SEARCH
All Articles
Iranian APT Using Custom Tool to Scrape Gmail, Outlook Inboxes
The Iranian APT group known as Charming Kitten has been using a new tool called HYPERSCRAPE to steal the contents of Gmail, Yahoo, and Outlook 365 inboxes.
Bug in CrowdStrike Falcon Allows Removal of Security Agent
Researchers have disclosed a bug in some versions of CrowdStrike Falcon that allows an attacker with admin privileges to uninstall the security agent.
Cryptojacking Not Dead Yet
Microsoft has been tracking a recent cryptojacking campaign that abuses Windows binaries to stay hidden.
Russian APT Targets Microsoft 365 Features to Muddle Detection
APT29, the threat actor linked to the SolarWinds hack, is abusing various Azure features in recent attacks against organizations that influence the foreign policy of NATO countries.
Decipher Podcast: Source Code 8/19
Welcome back to Source Code, Decipher’s news wrap podcast that includes input from our sources.
Cybercrime Group TA558 Ramps Up Email Attacks Against Hotels
The small cybercrime actor is upping its operational tempo in 2022 against hospitality organizations like hotels and travel companies.
Decipher Podcast: Chester Wisniewski and Peter Mackenzie
Peter Mackenzie, director of incident response at Sophos, and Chester Wisniewski, principal research scientist at Sophos, talk about why more ransomware attackers are clustering onto vulnerable networks - sometimes simultaneously.
Apple, Google Fix Zero Days Under Active Attack
Apple and Google have released fixes for iOS and macOS, and Chrome, respectively, to address bugs that have been exploited in the wild.
CISA Warns of Ongoing Exploitation Against Zimbra Flaws
Attackers are eyeing known vulnerabilities in the Zimbra collaboration suite to target government and private sector organizations.
RubyGems Requires MFA for Popular Projects
RubyGems is now requiring projects with more than 180 million downloads to use MFA, and may extend the requirement to other projects.
Microsoft Disables Accounts Abused By Russian Threat Actor
Microsoft observed the threat actor, which it tracks as Seaborgium, targeting over 30 organizations since 2022 started.
FTC Moves to Address Pervasive Commercial Surveillance
The FTC may consider rules to address the abuses of commercial surveillance by ad tech companies and platform providers.
Zero Day Initiative Changes Disclosure Policy For Faulty Patches
The Zero Day Initiative cited a decrease in patch quality that is leading to many issued fixes being faulty or incomplete.
Decipher Podcast: Source Code 8/12
Welcome back to Source Code, Decipher’s weekly news wrap podcast with input from our sources.
For Bug Bounties, ‘Knowing is Less Than Half the Battle’
Bug bounty programs can be invaluable, but without the proper resources in place, they will fail hard.