SEARCH
All Articles
Nation-State Attackers Targeted Airline With New Backdoor
The Iran-linked threat group targeted an Asian airline in what researchers believe is an espionage cyberattack.
Decipher Podcast: Source Code 12/17
This week's Source Code podcast by Decipher takes a look behind the scenes at top news with input from our sources.
CISA Issues Emergency Directive For Log4j Flaw
Federal agencies have until Dec. 23 to track down systems vulnerable to Log4j and apply patches or mitigations.
New Log4j Flaw Allows Remote Code Execution
The newer Log4j vulnerability (CVE-2021-45046) can allow remote code execution in some circumstances on macOS.
Lawmakers Put Pressure on Spyware Vendors
A group of 18 lawmakers are calling on the Biden administration to sanction surveillance technology firms for enabling "human rights abuses."
Log4j Attacks Spread as State Actors Target Bug
State actors from China, Iran, North Korea and other countries are targeting the Log4j (CVE-2021-44228) flaw.
Microsoft Fixes Spoofing Flaw Used in Emotet Attacks
Attackers were attempting to exploit the flaw to distribute the Emotet, Trickbot and Bazaloader malware.
Q&A: John Hammond
John Hammond of Huntress discusses the seriousness of the Apache Log4j vulnerability, the community response, and how attackers are exploiting it.
Apple Fixes Critical Kernel Flaws in iOS and macOS
Apple has released iOS 15.2 and macOS Monterey 12.1, which both include dozens of security fixes for critical flaws.
Google Fixes High-Severity Chrome Zero Day
The use-after-free flaw (CVE-2021-4102) has been fixed in Chrome version 96.0.4664.110 for Windows, Mac and Linux. Learn more about it.
Critical Log4j Flaw Fallout Continues
The widespread usage of Log4j is adding complexity to organizations attempting to apply patches.
Decipher Podcast: John Hammond
John Hammond of Huntress joins Dennis Fisher to discuss the critical Log4j vulnerability, the community response, and the potential long-term effects of the bug.
Decipher Podcast: Source Code 12/10
This week's Source Code podcast by Decipher takes a look behind the scenes at top news with input from our sources.
Exploitation Attempts Ramp Up Against Critical Log4j Flaw
While a patch is available from the Apache Software Foundation, researchers say that numerous companies may need to wait until vendors push security updates out to their own products.
Q&A: Wade Baker and Ben Edwards
Wade Baker and Ben Edwards of Cyentia Institute discuss the design and analysis of the data from the Cisco Security Outcomes Study.