The Newton Media Cyber Attack: A Target of the BlackCat Ransomware Group In a shocking turn of events, the renowned international media intelligence service, Newton Media A.S., fell victim to a cyberattack. The group allegedly behind this attack is none other than the notorious BlackCat ransomware group. This event has once again raised serious concerns…

The Emergence of MalDoc in PDF: A New Antivirus Evasion Technique In the evolving world of cybersecurity, researchers continually flag new threats and evasion techniques. The most recent of these is a method involving the embedding of a malicious Microsoft Word file into a PDF file. This technique, coined as MalDoc in PDF by JPCERT/CC,…

Rising Cyber-Attacks Amidst the Russo-Ukrainian War In light of the ongoing Russo-Ukrainian war, nations, institutions, and individuals providing aid to Ukraine have found themselves at the mercy of relentless cyberattacks. These attacks are primarily orchestrated by pro-Russian hackers seeking to undermine the efforts of those aiding Ukraine. Cyber security has thus become a critical area…

Cybercriminals Targeting Students: A Growing Concern With the rise in online learning, students are increasingly becoming targets of cybercriminals. These malicious actors are leveraging the students’ needs for laptops and scholarships, devising intricate schemes that appear genuine to the unsuspecting learners. Cybersecurity researchers have highlighted the growth of this trend, drawing attention to the importance…

The Role of a Chief Information Security Officer in Today’s Digital Era The role of a Chief Information Security Officer (CISO) has evolved significantly in recent years. The CISO is no longer a purely technical role. The CISO now needs to possess a mix of technical proficiency and leadership abilities. They need to be able…

Understanding the Critical Flaw in VMware Aria Operations for Networks The technology world was recently hit with the disclosure of a critical flaw in the popular networking system, VMware Aria Operations for Networks (previously known as vRealize Network Insight). A proof-of-concept (PoC) exploit code for this vulnerability has been made available, raising concerns amongst cybersecurity…

Meeting with Cybersecurity Veteran Ryan Davis In an enlightening exchange, Augustin Kurian, Editor-in-Chief of The Cyber Express, recently sat down with Ryan Davis to discuss the world of cybersecurity.Currently serving as the Chief Information Security Officer (CISO) at NS1, Davis is a well-respected figure in the field, with over 15 years of experience in IT…

Okta Warns of Social Engineering Attacks Aimed at Obtaining Admin Permissions Identity services provider Okta recently sent waves through the cybersecurity community, as it warned about increasing instances of sophisticated social engineering attacks against IT service desks at multiple US companies. These threat actors are using multi-pronged strategies to fool service desk personnel into resetting…

Threat Actors Exploit Poorly Secured MS SQL Servers to Deliver Ransomware In the rapidly evolving sphere of cybersecurity, threat actors are always on the lookout for vulnerabilities to exploit. A recent case in point is the exploitation of poorly secured Microsoft SQL (MS SQL) servers to deliver Cobalt Strike and a ransomware strain known as…

The Gravity of Compromised Credentials in Cyber Security In the relentless landscape of cyber threats, antagonists are frequently creating diverse tools to puncture security defenses and capture delicate data. Curiously, one of their most formidable weapons is not malicious code but simply stolen or weak usernames and passwords. This article delves into the gravity of…