Blogs

Home » Blog
David Kasabji Principal Threat Intelligence Engineer
Blog

New Critical Vulnerability in Cisco IOS XE Software Poses Cybersecurity Concerns

18. Oct 2023
CVE-2023-20198 vulnerability affects physical and virtual devices running Cisco IOS XE software with the HTTP or HTTPS Server feature enabled​.
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Enumeration Attacks: A Deep Dive into Threat Actors Generating Valid Payment Data

11. Oct 2023
Enumeration attacks, especially banking identification number (BIN) generation attacks, enable threat actors to produce and validate payment card numbers. These...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Adversary-In-The-Middle Attack (AiTM): A novel way to evade MFA

5. Oct 2023
In the vast realm of cyber threats, a relatively newer but impactful method has emerged: Adversary In the...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Understanding Vulnerability Lifecycle to Better Combat Exploits

21. Sep 2023
If you care about cybersecurity, you surely have heard the term ‘software vulnerability.’ But it can quickly happen...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

CL0P Group – Analysis of European’s rising ransomware threat

21. Sep 2023
If you were following trends in the cyber threat landscape for the past few months, or actually the...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

A look into Living off the Land adversarial technique

1. Sep 2023
Recently, you may have noticed several cybersecurity news sites citing Microsoft’s article on Flax Typhoon’s (threat actors) stealthiness while performing...
Read more
Jure Planinšek Head of Compliance and Legal
Blog

Diligent Management and Cybersecurity

17. Feb 2023
Leadership should be familiar with and understand cyber risks and their management, even though they may not have...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

How could AI simplify malware attacks, and why is this worrying?

26. Jan 2023
AI can simplify malware attacks, lowering costs, giving cybercriminals an advantage over insufficiently secured targets.
Read more
Matevž Mesojednik Security Operations Center (SOC) Manager
Blog

Three Lessons for Better Cybersecurity in 2023

20. Dec 2022
From the point of view of Conscia's Security Operations Center (SOC), 2022 confirmed the fact that managing cyber...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Digital Forensics: Discovering Threat Actor’s traces using Recycle Bin

12. Dec 2022
Criminals don't like to leave traces. In the cyber world, that means deleting their malicious software from your...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Season’s Greetings from Cybercriminals

25. Nov 2022
Cybercrime is on the rise during the holiday season. Cybercriminals take advantage of Black Friday, Cyber Monday, and...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Phishing as a Service (PHaaS) – an Effective Attack Vector for All Threat Actors

25. Nov 2022
Phishing has professionalized. It is literally available to criminals in a »as a service« model, and the most...
Read more
Dušan Vaupotič
Dušan Vaupotič IT Manager
Blog

Remote Desktop Applications` Security

13. Nov 2022
Remote Desktop Applications (RDA) usage is growing and with that the importance of keeping them secure. Learn about...
Read more
Blog

Security of Remote Desktop Applications

21. Oct 2022
Remote work is great for many reasons. But for hackers, it is another opportunity for attack. How to...
Read more
Jakob Premrn Cybersecurity Analyst
Blog

The Importance of Identity-Oriented Cybersecurity

21. Oct 2022
Why should you re-focus your cyber defense from on-premises security to identity-oriented security? Listen the podcast and learn...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

New 0-day vulnerabilities in Microsoft Exchange Server actively exploited

30. Sep 2022
Two reported 0-day vulnerabilities affecting Microsoft Exchange Server 2013, 2016, and 2019 (on-prem) tracked as CVE-2022-41040 and CVE-2022-41082...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Insider Threats: What are they and how to mitigate them

20. Sep 2022
Organizations' own personnel pose one of the biggest threats to their security. Read the article to learn how...
Read more
Jakob Premrn Cybersecurity Analyst
Blog

The Importance of Identity-Oriented Cybersecurity

14. Sep 2022
Why should you re-focus your cyber defense from on-premises security to identity-oriented security? Read the article and learn...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

How to detect Malware Persistency (part 1)

26. Aug 2022
Malware persistency is a mechanism adversaries use to ensure foothold in a breached environment. Read the article to...
Read more
David Kasabji Principal Threat Intelligence Engineer
Blog

Diving Deep: Malware Injection Techniques

27. Jul 2022
Malware Injection Techniques This is the first entry in the Malware Injection Techniques article series that we will be writing...
Read more
1 2 3 4