A new analysis of tools put to use by the Black Basta ransomware operation has identified ties between the threat actor and the FIN7 (aka Carbanak) group.
This link “could suggest either that Black Basta and FIN7 maintain a special relationship or tha…
Vulnerable Client-Server Application Vulnerable client-server application (VuCSA) is made for learning/presenting how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface). Currently t…
Every SaaS app user and login is a potential threat; whether it’s bad actors or potential disgruntled former associates, identity management and access control is crucial to prevent unwanted or mistaken entrances to the organization’s data and systems…
A French-speaking threat actor dubbed OPERA1ER has been linked to a series of more than 30 successful cyber attacks aimed at banks, financial services, and telecom companies across Africa, Asia, and Latin America between 2018 and 2022.
According to Si…
The operators of RomCom RAT are continuing to evolve their campaigns with rogue versions of software such as SolarWinds Network Performance Monitor, KeePass password manager, and PDF Reader Pro.
Targets of the operation consist of victims in Ukraine a…
Popular short-form video-sharing service TikTok is revising its privacy policy for European users to make it explicitly clear that user data can be accessed by some employees from across the world, including China.
The ByteDance-owned platform, which …
Type: ReportsLearning From Incident Response: April – June 2022 Insights from the cyber trenchesKey trends and observations from Secureworks’ Incident Response engagements in Q2 of 2022 reveal an uptick in BEC and the use of phishing to gain initial ac…
Type: Solution BriefsTaegis™ ManagedXDR EnhancedEnable deeper threat investigation, containment, and orchestrated remediationAn overview of Secureworks Taegis ManagedXDR Enhanced, which provides deeper threat investigation, containment, and orchestrate…
When I got to 192.168.0.1/login I am greeted with my router login page and can go change some settings. Now let’s say I still have the factory default login something like "admin", "admin".
Can an attacker exploit this …
NetAnalysis® Offline Cached Web Page Viewing
NetAnalysis® version 3.3 introduces a major change in the way we handle and process cached content. Previous versions of the application would rebuild cached web pages and convert them to local …
