Author Archives: Onsite Computing, Inc.

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance (ASA). The vulnerability, tracked as CVE-2014-2120 (CVSS score: 4.3), concerns a case of insufficient input validation in ASA’s WebVPN login page that could allow an unauthenticated, remote attacker to conduct a cross-site scripting […]

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

Cybersecurity researchers have disclosed a set of flaws impacting Palo Alto Networks and SonicWall virtual private network (VPN) clients that could be potentially exploited to gain remote code execution on Windows and macOS systems. “By targeting the implicit trust VPN clients place in servers, attackers can manipulate client behaviours, execute arbitrary commands, and gain high […]

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

The North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately conduct credential theft. “Phishing emails were sent mainly through email services in Japan and Korea until early September,” South Korean cybersecurity company Genians said. “Then, […]

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

A newly discovered malware campaign has been found to target private users, retailers, and service businesses mainly located in Russia to deliver NetSupport RAT and BurnsRAT. The campaign, dubbed Horns&Hooves by Kaspersky, has hit more than 1,000 victims since it began around March 2023. The end goal of these attacks is to leverage the access […]

Unwrapping the truth about cyberthreats: A holiday security guide for retailers

The holiday season brings tons of opportunities for retailers to thrive, but it also opens the door to increased cyber risks. With so many people shopping and transactions spiking, cybercriminals see this period as a perfect chance to strike. From sneaky phishing attempts to full-blown ransomware attacks, your business could be at risk. But don’t […]

Sleighing cyberthreats: A retailer’s guide to holiday security

The holiday season brings plenty of joy and increased sales, but with all this activity comes a heightened risk of cyberattacks. With more transactions happening than usual, cybercriminals see the holidays as the perfect time to launch attacks. From phishing emails to ransomware and bots, the threats are real and can be costly for your […]

Retailers: Don’t let the Grinch steal your cheer (and your customer data)

The holiday season is exciting for retailers, bringing a surge in customers and sales. However, with this increase comes a heightened risk of cyberattacks. Hackers know that businesses are busy and distracted during this time, making it the ideal moment to strike. From ransomware to phishing schemes, cybercriminals have a range of tactics to exploit […]

This site uses cookies to offer you a better browsing experience. By browsing this website, you agree to our use of cookies.