I had the honor of serving on a Federal Reserve committee this past winter to define synthetic identity fraud. The result of this effort was the...
DevSecOps is (appropriately) emerging as the de facto pattern for managing and deploying applications and managing infrastructure. Security controls, deployments, and virtually all other aspects of enterprise systems...
The Microsoft Detection and Response Team (DART) says it detected an increase in password spray attacks targeting privileged cloud accounts and high-profile identities such as C-level...
Menlo Labs team has discovered two separate campaigns dropping REvil and SolarMarker backdoors. Both the campaigns are employing the SEO poisoning method to spread payloads in...
The old-time war-driving technique is still proving an efficient way to crack WiFi passwords. Recently, a researcher in Israel was able to crack 70% of WiFi...
The North Korea-linked Lazarus APT group is active again and this time it is targeting the IT supply chain. The threat actor is using a multi-platform...
A Chrome 95 update released by Google on Thursday patches two actively exploited Chrome vulnerabilities, as well as flaws that were disclosed recently at a Chinese...
A cyberattack on Papua New Guinea’s finance ministry briefly disrupted government payments and operations, officials said late Thursday. Ransomware infiltrated and compromised a core server at...
Twelve high-value individuals suspected of spreading LockerGoga, MegaCortex, Dharma and other ransomware across 71 countries have been targeted in Ukraine and Switzerland. Twelve people have been...
Apple has delivered a barrage of security updates for most of its devices this week, and among the vulnerabilities fixed are CVE-2021-30892, a System Integrity Protection...