Top 10 ransomware groups to watch
8Base mainly uses phishing scams with malicious links to get to the beginning and, like most ransomware groups, relies on various or system utilities, third-party […]
Cryptocurrency
New Ivanti CSA bug under active exploit
In January, after a series of attacks that exploited zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure, CISA took the unusual step of […]
My TedXBillings Talk – Schneier on Security
About Bruce Schneier I am a public interest professional, working at the intersection of security, technology, and people. I have been writing about security issues […]
A new cryptomining campaign infects WebLogic servers with the Hadooken malware
Hadooken hosts cryptominer and ransomware links One of the features stored within Hadooken is a cryptocurrency mining system that is distributed across three different areas […]
Fortinet confirms breach may have leaked 440 GB of customer data
“Given the limited nature of the incident, we have not had, and do not currently believe that this incident would have a material impact on […]
Understanding and Mitigating Email Risks
Email forwarding, although a seemingly harmless and convenient feature, may pose a security and data compliance risk. If misused or left unchecked, email forwarding can […]
Aflac’s switch to pass-keys brings big business benefits
At supplemental insurance provider Aflac, protecting information collected on behalf of employees and the customers and businesses they serve is a core tenet of the […]
Mastercard Gets Recorded Future: How Will Threat Intelligence Change the Payments Industry?
“Mastercard has made significant investments in fraud prevention and technology companies over the past 10 years,” said Aaron Press, IDC’s global payment strategy research director. […]
Too many companies use non-business remote access tools on their OT networks, Claroty said
However, he added, OT security cannot be achieved with IT-centric access applications such as TeamViewer, Anydesk, or similar software. OT remote access providers include Claroty, […]
The fake recruitment campaign targeted developers using trojanized Python packages
“In an email interview with ReversingLabs, he stated that he was contacted on his LinkedIn profile and given a link to a GitHub repository as […]