GitHub Actions typosquatting: Supply chain attack-in-waiting
“This level of access can be dangerous if the action is malicious – it can install malware, steal secrets, or make secret changes to your […]
Cryptocurrency
CISO budget survey: Slightly increasing in 2024
Those sectors seeing an increase in security budgets are financial services, technology, sales and marketing, and legal. Those seeing declines are health care, business services, […]
White House products BGP raises ‘national security concerns’ as it unveils roadmap for change
Apart from this, the road map identifies various blocks that slow down BGP switching for a long time. One is that the negative effects of […]
There is no evidence that TP-Link routers are a threat to Chinese security
One research report cited by O’Rielly comes from Check Point, which found that the Chinese government-sponsored APT group that tracks the Camaro Dragon installed a […]
Hackers make YubiKeys with a new side-channel exploit
In a successful attack scenario, a bad actor can steal a user’s login ID and password (through phishing or other methods), and gain virtual access […]
New ALPHV-like ransomware targets VMware ESXi servers
Trusec researchers recently discovered a new ransomware-as-a-service group called Cicada3301. The gang provides its affiliates with a dual fraud platform that includes both a ransomware […]
‘Extraordinary’ Voldemort cyberespionage attack mimics tax authorities
Researchers have identified attacks impersonating tax authorities from several countries to compromise organizations and release a custom backend program called Voldemort. While the campaign uses […]
Attackers are exploiting vulnerabilities at a record pace—here’s what to do about it
“Another day, another vulnerability” is a common refrain among security groups around the world. One of the most interesting findings from our latest Fortinet Global […]
Thousands of abandoned PyPI projects can be hijacked: Report
“The problem is that while this is being discussed, attackers are already able to use this method to get code usage from many PyPI users […]
Building a Culture of Email Security Awareness
Human error remains the biggest risk for organizations when it comes to cyber threats. In fact, according to Proofpoint’s 2024 Voice of the CISO report, […]