Secora Consulting

Apr 3, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 14

This Weeks Headlines Oracle Reports Second Cybersecurity Breach Hackers Exploit Legacy Stripe API to Validate Stolen Credit Cards UK Software Provider Fined £3M Over Ransomware Attack That Exposed Customer Data Hackers Exploit WordPress MU-Plugins Feature to Conceal Malware in Compromised Sites BlackLock Ransomware Operators Exposed After Leaking Their Own Decryption Keys Google Patches ‘ImageRunner’ Vulnerability in Cloud Run Oracle Reports Second Cybersecurity Breach Oracle has informed clients of a second cybersecurity breach within a month, where a hacker accessed a legacy system and stole old customer log-in credentials.

Apr 2, 2025 Penetration Test

What to Expect from a Penetration Test Report

Penetration testing is a crucial component of any organisation’s cybersecurity strategy, helping businesses to identify and address vulnerabilities before they can be exploited by attackers. But once the testing is complete, what comes next? How do you interpret the findings, how should you prepare for a re-test of the big issues discovered and what should you expect from a penetration test report? Navigating Your Penetration Testing Report Whether you’re a seasoned IT professional or new to the world of cybersecurity, understanding the structure and significance of a pen testing report will help you make informed decisions and take actionable steps toward protecting your systems from potential threats.

Mar 27, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 13

This Weeks Headlines Free Online File Converters Spreading Malware Disguised as Useful Tools RedCurl Group Shifts from Espionage to Ransomware with QWCrypt Deployment Windows 11 Update KB5051987 Causes Veeam Recovery Connection Errors Hackers Exploit ‘Atlantis AIO Multi-Checker’ for Credential Stuffing Across 140+ Platforms RedCurl Group Shifts from Espionage to Ransomware with QWCrypt Deployment Critical RCE Vulnerabilities Discovered in Ingress NGINX Controller for Kubernetes Over 150,000 Websites Compromised by JavaScript Supply Chain Attack Next.

Mar 21, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 12

This Weeks Headlines Unpatched Windows Zero-Day Exploited by Multiple State-Sponsored Groups Since 2017 Active Exploitation of Cisco Smart Licensing Utility Vulnerabilities Over 300 Malicious ‘Vapor’ Apps on Google Play Amass 60 Million Downloads Critical Fortinet Vulnerability Actively Exploited in Ransomware Attacks Compromised GitHub Action Exposes CI/CD Secrets in Over 23,000 Repositories Hackers Exploit Critical PHP Flaw to Deploy Quasar RAT and XMRig Miners Unpatched Windows Zero-Day Exploited by Multiple State-Sponsored Groups Since 2017 A critical, unpatched Windows zero-day vulnerability, tracked as ZDI-CAN-25373, has been actively exploited by 11 state-sponsored threat groups from nations including China, Iran, North Korea, and Russia since 2017.

Mar 14, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 11

This Weeks Headlines PCI SSC Release Information Supplement on Payment Page Security and Preventing E-Skimming Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback Over One-Third of Irish Households Experienced Cybercrime in the Past Year Microsoft Patches 57 Security Flaws, Including Six Actively Exploited Zero-Days New Vulnerabilities in ruby-saml Library Enable Potential Account Takeovers DeepSeek R1 AI Model Capable of Generating Malware Code with Prompt Engineering Meta Warns of Actively Exploited FreeType Vulnerability PCI SSC Release Information Supplement on Payment Page Security and Preventing E-Skimming The PCI Security Standards Council (PCI SSC) has introduced a new information supplement on “Payment Page Security and Preventing E-Skimming – Guidance for PCI DSS Requirements 6.

Mar 7, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 10

This Weeks Headlines Exploited VMware ESXi Zero-Day Vulnerabilities Expose Thousands to Ransomware Attacks ‘Bulletproof’ Hosting Provider Allegedly Routes Operations Through Kaspersky Lab Networks Over 1,000 WordPress Sites Compromised by JavaScript Backdoors Eleven11bot Botnet Infects Over 86,000 IoT Devices, Primarily Security Cameras and NVRs Hunters International Ransomware Group Claims Hack on Tata Technologies Exploited VMware ESXi Zero-Day Vulnerabilities Expose Thousands to Ransomware Attacks Recent reports have identified that tens of thousands of VMware ESXi instances are vulnerable to three zero-day vulnerabilities which have been actively exploited in the wild:

The latest news and developments

Latest Blogs and News