MalwareCthulhu Stealer malware scams macOS users — and its own affiliatesThe malware-as-a-service is based on Atomic Stealer, charges half the price and imitates legitimate software.
Critical Infrastructure SecurityHalliburton confirms cyberattack on its systemsThe oil field services company told the SEC that the attack forced it to take certain systems offline.
Critical Infrastructure SecurityDefenders get a MoonPeak at North Korea’s malware backboneA recently launched attack from North Korea is giving researchers an inside look to how the regime’s hackers operate.
Application securityHackers leak their own operations through exposed Telegram Bot API tokensLocation history, contacts and customer data of the Styx Stealer MaaS operator were uncovered by researchers.
RansomwareRansomware on track for record profits, even as fewer victims payA mid-year report found ransom payment prices have increased drastically among big game hunters.
Vulnerability ManagementIran election meddling brings call to action in USGovernment officials in the U.S. are sounding the alarm over new reports of election meddling by Iran.
Network SecurityMan tried to hack database, fake own death to skirt child supportA man from Kentucky was convicted of trying to breach the state of Hawaii’s personal records database with the aim of avoiding child support.
Vulnerability ManagementCritical Jenkins vulnerability added to CISA’s known vulnerabilities catalogThe RCE vulnerability was leveraged in ransomware attacks targeting Indian banks.
Vulnerability ManagementSolarWinds patches critical RCE vulnerability in its Web Help DeskAdministrators ready to take an early weekend have been served with what might be the scariest three words in IT: Critical SolarWinds Vulnerability.
Seven tips that offer short-term and long-term fixes following the CrowdStrike outageCallie Guenther July 19, 2024
How to bridge the gap between the IT and legal staffs to better combat insider riskJoe PayneApril 2, 2024
It makes sense for the Biden administration to focus on software security – but it’s up to the industry to make it happen John Funge November 29, 2023