SEARCH
All Articles
Device Security is ‘The Big Hairy Monster Under the Bed’
The security of IoT and non-general purpose computing devices represents a systemic risk to corporate and national security, experts say.
Nobelium Deploying FoggyWeb Backdoor in Targeted Attacks
The Nobelium attackers, who are responsible for the SolarWinds intrusion, have been deploying a new backdoor called FoggyWeb in targeted attacks.
Attackers Target Critical VMware Bug
There is active exploitation of the vCenter Server bug disclosed last week, along with mass scanning activity looking for vulnerable servers.
FISMA Update Could Boost CISA’s Authority
Potential new legislation to update FISMA could codify CISA's role and grant it additional authority.
U.S. Warns of Continued Threat from Conti Ransomware
A joint advisory from the FBI, CISA, and NSA warns that the Conti ransomware operation is still a threat to enterprises, despite some takedowns of its infrastructure.
VMware Fixes Critical Flaw in vCenter Server
VMware has released a fix for a critical file-upload vulnerability, along with nearly 20 other bugs in vCenter Server.
Azure OMIGOD Flaw Under Attack
The Azure OMI vulnerability (CVE-2021-38647) is under attack by several threat actors, including the Mirai botnet operators.
New Turla Backdoor Identified
Cisco Talos researchers have identified a new backdoor being deployed by the Turla APT against targets in multiple countries.
MSHTML Zero Day Exploits Used Shared Infrastructure With Ransomware Group
Attackers exploiting the CVE-2021-40444 Windows flaw used infrastructure also known to be associated with a ransomware group.
Re-Deciphering Hackers
On the anniversary of the release of Hackers, Zoe Lindsey and Pete Baker join Dennis Fisher to talk about the cultural influence of the movie, the effect it's had on hacker culture, and why it is still so beloved today.
Apple Patches Two iOS Bugs Exploited in the Wild
Apple has patched two iOS vulnerabilities that have been exploited in the wild, including one that requires no user interaction.
Decipher Podcast: Carolina Terrazas
Carolina Terrazas joins Dennis Fisher to talk about getting into security, the importance of diversity in hiring practices, and why Tom Brady is the worst.
REvil Ransomware Group Reemerges
The REvil ransomware group has come back online after disappearing following the attack on Kaseya in July.
Exploits Circulating for Windows MSHTML Zero Day
Some proof-of-concept exploits have begun circulating for CVE-2021-40444 and no patch is yet available.
Attackers Exploiting Critical Flaw in Zoho Password Management Tool
Attackers are exploiting an authentication bypass flaw in Zoho's ManageEngine ADSelfService Plus password management app.