Author name: admin

Most firms face cyber incidents, but lack basic cyber-security measures: CSA study

The Cyber Security Agency of Singapore (CSA) recently released some interesting statistics and findings in their inaugural Singapore Cybersecurity Health Report. The biggest item that come out of the report is that \”Many respondents cited a lack of knowledge of cyber security, as well as concerns about costs and whether they would even be a […]

Most firms face cyber incidents, but lack basic cyber-security measures: CSA study Read More »

FortiOS & FortiProxy – Out-of-bounds Write in captive portal

FortiNet have released the following about a CRITICAL Severity issue for FortiOS and FortiProxy captive portal. This issue has a CVSSv3 Score of 9.3. Summary An out-of-bounds write vulnerability [CWE-787] and a Stack-based Buffer Overflow [CWE-121] in FortiOS & FortiProxy captive portal may allow an inside attacker who has access to captive portal to execute

FortiOS & FortiProxy – Out-of-bounds Write in captive portal Read More »

Russian Hackers Breach Microsoft’s “Keys to the Kingdom”

In January this year, an alarm was raised by Microsoft Security that Russian State-Sponsored cyber-attackers (Russian-linked criminal group Midnight Blizzard (also known as Nobelium) along with other names) had breached a number of systems and email accounts. Since then, SecureSphere has been continuing to follow the unfolding story with interest. It has now come to

Russian Hackers Breach Microsoft’s “Keys to the Kingdom” Read More »

SVR (Russian Foreign Intelligence Service) cyber actors adapt tactics for initial cloud access

I thought that I would update on how cyber actors (in this case SVR cyber actors) are adapting their tactics as governments and businesses adapt the move to cloud infrastructure. This update focuses on the recent tactics, techniques and procedures (TTPs) of the group commonly known as APT29, also known as Midnight Blizzard, the Dukes

SVR (Russian Foreign Intelligence Service) cyber actors adapt tactics for initial cloud access Read More »

Scroll to Top