China-Linked ToddyCat APT Pioneers Novel Spyware
A threat group that may have been among the first to exploit the ProxyLogon zero-day vulnerability in Exchange servers last year is using a pair of dangerous and unprecedented malware…
Category: Green tech
Regulation, Human Costs Will Create Stormy Cybersecurity Weather Ahead
Security teams should prepare for what researchers say will be a challenging environment until 2023, with increased pressure from public regulators, partners and threat actors. Gartner began its Security &…
Phishing awareness training: Help your employees avoid the hook
Educating employees on how to detect phishing attacks can strike a much-needed blow to network defenders Security by design has long been something of a holy grail for cybersecurity professionals….
Why Financial Institutions Must Double Down on Open Source Investments
Following the trio of Log4J vulnerabilities and the recent compromise between two open source libraries in the NPM ecosystem and one in Spring Core, supply chain security weighs heavily on…
BRATA Android Malware Evolves Into an APT
An Android-based banking Trojan known as BRATA (short for Brazilian RAT Android) has evolved to incorporate new phishing techniques and features to acquire GPS, overlay, SMS, and device management licenses….
It’s Time to Up the Ante
The fact that we continue to rely on passwords so far into the digital age is more than a little jarring. These alphanumeric scraps, similar to digital skeleton keys, once…
56 Vulnerabilities Discovered in OT Products From 10 Different Vendors
A new analysis of data from multiple sources has revealed a total of 56 vulnerabilities in OT products from 10 vendors, including notables such as Honeywell, Siemens and Emerson. Many…
Reducing Risk With Zero Trust
Zero trust is growing in popularity in corporate security because lack of trust in users by default works really well to reduce risk. But people are starting to have unrealistic…
AI Is Not a Security Silver Bullet
Much has been made of the use of artificial intelligence in security. Some experts will tell you that it is the biggest stand-alone key to success, while others will tell…
Open Source Software Security Begins to Mature
Companies that have an open source software (OSS) security policy tend to perform much better in self-rated readiness measures. They also tend to have dedicated teams responsible for operating software…
Capital One Attacker Exploited Misconfigured AWS Databases
The 36-year-old Seattle technician behind the infamous Capital One data breach in 2019 has been convicted of seven charges related to data theft – which can be punished with up…
Feds Take Down Russian ‘RSOCKS’ Botnet
A Russian botnet known as RSOCKS has been dismantled – but not before it infected millions of devices globally. Like many botnets, RSOCKS originally targeted the Internet of Things (IoT)…
Crypto mixers: What are they and how are they used?
How cryptomixers, also known as cryptotumblers, are used to hide the trail of digital money The term “money laundering” was coined during Al Capone’s time and has since entered the…
Why Paper Receipts are Money at the Drive-Thru – Krebs on Security
Check this handmade sign up on the front door of a shutter Jimmy Johns sandwich chain store in Missouri last week. See if you can see from the store owner’s…
Cuter Than a June Bug
Summer is here, the beaches are filling up, and even our many-legged friends are ready for a little R&R. Or maybe, just maybe, they hope to catch us with our…