All Articles

Browse by Category:

Browse by Tag:

Government Podcast Privacy Microsoft Malware Ransomware Vulnerability Data Breaches Google Encryption Apple Phishing 2fa Hardware Iot Security Apt Android Ciso Supply Chain Cybercrime Cloud Solarwinds Hacker Movies Internet Black Hat Facebook Labs Research Botnet Cisa Linux Patching Government Agencies Vulnerabilities Log4j Windows Patch Vpn Software Security Apache Open Source Legislation Bug Bounty Networking Gdpr Critical Infrastructure Security Mobile Mozilla Magecart Disinformation Vmware

2376 articles:

Decipher Podcast: Peter Baker

Dennis Fisher talks with Peter Baker, the founding brand designer at Duo and the man behind the Decipher brand, about his design philosophy, the earliest days of Scio/Duo, why design matters in security, and the influence that positivity and usability has had on the industry.

Podcast

Lawmakers Search For Solution to Ransomware Pandemic

Slowing or stopping the global ransomware threat will take cooperation among government, enterprises, and law enforcement.

Ransomware, Government

Apple Patches WebKit Zero Days in iOS, macOS and Safari

Apple has fixed four zero days in WebKit for iOS, macOS, and Safari that were under active attack.

Ios, Apple

Echoes on the Wire: Dan Kaminsky’s Hacker Legacy

Dennis Fisher talks with Katie Moussouris, Rich Mogull, Kymberlee Price, and Thomas Ptacek about the unique and inspiring life and legacy of hacker Dan Kaminsky.

Podcast

ICS Security Requires Private-Public Sector Synergy

Government officials and technology experts call for more collaboration between the public and private sectors when it comes to securing industrial control system environments.

ICS Security, Critical Infrastructure Security, Government

Dell Patches High-Severity Firmware Update Driver Flaws

The high-severity Dell flaws could allow local attackers to gain kernel-mode privileges.

Dell, Vulnerability, Privilege Escalation, Firmware Security

Pulse Secure Releases Patch for VPN Flaw Used in Active Attacks

PulseSecure has released patches for several flaws in its Connect Secure VPN appliance, one of which has been used in active attacks for some time.

Vpn

Rust-Based Buer Malware Variant Emerges

Cybercriminals have rewritten the Buer malware loader in the Rust programming language, in an attempt to avoid detection.

Malware, Rust Programming Language, Spear Phishing

BadAlloc Memory Flaws Found in Dozens of IoT, Embedded Devices

More than 25 memory allocation flaws have been discovered in real time operating systems from Google, Amazon, and many other vendors that are used in IoT devices.

ICS Security, Microsoft

Threat Group Exploits SonicWall Flaw to Deploy FiveHands Ransomware

Researchers shed light on the FiveHands ransomware, which was deployed after a threat group exploited a now-patched SonicWall flaw in January.

Ransomware, Malware, Vulnerability

Ransomware Task Force Proposes Technical, Regulatory Measures to Disrupt Ecosystem

A ransomware task force has proposed a variety of technical, policy, and regulatory means for disrupting ransomware, including tracking Bitcoin transactions more closely and mandating ransom payment disclosures.

Ransomware, Government

Water Pamola Attackers Target Online Shops With Malicious Orders

A threat campaign is relying on cross-site scripting attacks to deliver malware to and steal credentials from online shops.

Malware, Credentials, Ecommerce Security

Ghostwriter Influence Campaign Linked to Espionage Threat Group

The Ghostwriter influence campaign has expanded its targeting and TTPs, with researchers linking parts of it to the UNC1151 threat group.

Disinformation, Threat Actors

Naikon APT Deploys New Nebulae Backdoor

The Naikon APT group attributed to China has been using a new backdoor known as Nebulae in attacks against military organizations in Asia.

Apt, China

Apple Patches MacOS Flaw Exploited By Shlayer Malware

The macOS vulnerability allowed attackers to bypass Apple’s core security defenses with specially-crafted application bundles.

Apple, Osx Malware, Malware, Zero Day