New NPM malware has been observed stealing Google Chrome credentials through the use of legitimate password recovery tools on Windows systems. NPM, short for Node Package Manager, is a packet manager for the JavaScript programming language. The NPM…

Both Windows 10 and Windows 11 have been discovered to be impacted by a local privilege escalation vulnerability that can allow attackers to gain access to otherwise inaccessible areas of the registry. The exploitation of this vulnerability could lead to…

Campbell Conroy & O'Neil, P.C., a U.S. law firm to many huge companies, put out a press release that an intruder may have accessed their client's data. The law firm was hit with ransomware in February and is now suffering the data-breach fallout.…

The U.S. Transportation Security Administration (TSA) issued a directive Tuesday requiring owners and operators of TSA-designated critical pipelines to implement cybersecurity controls.  The latest directive by TSA applies to companies transporting…

Cybersecurity researchers at SentinelOne have shared details about a high-severity vulnerability in HP printer drivers, which impacts millions of devices. According to the researchers, the vulnerability has existed since 2005 and impacts more than 380 HP…

The Israeli cyberarms firm NSO Group, accused of providing spyware to governments, has been linked to a list of 50,000 smartphone numbers, which impacts activists, journalists, business executives, and politicians globally. The firm and its malware have…

Security researchers at Microsoft created a new method for detecting brand impersonation attacks. These attacks refer to the crafting of content to mimic a trusted company or known brand to trick unsuspecting victims into responding and disclosing…

Security researchers at Qualy have discovered a vulnerability (CVE-2021-33909) in the Linux kernel’s filesystem layer that may allow local, unprivileged attackers to gain root privileges on a vulnerable host. The security researchers were able to…

The U.S. Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) warns of the exploitation of a known vulnerability in SonicWall Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products with end-of-life…

Researchers at the cybersecurity firm Qualys found a new Linux systemd security bug. Systemd is a system and services manager for Linux operating systems. It is the default service manager in many Linux distributions. According to Qualys, the…

Researchers at Bitdefender have discovered a never-before-documented Windows malware strain dubbed MosaicLoader.  MosaicLoader is spreading indiscriminately worldwide through paid ads in search results, targeting people looking for pirated software…

IT Governance USA calls on organizations to implement cybersecurity training in the onboarding process for all new employees. This training should include examples of security incidents and the details of those who should be contacted in the event that…