Cybersecurity Insights
& Security Research

Exploits

Critical WordPress Plugin Flaws Allow Remote Code Execution

Two critical security vulnerabilities affecting the Spam Protection, Anti-Spam, and FireWall plugin for WordPress could enable unauthenticated attackers to...

• Cedric Nelson
• Nov 27, 2024

Read Article

Exploits

RomCom Exploits Firefox and Windows Zero-Day Vulnerabilities in Attacks

The Russia-aligned threat actor RomCom has been linked to exploiting two zero-day vulnerabilities one in Mozilla Firefox and another in Microsoft Windows....

• Cedric Nelson
• Nov 27, 2024

Read Article

Hacking

Earth Estries Unleashes GHOSTSPIDER Backdoor in Advanced Cyber Espionage Campaign

The China-linked threat actor Earth Estries, active since at least 2020, has been identified deploying a previously unknown backdoor called GHOSTSPIDER in...

• Cedric Nelson
• Nov 27, 2024

Read Article

Awareness

Phishing vs. Spear Phishing: Know the Difference

Phishing and spear phishing are two common types of cyberattacks used to steal sensitive information, but they differ in their approach and targets. Unders...

• Eng. Donya Bino
• Nov 26, 2024

Read Article

Awareness

What Is a Botnet? And Why It’s Dangerous

A botnet is a network of compromised devices, often referred to as "zombies," controlled by a single attacker or group. These devices—computers, smar...

• Eng. Donya Bino
• Nov 26, 2024

Read Article

Hacking

BYOVD Malware Exploits Legitimate Avast Driver for Kernel-Level Attacks

Cybersecurity researchers have uncovered a Bring Your Own Vulnerable Driver (BYOVD) campaign that uses a signed Avast driver to disable security defenses a...

• Cedric Nelson
• Nov 26, 2024

Read Article