News

Determining the Scope of the Phishing Campaigns To better understand the scope of these phishing campaigns, we investigated the IP address and email address associated with the malicious activities. IP Address Analysis: The IP address 191.252.0.9 used by the attacker… Read More »Unveiling American Express Phishing Scams: MerkleFence Analysis Insights: Part 2

Fortinet, a global cybersecurity company renowned for its network security appliances and security subscription services, has faced numerous vulnerabilities over the years, often exploited in ransomware attacks and zero-day exploits. Notably, vulnerabilities in FortiOS, FortiProxy, and FortiSwitch have been exploited… Read More »Fortinet RCE Vulnerability

Phishing emails have been a persistent threat for quite some time. While the incidence of successful phishing attacks has slightly declined due to increased user education, improved defenses, and use of AI and ML in threat detection and prevention, they… Read More »Unveiling American Express Phishing Scams: MerkleFence Analysis Insights: Part 1

This is the second entry in the OWASP (Open Web Application Security Project) Top 10 2021. It was previously known as Sensitive Data Exposure. It focuses on weaknesses or vulnerabilities related to cryptographic mechanisms which often lead to sensitive data… Read More »Cryptographic Failures in Web Applications

Cloudflare is a globally recognized software company that powers 20% of the web. Cloudflare is renowned for its range of services targeted at enhancing the security of the internet. Through its extensive portfolio, Cloudflare empowers websites and online services to… Read More »Summary of Cloudflare’s 2024 API Security Report

With the recent technological advances, continued migration to the cloud and the shift to remote/hybrid work accelerated by the 2020 global pandemic, traditional security measures do not cut it anymore. These security measures which operate on the principle of “trust… Read More »Zero Trust Security Model