CISOs know risk management is essential for building and maintaining a resilient enterprise security posture. Yet despite their best efforts and good intentions, many security leaders continue to fall into…
Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame have resurfaced as part of new phishing campaigns. Bumblebee and Latrodectus, which are…
CISO job turnover is continuing to drop, placing security leaders looking to gain a salary increase or leave an unfulfilling role in a difficult position. Turnover in top security roles…
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via…
Singapore has rolled out new cybersecurity measures to safeguard AI systems against traditional threats like supply chain attacks and emerging risks such as adversarial machine learning, including data poisoning and…
VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation…
Russia-linked hackers have taken aim at Japan, following its ramping up of military exercises with regional allies and the increase of its defense budget. – Read More
These types of “long-lived” credentials pose a risk for users across all major cloud service providers, and must meet their very timely ends, researchers say. – Read More
The networking company confirms that cyberattackers illegally accessed data belonging to some of its customers. – Read More
This latest breach was through Zendesk, a customer service platform that the organization uses. – Read More
The emergence of novel anti-detection kits for sale on the Dark Web limit the effectiveness of a Chrome browser feature that warns users that they have reached a phishing page.…
Microsoft geht zwar nicht unter die Imker, jagt aber Kriminelle mit süßen Daten. Shuttertstock – inspiring.team Die Anzahl, Arten und Qualität von Cyberangriffen nehmen beständig zu – soweit ein alter…
The future of application security is no longer about reacting to the inevitable — it’s about anticipating and preventing attacks before they can cause damage. – Read More
The prolific Chinese nation-state actor known as APT41 (aka Brass Typhoon, Earth Baku, Wicked Panda, or Winnti) has been attributed to a sophisticated cyber attack targeting the gambling and gaming…