Google recently announced the release of Chrome 106 to the stable channel with patches for 20 vulnerabilities, including 16 reported by external researchers.  Of the externally reported security bugs, five are rated "high" severity, eight are "…

According to insurance provider Travelers, cyber threats are the number one concern for US business decision makers, beating worries over economic uncertainty, rising energy costs, and hiring.  The firm polled over 1200 US business leaders.  It…

The average ethical hacker can discover a vulnerability that allows a network perimeter breach and the exploitation of the environment in less than 10 hours, with penetration testers focused on cloud security gaining access to targeted assets the fastest…

WatchGuard Threat Lab's Q2 Internet Security Report shows that overall malware detections have decreased since their peak in the first half of 2021, despite an ongoing Emotet botnet resurgence. Microsoft Office exploits continue to spread more than any…

The new Bl00dy ransomware gang is now using the recently leaked LockBit ransomware builder in its attacks targeting companies. The LockBit 3.0 ransomware builder was recently leaked on Twitter after the LockBit operator had a disagreement with his…

The Agent Tesla Remote Access Trojan (RAT) is being delivered using a recently discovered malware builder called Quantum Builder. When compared to previous campaigns, this one has more enhancements and a shift toward LNK (Windows shortcut) files,…

SoS Musings #65 - Open-Source Security: Repository Troubles

Spotlight on Lablet Research #34 - Foundations of CPS Resilience  

Cyber Scene #72 - The Widening Cybersecurity Gyre  

Cybersecurity Snapshots #34 - Hive Ransomware Group

An audit performed by the Department of Veterans Affairs' Office of Inspector General (OIG) discovered several flaws in the IT systems used by the Alexandria VA Medical Center in Pineville, Louisiana, including uninstalled security patches and outdated…

Several npm packages used by the popular Decentralized Finance (DeFi) exchange dYdX appear to have been hacked, as they were discovered containing illegal code that would launch information stealers when installed on a system. Maciej Mensfeld, the…