Your OT Is No Longer Isolated: Act Fast to Protect It

Not too long ago, there was a clear separation between the operational technology (OT) that...

Decision to Convert FIPS 198-1 to a NIST Special Publication

In August 2021, NIST’s Crypto Publication Review Board initiated a review process for Federal Information...

CISA Warns of Critical Vulnerabilities in 3 Industrial Control System Software

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published three Industrial Control Systems (ICS) advisories about...

Researchers Find Links b/w Black Basta Ransomware and FIN7 Hackers

A new analysis of tools put to use by the Black Basta ransomware operation has...

Why Identity & Access Management Governance is a Core Part of Your SaaS Security

Every SaaS app user and login is a potential threat; whether it’s bad actors or...

OPERA1ER APT Hackers Targeted Dozens of Financial Organizations in Africa

A French-speaking threat actor dubbed OPERA1ER has been linked to a series of more than 30 successful...

1 Comment

Hackers Using Rogue Versions of KeePass and SolarWinds Software to Distribute RomCom RAT

The operators of RomCom RAT are continuing to evolve their campaigns with rogue versions of...

New TikTok Privacy Policy Confirms Chinese Staff Can Access European Users’ Data

Popular short-form video-sharing service TikTok is revising its privacy policy for European users to make it explicitly...

Dropbox suffers data breach following phishing attack

The hacker posed as a trusted third party to gain access to employee login credentials...

Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring Software

Multiple vulnerabilities have been disclosed in Checkmk IT Infrastructure monitoring software that could be chained...

Draft Project Description for Securing Water and Wastewater Utilities: Cybersecurity for the Water and Wastewater Systems Sector

Seeking Feedback The National Cybersecurity Center of Excellence (NCCoE) has published for comment a draft...

These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites

A set of four Android apps released by the same developer has been discovered directing...

Inside Raccoon Stealer V2

Raccoon Stealer is back on the news again. US officials arrested Mark Sokolovsky, one of...

Experts Warn of SandStrike Android Spyware Infecting Devices via Malicious VPN App

A previously undocumented Android spyware campaign has been found striking Persian-speaking individuals by masquerading as...

Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories

File hosting service Dropbox on Tuesday disclosed that it was the victim of a phishing...

CYBERUK 2023 Technical Masterclass: call for abstracts now open

We’re inviting all security professionals to share their expertise with delegates at next year’s CYBERUK....

OpenSSL Releases Patch for 2 New High-Severity Vulnerabilities

The OpenSSL project has rolled out fixes to contain two high-severity flaws in its widely...

Researchers Disclose Details of Critical ‘CosMiss’ RCE Flaw Affecting Azure Cosmos DB

Microsoft on Tuesday said it addressed an authentication bypass vulnerability in Jupyter Notebooks for Azure Cosmos DB...

Chinese Hackers Using New Stealthy Infection Chain to Deploy LODEINFO Malware

The Chinese state-sponsored threat actor known as Stone Panda has been observed employing a new...

Last Years Open Source – Tomorrow’s Vulnerabilities

Linus Torvalds, the creator of Linux and Git, has his own law in software development,...

Summary and Analysis of Responses to CUI Series Pre-Draft Call for Comments

In July 2022, NIST issued a Pre-Draft Call for Comments on the Controlled Unclassified Information...

Critical RCE Vulnerability Reported in ConnectWise Server Backup Solution

IT service management software platform ConnectWise has released Software patches for a critical security vulnerability...

Scanning the internet for fun and profit

Ian Levy explains how the NCSC’s new internet scanning capability will help us understand the...

Fodcha DDoS Botnet Resurfaces with New Capabilities

The threat actor behind the Fodcha distributed denial-of-service (DDoS) botnet has resurfaced with new capabilities,...

Tips for Choosing a Pentesting Company

In today’s world of automated hacking systems, frequent data breaches and consumer protection regulations such...

Unofficial Patch Released for New Actively Exploited Windows MotW Vulnerability

An unofficial patch has been made available for an actively exploited security flaw in Microsoft...

Samsung Galaxy Store Bug Could’ve Let Hackers Secretly Install Apps on Targeted Devices

A now-patched security flaw has been disclosed in the Galaxy Store app for Samsung devices...

GitHub Repojacking Bug Could’ve Allowed Attackers to Takeover Other Users’ Repositories

Cloud-based repository hosting service GitHub has addressed a high-severity security flaw that could have been...

Twilio Reveals Another Breach from the Same Hackers Behind the August Hack

Communication services provider Twilio this week disclosed that it experienced another “brief security incident” in...

1 Comment

Hacker steals US$1mn worth of crypto and NFTs 24 hours

The hacker known as Monkey Drainer used phishing techniques to steal from their victims...