--- title: Morphisec Cybersecurity Blog | Jay Kurup description: Cybersecurity trends and news, with info about Morphisec, breach prevention, and zero trust endpoint, server, and workload security. --- Recent Webinar: Building an Adaptive Cyber Resilient Cloud ![arrow-white](https://www.morphisec.com/hubfs/arrow-white.svg) ![arrow-white](https://www.morphisec.com/hubfs/arrow-white.svg) [![Watch now](https://no-cache.hubspot.com/cta/default/1534169/6359793e-b232-4b79-9da5-b929fc3dc7aa.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/6359793e-b232-4b79-9da5-b929fc3dc7aa) ![close](https://www.morphisec.com/hubfs/close.svg) ![search_icon](https://www.morphisec.com/hubfs/search_icon.svg) [![Morphisec-Logo](https://www.morphisec.com/hubfs/Morphisec-Logo.svg "Morphisec-Logo")](http://www.morphisec.com) ![blog](https://www.morphisec.com/hubfs/blog.svg) [![Read the Blog](https://no-cache.hubspot.com/cta/default/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360) [![Get A Demo](https://no-cache.hubspot.com/cta/default/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3) [![Morphisec-Logo](https://www.morphisec.com/hubfs/Morphisec-Logo.svg "Morphisec-Logo")](http://www.morphisec.com) ![search_icon](https://www.morphisec.com/hubfs/search_icon.svg) - ![blog](https://www.morphisec.com/hubfs/blog.svg) [![Read the Blog](https://no-cache.hubspot.com/cta/default/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/3c83d6d5-0c56-47b7-8aee-ae6edf73c360) - [![Get A Demo](https://no-cache.hubspot.com/cta/default/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/d4f17ebf-d8a2-49c3-9bca-a8f8112b45f3) # BLOGS By Jay Kurup Cybersecurity News, Threat Research, and more from the Team Spearheading the Evolution of Endpoint Security ## [Windows Server 2012 End of Life –– How do You Secure Legacy Servers?](https://1534169.hs-sites.com/how-do-you-secure-windows-server-2012-and-other-windows-legacy-servers) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on October 21, 2024 [![Windows Server End of Life](https://www.morphisec.com/hubfs/Managing%20Microsoft%20Server%20-blog_1200x628_v.2.1%20%281%29.png) ](https://1534169.hs-sites.com/how-do-you-secure-windows-server-2012-and-other-windows-legacy-servers) In late 2023, Microsoft Windows Server 2012 and 2012 R2 reached their end of life. Microsoft is ending free updates, bug fixes, and technical support to an operating system still used in hundreds of thousands of enterprise servers. [Read More **](https://1534169.hs-sites.com/how-do-you-secure-windows-server-2012-and-other-windows-legacy-servers) ## [Dethroning Ransomware: Prominent Attacks Stopped by Morphisec](https://1534169.hs-sites.com/dethroning-ransomware-prominent-attacks-stopped-by-morphisec) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on October 15, 2024 [![](https://www.morphisec.com/hubfs/Prominent%20attacks%20-blog_1200x628_v.1.4.png) ](https://1534169.hs-sites.com/dethroning-ransomware-prominent-attacks-stopped-by-morphisec) Ransomware has become one of the most prevalent and damaging forms of cybercrime in recent years, affecting businesses, governments and individuals worldwide. The 2024 [Verizon Data Breach Investigations Report](https://www.verizon.com/business/resources/reports/dbir/) highlights ransomware as one of the... [Read More **](https://1534169.hs-sites.com/dethroning-ransomware-prominent-attacks-stopped-by-morphisec) ## [Threat Analysis: Morphisec Protects Against PEAKLIGHT In-Memory Malware](https://1534169.hs-sites.com/threat-analysis-peaklight-in-memory-malware) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on September 10, 2024 [![Peaklight Threat Analysis](https://www.morphisec.com/hubfs/PEAKLIGHT_1200x628_v.1.1%20%281%29.png) ](https://1534169.hs-sites.com/threat-analysis-peaklight-in-memory-malware) Mandiant cybersecurity researchers [recently released a blog on a memory-only dropper](https://cloud.google.com/blog/topics/threat-intelligence/peaklight-decoding-stealthy-memory-only-malware/) which uses a complex multi-stage infection process. This PowerShell-based downloader is being tracked as PEAKLIGHT. Mandiant researcher findings note that this... [Read More **](https://1534169.hs-sites.com/threat-analysis-peaklight-in-memory-malware) ## [Preventing Threats Before Infiltration: Morphisec AMTD in Action](https://1534169.hs-sites.com/preventing-threats-before-infiltration-morphisec-amtd-in-action) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on August 29, 2024 [![Preventing Threats before Infiltration](https://www.morphisec.com/hubfs/PreventingThreats-MTD_1200x628_v.2.2-ezgif.com-png-to-webp-converter.webp) ](https://1534169.hs-sites.com/preventing-threats-before-infiltration-morphisec-amtd-in-action) The evolution of cybersecurity has been a journey of increasingly sophisticated defense innovations. It began with basic anti-virus (AV) software, which relied on static analysis to identify known threats by scanning binaries and files.  [Read More **](https://1534169.hs-sites.com/preventing-threats-before-infiltration-morphisec-amtd-in-action) ## [CVE-2024-38173: Outlook Form Injection RCE Vulnerability Patched](https://1534169.hs-sites.com/cve-2024-38173-form-injection) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on August 13, 2024 [![cve-2024-38173](https://www.morphisec.com/hubfs/Injection%20RCE_1200x628._02.0.png) ](https://1534169.hs-sites.com/cve-2024-38173-form-injection) As part of our ongoing efforts to identify newer vulnerabilities in Microsoft Office applications, Morphisec researchers have discovered two additional critical vulnerabilities in the Microsoft Outlook application which were reported to Microsoft... [Read More **](https://1534169.hs-sites.com/cve-2024-38173-form-injection) ## [Adaptive Cyber Resilience Best Practices](https://1534169.hs-sites.com/adaptive-cyber-resilience-best-practices) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on May 28, 2024 [![Achieve Adaptive Cyber Resilience](https://www.morphisec.com/hubfs/Achieving%20Adaptive%20Cyber%20Resiliency.png) ](https://1534169.hs-sites.com/adaptive-cyber-resilience-best-practices) The cyber threat landscape is undeniably complex and dynamic. Traditional cybersecurity measures are struggling to detect and stop attacks before they can cause damage. The [IBM Cost of a Data Breach Report for 2023](https://www.ibm.com/reports/data-breach) found that only one-third of... [Read More **](https://1534169.hs-sites.com/adaptive-cyber-resilience-best-practices) ## [Threat Bulletin – New variant of IDAT Loader](https://1534169.hs-sites.com/threat-bulletin-new-variant-idat-variant) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on April 24, 2024 [![IDAT Loader Header](https://www.morphisec.com/hubfs/ThreatBulletiin_New_IDAT_Loader_3.jpg) ](https://1534169.hs-sites.com/threat-bulletin-new-variant-idat-variant) Morphisec has successfully identified and prevented a new variant of [**IDAT loader**](https://1534169.hs-sites.com/unveiling-uac-0184-the-remcos-rat-steganography-saga). This loader is used to deliver a range of malware payloads based on the attacker's assessment of the victim's system. Distinguished by its modular architecture, IDAT... [Read More **](https://1534169.hs-sites.com/threat-bulletin-new-variant-idat-variant) ## [Threat Bulletin – CVE-2024-2883](https://1534169.hs-sites.com/cve-2024-2883) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on April 3, 2024 [![](https://www.morphisec.com/hubfs/CVE-2024-2883.png) ](https://1534169.hs-sites.com/cve-2024-2883) CVE-2024-2883 is a critical vulnerability found in ANGLE, a component of Google Chrome and Microsoft Edge. The vulnerability is exploitable via crafted HTML pages, allowing remote attackers to exploit heap corruption. The potential impact is high,... [Read More **](https://1534169.hs-sites.com/cve-2024-2883) ## [Cracking Akira Ransomware: Prevention and Analysis by TTPs](https://1534169.hs-sites.com/akira-ransomware-prevention-and-analysis) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on February 20, 2024 [!["Cracking Akira Ransomware", next to a screenshot of the Akira ransomware console.](https://www.morphisec.com/hubfs/Morphisec_Blog.banner_Akira.Ransomware_v.3.3.png) ](https://1534169.hs-sites.com/akira-ransomware-prevention-and-analysis) This blog examines the Akira Ransomware as a Service (RaaS) group, to understand their Tactics, Techniques, and Procedures (TTPs), and validate how Morphisec’s patented Anti-Ransomware solution powered by Automated Moving Target Defense (AMTD) can... [Read More **](https://1534169.hs-sites.com/akira-ransomware-prevention-and-analysis) ## [Threat Bulletin – CVE-2023-7024](https://1534169.hs-sites.com/threat-bulletin-cve-2023-7024) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on January 8, 2024 [![CVE-2023-7024 Threat Bulletin](https://www.morphisec.com/hubfs/CVE-2023-7024%20Threat%20Bulletin.jpg) ](https://1534169.hs-sites.com/threat-bulletin-cve-2023-7024) Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. [Read More **](https://1534169.hs-sites.com/threat-bulletin-cve-2023-7024) ## [Morphisec Fortifies Capabilities with Next-gen Risk-Based Vulnerability Prioritization](https://1534169.hs-sites.com/morphisec-next-gen-risk-based-vulnerability-prioritization) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on November 28, 2023 [![Vulnerability Risk Management](https://www.morphisec.com/hubfs/Next-Gen%20Vulnerability%20Management-1.jpg) ](https://1534169.hs-sites.com/morphisec-next-gen-risk-based-vulnerability-prioritization) Security leaders are acutely aware of vulnerability risks. Organizations continue to allocate thousands of dollars to periodic vulnerability assessments, and thousands more to technology and resources for mitigation — yet vulnerability-based breach... [Read More **](https://1534169.hs-sites.com/morphisec-next-gen-risk-based-vulnerability-prioritization) ## [Analysis and Prevention of the WebP (libwebp) Zero-Day Vulnerability](https://1534169.hs-sites.com/analysis-and-prevention-of-the-webp-libwebp-zero-day-vulnerability) Posted by [Jay Kurup](https://1534169.hs-sites.com/author/jay-kurup) on October 6, 2023 [![CVE-2023-4863 WebP Vulnerability Protection](https://www.morphisec.com/hubfs/CVE-2023-4863%20WebP%20Vulnerability.jpg) ](https://1534169.hs-sites.com/analysis-and-prevention-of-the-webp-libwebp-zero-day-vulnerability) Apple Security Engineering and Architecture (SEAR) and the Citizen Lab opened a pair of critical vulnerabilities relating to the abuse of WebP images which could lead to exploitation of Google Chrome and Chromium-based browsers, as well as the... [Read More **](https://1534169.hs-sites.com/analysis-and-prevention-of-the-webp-libwebp-zero-day-vulnerability) [ All posts ](https://1534169.hs-sites.com/all) ### Subscribe to our blog Stay in the loop with industry insight, cyber security trends, and cyber attack information and company updates. [![New call-to-action](https://no-cache.hubspot.com/cta/default/1534169/e098d357-1710-4cfe-8901-19c93de122f4.png)](https://cta-redirect.hubspot.com/cta/redirect/1534169/e098d357-1710-4cfe-8901-19c93de122f4) ### Search Our Site ### Recent Posts ### Posts by Tag - [Automated Moving Target Defense (157)](https://1534169.hs-sites.com/topic/automated-moving-target-defense) - [Threat Research (135)](https://1534169.hs-sites.com/topic/threat-research) - [Cyber Security News (132)](https://1534169.hs-sites.com/topic/cyber-security-news) - [Morphisec Labs (127)](https://1534169.hs-sites.com/topic/morphisec-labs) - [Morphisec News (54)](https://1534169.hs-sites.com/topic/morphisec-news) - [Adaptive Exposure Management (14)](https://1534169.hs-sites.com/topic/adaptive-exposure-management) - [Defense-in-Depth (13)](https://1534169.hs-sites.com/topic/defense-in-depth) - [Ransomware (12)](https://1534169.hs-sites.com/topic/ransomware) - [Preemptive Security (11)](https://1534169.hs-sites.com/topic/preemptive-security) - [Gartner (10)](https://1534169.hs-sites.com/topic/gartner) - [Continuous Threat Exposure Management (CTEM) (9)](https://1534169.hs-sites.com/topic/continuous-threat-exposure-management-ctem) - [Microsoft (8)](https://1534169.hs-sites.com/topic/microsoft) - [In-Memory Attacks (7)](https://1534169.hs-sites.com/topic/in-memory-attacks) - [Healthcare Cybersecurity (6)](https://1534169.hs-sites.com/topic/healthcare-cybersecurity) - [Advanced Threat Defense (5)](https://1534169.hs-sites.com/topic/advanced-threat-defense) - [Financial Cybersecurity (5)](https://1534169.hs-sites.com/topic/financial-cybersecurity) - [Legacy Security (5)](https://1534169.hs-sites.com/topic/legacy-security) - [Artificial Intelligence (4)](https://1534169.hs-sites.com/topic/artificial-intelligence) - [Linux Cybersecurity (4)](https://1534169.hs-sites.com/topic/linux-cybersecurity) - [Fileless Malware (3)](https://1534169.hs-sites.com/topic/fileless-malware) - [Threat and Vulnerability Management (2)](https://1534169.hs-sites.com/topic/threat-and-vulnerability-management) - [Managed Service Providers (1)](https://1534169.hs-sites.com/topic/managed-service-providers) [See all](https://1534169.hs-sites.com/author/jay-kurup#) - [![X](https://1534169.hs-sites.com/hubfs/x_twitter_icon.svg)](https://twitter.com/morphisec) - [![Linkedin](https://1534169.hs-sites.com/hubfs/linkedin_icon.svg)](https://www.linkedin.com/company/morphisec) - [![Youtube](https://1534169.hs-sites.com/hubfs/youtube_icon.svg)](https://www.youtube.com/channel/UCe48cR5xTxPJSYMjG-So7Rw) © 2026 Morphisec Ltd. | All rights reserved ![iso27001-(2)](https://www.morphisec.com/hubfs/iso27001-(2).png)