News
  • "Cloudflare Thwarts Off Record-Breaking HTTPS DDoS Attack"
    Cloudflare has announced that it successfully mitigated a 26 million request per second (RPS) Distributed Denial-of-Service (DDoS) attack, which is the most powerful HTTPS DDoS attack to date. The attack originated from Cloud Service Providers instead of…
  • "Beware the 'Secret Agent' Cloud Middleware"
    If cloud services weren't complicated enough for the typical business today to properly configure and secure, there's also a lesser-known layer of middleware that cloud providers run that can harbor hidden security flaws.  Researchers from Wiz.io…
  • "Understanding and Mitigating Single Sign-on Risk"
    On average, enterprises use almost 1,000 applications, so it's no surprise that single sign-on (SSO) has become a critical gatekeeper.  It provides ease of access and can eliminate the sprawl of usernames and passwords that haunt users and frustrate…
  • "Over Three-Quarters of UK Adults Hit by Online Scams"
    Security researchers believe that more than 40 million UK consumers have been targeted by digital fraudsters so far in 2022, a double-digit increase from the same time last year.  The researchers polled over 2000 UK adults in May, asking if they had…
  • "Kennesaw State Researchers Highlight Gaps in Data Security Considerations for Brainwave Tech"
    Researchers at Kennesaw State University (KSU) are bringing attention to the importance of bolstering the cybersecurity of emerging brainwave technologies, which they say are vulnerable to hacking and data breaches. Adriane Randolph, professor of…
  • "NYFD Calls for Help With Doxing"
    The New York City Fire Department (NYFD) is seeking cybersecurity consultants to assist it in preventing the doxing of its 16,000 firefighters, emergency medical technicians, and administrative support personnel. Doxing is the weaponization of an…
  • "Only 10% of Vulnerabilities Are Remediated Each Month"
    Security researchers from SecurityScorecard and The Cyentia Institute revealed only 60% of organizations have improved their security posture despite a 15-fold increase in cyberattacks over the last three years.   The joint research sought to…
  • "Syslogk Linux Malware Has a Sneaky Way of Staying Hidden"
    Syslogk is a newly discovered stealthy piece of Linux malware that delivers a backdoor, which remains hidden on the targeted machine until its controller transmits so-called 'magic packets' from anywhere on the Internet. According to Avast researchers,…
  • "Human Error to Blame for Eight Out of 10 Data Breaches"
    According to a new CybSafe analysis of data from the UK Information Commissioner's Office (ICO), human error was responsible for 80 percent of data breaches reported in 2021. Last year, the ICO received 2,692 reports, 80 percent of which could be…
  • "Bill Calls on FDA to Regularly Update Medical Device Security Guidelines"
    The Strengthening Cybersecurity for Medical Devices Act would require the US Food and Drug Administration (FDA) to review and update its medical device security guidelines more frequently. Senators Jacky Rosen (D-NV) and Todd Young (R-IN) introduced the…
  • "Iran Spear-Phishers Hijack Email Conversations in New Campaign"
    Security researchers at Check Point have uncovered a major new state-backed spear-phishing operation targeting multiple high-ranking Israeli and US officials.  The researchers traced the campaign to the Iranian Phosphorus APT group.  Dating…
  • "Conti Ransomware Develops Proof-of-Concept Code for Firmware Attacks"
    An examination of leaked Conti ransomware gang chats revealed that the cybercrime group was planning firmware attacks against the Intel Management Engine (ME). There are several implementations of the firmware, including the Intel Manageability Engine (…