SEARCH
All Articles
Atlassian Warns Confluence Users of Critical Hardcoded Credentials Bug
After an external party publicly disclosed the hardcoded password on Twitter, Atlassian said the issue is "likely to be exploited in the wild."
Threat Actor Targets Financial Entities With Evilnum Malware
The threat actor has been observed targeting companies with operations supporting foreign exchanges and cryptocurrency, and organizations in the Decentralized Finance (DeFi) industry.
Justice Department Seizes $500K From North Korean Ransomware Group
U.S. authorities seized a half million dollars and disrupted the activities of a North Korean state-sponsored group.
CloudMensis macOS Malware Steals Sensitive Data
The previously undisclosed macOS malware was observed as part of a targeted operation with the end goal of exfiltrating sensitive information from victims.
Decipher Podcast: Mark Arena
Intel 471 CEO Mark Arena talks about the process behind monitoring threat actors and how cybercrime is evolving.
FBI: Fake Cryptocurrency Apps Defrauded Hundreds of U.S. Investors
U.S. investors have been scammed out of millions by cybercriminals impersonating legitimate cryptocurrency investment apps.
Decipher Podcast: Source Code 7/15
Welcome back to Source Code, Decipher’s weekly news wrap podcast with input from our sources.
North Korean Threat Actors Target Small Businesses With Ransomware
The H0lyGh0st ransomware group has spent the last year targeting small and medium-sized businesses - but has not yet successfully extorted ransom payments from victims, said Microsoft researchers.
Cyber Safety Review Board: Exploitation of ‘Endemic’ Log4j Flaw Will Evolve
The Cyber Safety Review Board’s report on the Log4j flaw pointed to an open-source software ecosystem riddled with security challenges.
New Retbleed Speculative Execution Flaw Emerges
A new speculative execution flaw called Retbleed affects many AMD and Intel chips running any modern operating system.
U.S. Journalists Targeted in ‘Sustained Effort’ By APTs
The espionage attacks by APTs from China, North Korea and elsewhere started in 2021 and have continued in recent months.
Ransomware Landscape Evolves in a Post-Conti World
The release of LockBit 3.0 is making waves in a ransomware ecosystem that has been reshaped due to Conti shutting down its operations.
Microsoft Fixes Windows Flaw Under Active Attack
Microsoft fixed the flaw as part of its regularly-scheduled update, which includes over 80 critical and important-severity bugs.
Microsoft Exposes Phishing Campaign That Stole Session Cookies to Bypass MFA
Microsoft has identified a long, widespread phishing campaign that stole session cookies to bypass MFA and led to BEC and payment fraud.
Siemens Security Advisory Discloses Critical, High-Severity Flaws
The industrial manufacturing company disclosed several high- and critical-severity vulnerabilities that could enable denial-of-service, code execution and more.