Cybersecurity

Browser hijacking often involves the secret installation of supplementary programs by entities ranging from legitimate software companies to cybercriminals or even a hybrid of both. This unauthorised insertion alters the browser’s behaviour without explicit user consent, compromising user privacy and security. To effectively address browser hijacking, it is essential to recognise its mechanisms, manifestations, and potential impacts on user privacy…

In 2022, crypto-jacking attacks surged nearly threefold, resulting in a substantial financial burden in the form of high electricity and cloud service for victims. As the prevalence of these attacks continues to proliferate, it’s imperative for organisations to understand the mechanisms underlying crypto-jacking and implement effective countermeasures. While legitimate crypto mining, such as bitcoin mining, is considered a lawful endeavour…

Zero trust has emerged as a foundational security strategy designed to solve the complexities of the modern IT world. This proactive model operates on the principle of “never trust, always verify,” thereby significantly enhancing cybersecurity defences in environments increasingly vulnerable to sophisticated threats. In recognition of its importance, many organisations are adopting the trust model to enhance their security posture.…

The Ping of Death (PoD) represents a significant security threat when an attacker crashes, destabilises, or freezes computers and services by targeting them with oversized data packets. This type of cyber attack generally targets vulnerabilities persisting in legacy systems, which organisations may have failed to patch adequately. Unpatched systems also remain vulnerable to such attacks, where attackers flood the target…

As the cyber landscape expands, malicious actors have evolved beyond simply breaching systems. Cyber criminals now aim to maintain an undetected presence to control the system and extract the data according to their needs. Command and Control (C2) attacks create a covert link between the compromised system and the C2 servers, enabling prolonged access. This prolonged connection allows cyber actors…