for Cyberespionage?

The modular design of DriveSilkRAT enables it to poll Google Drive for specialized tools designed for file manipulation and network enumeration on demand. This advanced capability marks a significant shift in how state-sponsored actors maintain persistence while evading traditional security

Google Releases Chrome 151 to Patch Critical Security Flaws
Infrastructure & Network Security Google Releases Chrome 151 to Patch Critical Security Flaws

Security researchers identified a critical authorization flaw in the Workers framework that could compromise how the browser manages background script resources. This significant discovery highlights the growing complexity in web application architectures where background processes often operate

How Secure Is Your Password Manager Against Token Leakage?
Identity & Access Management How Secure Is Your Password Manager Against Token Leakage?

The insecure implementation of the window.postMessage mechanism in the Passportal extension highlights how internal communication channels can inadvertently expose sensitive authentication tokens to malicious websites. Cybersecurity professionals have long warned about the inherent risks associated

Loading

Subscribe to our weekly news digest.

Join now and become a part of our fast-growing community.

Invalid Email Address
Thanks for Subscribing!
We'll be sending you our best soon!
Something went wrong, please try again later