As organizations increasingly rely on cloud storage for hosting applications, software packages, updates, and static assets, attackers are finding new ways to exploit abandoned or misconfigured cloud resources. New reporting from Cybersecurity News highlights a growing bucket hijacking attack, where threat actors take control of deleted or unclaimed cloud storage buckets that are still referenced
Read More
Multi-Factor Authentication (MFA) has become one of the most widely adopted security controls for protecting user accounts. However, attackers are increasingly developing phishing platforms specifically designed to bypass MFA rather than defeat it. New reporting from Cybersecurity News reveals that BlueKit, a Phishing-as-a-Service (PhaaS) platform, enables cybercriminals to steal credentials, bypass Multi-Factor Authentication, and hijack
Read More
Ransomware operators continue to evolve their techniques to evade modern security defenses. Instead of simply encrypting files immediately after gaining access, newer strains are actively disabling security products first, ensuring that their payloads can execute with minimal interference. New reporting from Cybersecurity News reveals that the GentleKiller ransomware targets and terminates Endpoint Detection and Response
Read More
State-sponsored cyber operations continue to evolve beyond traditional hacking campaigns. Increasingly, governments are relying on private contractors to conduct cyber espionage, leveraging malware, botnets, and stolen information to support intelligence gathering and offensive operations. New reporting from Cybersecurity News reveals that Chinese cyber contractors used malware, botnets, and stolen data to conduct cyber operations, highlighting
Read More