SEARCH
All Articles
GAO: Federal Agencies Contend With Disparate Cybercrime Metrics
The Government Accountability Office found that various federal agencies don't have a comprehensive way to track cybercrime data, which it says is "leaving the country less prepared to combat cybercrime.”
Cybercriminals Still Want to Cash In on Cryptojacking
Recent campaigns show cybercriminals haven't given up yet on cryptojacking, despite fluctuating cryptocurrency values and the shutdown of Coinhive.
Decipher Podcast: Source Code 6/23
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
Apple Patches Zero Days Used in Targeted iOS Attacks
Apple has released new versions of iOS to patch three zero days that have been exploited in targeted attacks.
Critical VMware Network Monitoring Tool Flaw Under Attack
VMware confirmed that the critical command injection flaw (CVE-2023-20887) is being exploited in the wild.
APT15 Hits Foreign Affairs Ministries With Updated Malware
The China-based hacking group has targeted ministries of foreign affairs across the Americas with updated malware called Graphican.
New DoJ Cyber Unit Adds ‘Horsepower’ to Cybercrime Investigations
The Department of Justice hopes that its new National Security Cyber Section will improve cybercriminal investigations with more dedicated resources, speed and organizational support.
Custom Malware Targets RDP to Exfiltrate Sensitive Data
The malware, which has been used in an espionage attack since 2022, includes a capability that specifically targets the client drive mapping feature within Remote Desktop Protocol.
Decipher Podcast: Matt Johansen
Matt Johansen joins Dennis Fisher to discuss his path from infosec n00b to senior security roles at White Hat, Bank of America, Reddit and his new newsletter and podcast venture Vulnerable U.
DoJ Charges Alleged Russian LockBit Ransomware Affiliate
Ruslan Magomedovich Astamirov allegedly worked as a LockBit affiliate and launched five ransomware attacks between 2020 and 2023.
Decipher Podcast: Source Code 6/16
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
New MOVEit Transfer Zero Day Emerges
A new vulnerability (CVE-2023-35708) in MOVEit Transfer has been disclosed and Progress Software is urging customers to update immediately to prevent exploits.
Barracuda ESG Flaw Exploited by ‘Aggressive’ China-Linked Actor
Researchers point to an “aggressive and skilled actor” with suspected links to China as the group behind the attacks on a recently disclosed Barracuda ESG zero day.
Microsoft Identifies Distinct Russian GRU Threat Actor
The threat actor behind the WhisperGate malware has been identified as a distinct Russian GRU group.
Federal Agencies Now Required to Secure Internet-Exposed Network Devices
The new directive from CISA aims to help federal agencies identify and secure their network devices that are exposed to the public internet.