Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

DCRat Targets Users with HTML Smuggling

DCRat (also known as Dark Crystal RAT) is a modular remote access Trojan (RAT) which is offered as malware-as-a-service (MaaS) and has been around since 2018. It is written in C# and has typical RAT and information stealing capabilities, such as executing shell commands, logging keystrokes, exfiltrating files and credentials, among others.

Rubrik and Pure Storage Join Forces to Deliver Complete Cyber Resilience of Mission-Critical Data

Data has become organizations' lifeblood. However, with the exponential growth of data comes unprecedented challenges in securing it across both short-term and long-term storage. To make matters worse, cyber threats are evolving rapidly, and businesses need robust solutions to safeguard their critical data. We're excited to announce a groundbreaking partnership between Rubrik and Pure Storage.

Best Practices for Preventing BlackSuit Ransomware Infections

Are you confident that your security tools are foolproof? Think again. BlackSuit ransomware is exploiting overlooked vulnerabilities, slipping through defenses even in 53 well-protected organizations. This isn’t just another cyber threat—it’s a sophisticated adversary that rewrites the rules. Your firewalls, antivirus, and strict protocols might not be enough to stop it. BlackSuit is engineered to find gaps you didn’t know existed, bypassing even advanced security postures.

Why DORA Is a Game-Changer for Financial Services

In this episode of CISO Conversations: EU Data Regulations, Richard Cassidy, EMEA Field CISO at Rubrik, is joined by Anna Delaney, Director of Productions at Information Security Media Group (ISMG), to explore why the Digital Operational Resilience Act (DORA) makes operational resilience a priority for financial services organizations. They discuss how DORA will impact your financial institution, how to best prepare for DORA and improve operational resilience, and how to increase oversight and accountability of third parties in the supply chain.

How To Detect Spyware on an Android Phone

You can detect spyware on an Android phone by recognizing the following signs: your phone suddenly becomes slow, the battery drains quickly, unfamiliar apps appear, it overheats frequently, you receive strange messages or it makes weird noises during phone calls. Spyware is a form of malware installed onto your device without your knowledge. Once spyware is installed, a cybercriminal can spy on you and collect private information like passwords or credit card numbers.

How Government Agencies Can Regain Control Over Who Has Access to Sensitive Public Data

We’re thrilled to announce the availability of User Intelligence on Rubrik Security Cloud - Government. Rubrik User Intelligence empowers Fed and SLED organizations with visibility into user activities, access patterns, and potential risks. This level of insight is critical for enforcing least-privilege access to sensitive data, before it results in breaches.

Chinese Hackers Target APAC Governments with EAGLEDOOR Malware Exploiting GeoServer Flaw

In a sophisticated cyber espionage campaign, a group of Chinese hackers has exploited a critical vulnerability in GeoServer to target government organizations across the Asia-Pacific (APAC) region. This operation, linked to the advanced persistent threat (APT) group known as Earth Baxia, highlights the evolving landscape of cyber threats facing sensitive sectors, including government and energy.

McAfee Discovers New Phishing Campaign Targeting GitHub Users

A phishing campaign is targeting GitHub users with phony CAPTCHA pages, according to researchers at McAfee. The phishing emails ask users to address a security vulnerability in a GitHub repository that they recently contributed to, and contain a link to find more information about the alleged vulnerability. This link leads to a fake CAPTCHA page that attempts to trick them into installing malware.