Cybersecurity Insights
& Security Research

Hacking

BrazenBamboo Exploits FortiClient Zero-Day to Steal VPN Credentials

A newly disclosed zero-day vulnerability in Fortinet's FortiClient for Windows has been exploited by a threat actor known as BrazenBamboo to steal VPN cred...

• Cedric Nelson
• Nov 18, 2024

Read Article

Hacking

Vertex AI Flaws Allow ML Model Exfiltration and Privilege Escalation

Cybersecurity researchers have identified two high-severity vulnerabilities in Google's Vertex AI platform that could enable attackers to escalate privileg...

• Cedric Nelson
• Nov 18, 2024

Read Article

Awareness

The Convergence of Physical and Cybersecurity: Protecting Integrated Systems

Physical and cybersecurity are no longer separate domains. With interconnected systems like IoT devices and smart infrastructure, the overlap between physi...

• Eng. Donya Bino
• Nov 15, 2024

Read Article

Awareness

Blockchain for Cybersecurity: Securing Data in a Decentralized Way

Blockchain is a decentralized system that stores data securely, making it harder for attackers to tamper with or exploit information. It offers solutions t...

• Eng. Donya Bino
• Nov 15, 2024

Read Article

Exploits

CVE-2024-10979: Critical PostgreSQL Flaw Enables Code Execution via Environment Variables

Cybersecurity researchers have disclosed a critical vulnerability in the PostgreSQL open-source database system that could allow attackers to manipulate en...

• Cedric Nelson
• Nov 15, 2024

Read Article

Hacking

Sitting Ducks: Domain Hijacking Threats Targeting Brands Since 2018

Multiple threat actors have been exploiting an attack method known as "Sitting Ducks" to hijack legitimate domains for phishing schemes and investment frau...

• Cedric Nelson
• Nov 15, 2024

Read Article