News
-
"Numerous Websites And Applications Affected by NPM Supply-Chain Attack"An NPM supply-chain attack that began in December 2021 to hack hundreds of websites and desktop applications used numerous malicious NPM modules with JavaScript code obfuscation. ReversingLabs researchers discovered that the threat actors behind this… -
"API Security Grows More Critical, Even as Organizations Lack Means to Address the Risk"When enterprises migrate to the cloud, they become more reliant on Application Programming Interfaces (APIs) for core business operations. Most organizations have experienced at least one API-related attack in the last year, according to the findings of…
-
"Latest Cyberattack Against Iran Part of Ongoing Campaign"Iran's steel industry is being targeted by ongoing cyberattacks that have previously disrupted the country's rail system. Malware used in last week's crippling cyberattacks on Iranian steel plants is linked to an attack that shut down the country's rail…
-
"Emergency Chrome 103 Update Patches Actively Exploited Vulnerability"Google recently announced the release of an emergency chrome update that patches an actively exploited zero-day vulnerability. The flaw tracked as CVE-2022-2294 has been described as a heap buffer overflow in WebRTC. An Avast Threat…
-
"Data Breach at PFC USA Impacts Patients of 650 Healthcare Providers"Recently accounts receivable management firm Professional Finance Company (PFC USA) started sending out data breach notification letters to patients of over 650 healthcare providers across the country. The Northern Colorado-based company has…
-
"SANS Institute: Human Error Remains the Top Security Issue"Human error continues to be the most effective vector for network infiltrations and data breaches. The SANS Institute security center recently released its annual security awareness report based on data from 1,000 information security professionals,…
-
"Hundreds of Windows Networks Are Infected With Raspberry Robin Worm"Microsoft recently released a private threat intelligence advisory informing organizations that a worm called Raspberry Robin is infecting hundreds of Windows networks. The worm is spreading via infected USB devices. The researchers noted…
-
"NIST Acknowledges First Four Quantum-Resistant Encryption Tools"Recently the U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) selected the first-ever group of encryption tools that could potentially withstand the attack of a quantum computer. The four selected encryption…
-
"Orgs Adopt Healthcare Cybersecurity Tech to Keep Cyber Insurance Premiums Down"According to a survey conducted by Imprivata conducted by WBR Insights, healthcare cybersecurity leaders reported using multi-factor authentication (MFA), identity and access management (IAM), and privileged access management (PAM) solutions to reduce…
-
"Germany Unveils Plan to Tackle Cyberattacks on Satellites"The German Federal Office for Information Security (BSI) has released an IT baseline protection profile for space infrastructure in response to concerns that attackers may turn their attention to the sky. The document resulted from work by Airbus Defence…
-
"AstraLocker Ransomware Shuts Down and Releases Decryptors"The threat actor behind the AstraLocker ransomware claims they are ceasing operations and intend to transition to cryptojacking. The creator of the ransomware uploaded a ZIP archive containing AstraLocker decryptors to the VirusTotal malware detection…
-
"MITRE Releases ATT&CK Search Extension for Chrome"MITRE's Center for Threat Informed Defense now provides a free Chrome browser extension called ATT&CK Powered Suit that enables instant searching of the ATT&CK framework knowledge base by right-clicking on a term. Mark Haase and Jon Baker, the…