Skip to main content

İki kritik PHP güvenlik açığı, yamalar yayınlanmadan önce açığa çıktı: Kurumların şimdi atması gereken adımlar.

TrendAI™ Deep Research

spark

Featured Articles

Data privacy & regulation
PII Leaks and Other Risks From Unsecure E-Commerce APIs

Our research takes an in-depth look at the security flaws that we found in the logistics API implementation of e-commerce platforms that can potentially leak the private information of consumers.

Read Article
Ransomware & extortionPhishing & BEC
Ransomware Spotlight: Black Basta

A relative newcomer in 2022, the Black Basta ransomware group has wasted no time making a name for itself by upgrading its toolset and racking up its victim count around the world mere months since its ransomware was first detected. Learn more about this new ransomware and fortify your organization’s defenses against this threat.

Read Article
Cybercriminal underground
Looking Into the Void: Probing a Top Bulletproof Hosting Service

Cybercriminal groups cannot operate independently. To keep their operations up and running, they need specific services provided by third parties. We investigate one such business that has been integral to the activities of a number of high-profile gangs.

Read Article
Cyber crime
Metaworse? The Trouble with the Metaverse

Innovators are diving into a new and immersive virtual space, but with new technology comes new threats. We bring forward possible problematic issues that metaverse pioneers should be wary of.

Read Article
Ransomware & extortionPhishing & BEC
Ransomware Spotlight: BlackByte

BlackByte is a ransomware group that has been building a name for itself since 2021. Like its contemporaries, it has gone after critical infrastructure for a higher chance of getting a payout. What techniques sets it apart?

Read Article
Cryptocurrency
The Crypto-Monetized Web: A Forward-Looking Thought Experiment

In past decades, we have seen how the web has drastically evolved. From the static, read-only version of Web 1.0, we have witnessed its transformation to its present mode — as the dynamic, interactive, and content creator-driven iteration that is Web 2.0.

Read Article
Cloud security
An Analysis of Azure Managed Identities Within Serverless Environments

We examine Azure’s Managed Identities service and its security capability in a threat model as developers’ go-to feature for managing secrets and credentials.

Read Article
Cyber crimeAPTs
Exposing Earth Berberoka: A Multiplatform APT Campaign Targeting Online Gambling Sites

Our research uncovers the tools and techniques used by Earth Berberoka across different platforms to target online gambling sites.

Read Article
Ransomware & extortionBy The Numbers
LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

This report delves into the ransomware threat landscape of the first quarter of 2022, with a focus on the three most successful ransomware families and the types of industries and organizations that were affected by their attacks.

Read Article
Ransomware & extortion
Ransomware Spotlight: RansomEXX

RansomEXX is a ransomware variant that gained notoriety after a spate of attacks in 2020 and continues to be active today. With its targeted nature and history for choosing high-profile victims, we shine our spotlight on RansomEXX to reveal its tactics, techniques, and procedures.

Read Article