kahmed

Technology Comparison Analysis For over two decades, Windows Server Update Services (WSUS) has been a standard tool for IT administrators to distribute Microsoft updates. However, with Microsoft officially deprecating WSUS and the rise of remote workforces and third-party software vulnerabilities, the legacy tool is struggling to meet modern cybersecurity demands. ...

Dark Web News Analysis A threat actor has reportedly listed a database for sale on a hacker forum, allegedly containing 378,000 refund claims from BlockFi. The seller is offering samples and pricing via Telegram and supports escrow services, indicating a serious attempt to monetize the stolen data. The database is said to ...

Dark Web News Analysis A threat actor has reportedly leaked a database allegedly originating from the Bank of Jerusalem. The compromised data is said to be available in CSV format and includes a wide range of sensitive customer information. According to the leak, the exposed data contains: The inclusion of ...

Dark Web News Analysis A post on a known hacker forum indicates that a threat actor is actively seeking to purchase a database allegedly linked to Japan’s e-Stat Portal Site for Official Statistics (https://www.e-stat.go.jp). While the authenticity of the data is not confirmed, the targeted nature of the request suggests ...

Dark Web News Analysis A threat actor has posted what they claim to be admin credentials for Jamaat-e-Islami’s support portal on a known cybercrime forum. The leaked data reportedly includes an email address, password, and the login URL for the portal, potentially granting unauthorized access to sensitive internal systems. If ...

Dark Web News Analysis Tenable, a prominent cybersecurity firm, has confirmed it was impacted by a large-scale data theft campaign targeting integrations with Salesforce and Salesloft Drift. The breach involved unauthorized access to Tenable’s Salesforce system, exposing customer contact details and support case metadata. According to Tenable’s disclosure, the compromised ...

Threat Technique Analysis Security researchers have detailed a potent new technique that allows attackers to read highly sensitive files on Windows systems, bypassing many of the modern security tools designed to prevent such breaches. A report from Workday’s Offensive Security team explains how a malicious actor can sidestep Endpoint Detection ...

Critical Infrastructure Analysis Significant internet disruptions have been reported across the Middle East and South Asia following multiple undersea cable cuts in the Red Sea. Tech giant Microsoft confirmed the issue, warning customers that its Azure cloud services are affected and that network traffic traversing the region may experience increased ...

Supply Chain Breach Analysis Several more major cybersecurity companies—Proofpoint, SpyCloud, Tanium, and Tenable—have now confirmed they were impacted by the massive Salesforce-Salesloft Drift supply chain attack. The incident, first disclosed by Google’s threat intelligence team, involved a threat actor using compromised OAuth tokens for the Salesloft Drift AI chatbot to ...