Breach Intelligence (CVE)

For the last 2 weeks, Firecompass Research Team focused on 9 brand-new vulnerabilities which are Critical in severity, published by the global security research community. Ransomwares are targeting many of these vulnerabilities to get initial Access. All the vulnerabilities have Proof of Concepts (PoC) exploit code publicly available on Github making it is easy for… Read More »(CVE Update March 2023) New and Critical CVEs Exploited In Wild

Last month, PayPal was hit by a credential stuffing attack, a type of cyber-attack where hackers use lists of stolen login credentials, typically obtained from data breaches or other sources, to gain access to user accounts on various platforms.  The attack occurred between December 6 and December 8, and the company was able to detect… Read More »Lessons from PayPal’s Credential Stuffing Attack That Affected 35K Users

In this FireCompass Quarterly Breach Report, we will look into recent Data Breaches, Ransomware attacks and also highlight the trends observed from the data breaches and attacks that happened in the first half of 2021. This Breach report covers publicly disclosed data compromise events reported between July’21 till Oct’ 21. In the first half of… Read More »Breach Trends and Ransomware Statistics – July – Oct 2021

Ransomware attacks globally have gone up by 102% in 2021 compared to last year.In 2021 alone, cybercrime has been predicted to cause damages worth over $6 Trillion. Most common tactics Ransomware attackers are using are phishing campaigns, RDP vulnerabilities. We will track the Ransomware attacks each month to share via blog. To keep informed about… Read More »Breach Trends and Ransomware Statistics: June – July 21

REvil ransomware conducted a massive attack through the Kaseya VSA patch and remote management software that encrypted MSPs worldwide and their customers. The zero-day Kaseya vulnerability was discovered by DIVD researcher Wietse Boonstra and was assigned the CVE-2021-30116 identifier. Kaseya states that REvil used the Zero-day vulnerability in their on-premise VSA service to conduct the… Read More »Kaseya VSA Ransomware Attack 2021