2023

SBOMs – Software Supply Chain Security’s Future or Fantasy?

Featured, Government, Government Policy, open source, SBOM, software, Supply Chain Security, Vulnerabilities /

SBOMs – Software Supply Chain Security’s Future or Fantasy? 05/06/2023 at 14:39 By Kevin Townsend If after eighteen months, meaningful use of SBOMs is unachievable, we need to ask what needs to be done to fulfill Biden’s executive order. The post SBOMs – Software Supply Chain Security’s Future or Fantasy? appeared first on SecurityWeek. This […]

React to this headline:

Loading spinner

SBOMs – Software Supply Chain Security’s Future or Fantasy? Read More »

AntChain and Intel launch a privacy-preserving computing platform

AntChain, Industry news, Intel /

AntChain and Intel launch a privacy-preserving computing platform 05/06/2023 at 14:09 By Industry News AntChain announced a new collaboration with Intel to launch AntChain Massive Data Privacy-Preserving Computing Platform (MAPPIC), a new privacy-preserving computing platform that brings a data privacy protection solution for large-scale AI machine learning. As a Software-as-a-Service (SaaS) platform, MAPPIC is based

React to this headline:

Loading spinner

AntChain and Intel launch a privacy-preserving computing platform Read More »

Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations

cybercrime, Featured, MOVEit, Ransomware /

Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations 05/06/2023 at 13:39 By Eduard Kovacs The recent MOVEit zero-day attack has been linked to a known ransomware group, which reportedly stole data from dozens of organizations. The post Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations appeared first

React to this headline:

Loading spinner

Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations Read More »

Cybersecurity M&A Roundup: 36 Deals Announced in May 2023

Funding/M&A, M&A, M&A Tracker /

Cybersecurity M&A Roundup: 36 Deals Announced in May 2023 05/06/2023 at 13:39 By Eduard Kovacs Thirty-six cybersecurity-related merger and acquisition (M&A) deals were announced in May 2023. The post Cybersecurity M&A Roundup: 36 Deals Announced in May 2023 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Loading spinner

Cybersecurity M&A Roundup: 36 Deals Announced in May 2023 Read More »

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

Uncategorized /

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack 05/06/2023 at 09:46 By Cybersecurity researchers have unearthed a new ongoing Magecart-style web skimmer campaign that’s designed to steal personally identifiable information (PII) and credit card data from e-commerce websites. A noteworthy aspect that sets it apart from other Magecart campaigns is that the hijacked sites

React to this headline:

Loading spinner

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack Read More »

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

Uncategorized /

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts 05/06/2023 at 08:28 By An unknown cybercrime threat actor has been observed targeting Spanish- and Portuguese-speaking victims to compromise online banking accounts in Mexico, Peru, and Portugal. “This threat actor employs tactics such as LOLBaS (living-off-the-land binaries and scripts), along with CMD-based scripts to

React to this headline:

Loading spinner

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts Read More »

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors

Uncategorized /

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors 05/06/2023 at 08:28 By A surge in TrueBot activity was observed in May 2023, cybersecurity researchers disclosed. “TrueBot is a downloader trojan botnet that uses command and control servers to collect information on compromised systems and uses that compromised system as a launching point for

React to this headline:

Loading spinner

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors Read More »

Surveilling your employees? You could be putting your company at risk of attack

1E, dark web, data breach, Don't miss, Employees, Expert analysis, Expert corner, Hot stuff, monitoring, opinion, surveillance /

Surveilling your employees? You could be putting your company at risk of attack 05/06/2023 at 08:13 By Help Net Security Are you watching your employees? Though the question may incite thoughts of “Big Brother” and an all-seeing or all-knowing entity, it isn’t quite as ominous as you might think. Employee productivity surveillance technology, or EPST,

React to this headline:

Loading spinner

Surveilling your employees? You could be putting your company at risk of attack Read More »

9 free cybersecurity whitepapers you should read

APT, Bitdefender, Center for Internet Security, Cloudflare, Code42, cybersecurity, Cyberstash, Don't miss, Hot stuff, N-able, News, NIST, OffSec, SANS, Team8, whitepaper /

9 free cybersecurity whitepapers you should read 05/06/2023 at 07:30 By Helga Labus In today’s rapidly evolving digital landscape, organizations face constant cyber threats that can compromise their sensitive data, disrupt operations, and damage their reputation. Staying informed about the latest cyberattacks and understanding effective protection methods is crucial. This list of free cybersecurity whitepapers

React to this headline:

Loading spinner

9 free cybersecurity whitepapers you should read Read More »

How fraudsters undermine text passcodes

CISO, cybercrime, cybersecurity, Don't miss, fraud, Hot stuff, passwords, Sinch, Video /

How fraudsters undermine text passcodes 05/06/2023 at 07:17 By Help Net Security Malicious bots are taking new forms – a burst of spam and scam text messages led to 18,000+ consumer complaints at the FCC last year. One of the newest scams – artificial inflation of traffic (AIT) – targets the SMS authentication codes sent

React to this headline:

Loading spinner

How fraudsters undermine text passcodes Read More »

A new wave of sophisticated digital fraud hits Europe

deepfake, fraud, identity verification, News, report, Sumsub /

A new wave of sophisticated digital fraud hits Europe 05/06/2023 at 06:32 By Help Net Security Forced verification and deepfake cases multiply at alarming rates in the UK and continental Europe, according to Sumsub. In Germany alone, forced verification grew by 1500% as a proportion of all fraud cases, from 0.3% in the full year

React to this headline:

Loading spinner

A new wave of sophisticated digital fraud hits Europe Read More »

Virtual claims raise alarms among insurance carriers and customers

fraud, identity, identity protection, LexisNexis Risk Solutions, News /

Virtual claims raise alarms among insurance carriers and customers 05/06/2023 at 06:08 By Help Net Security As the digital revolution changes the claims process, both carriers and customers are increasingly concerned about data privacy, according to LexisNexis Risk Solutions. More than 60% of consumers have concerns over the security of their personally identifiable information when

React to this headline:

Loading spinner

Virtual claims raise alarms among insurance carriers and customers Read More »

Katie Boswell on AI security and women’s rise in cybersecurity

Artificial Intelligence, CISO, Cybellum, cybersecurity, KPMG, News, NIST, podcast, strategy, tips /

Katie Boswell on AI security and women’s rise in cybersecurity 05/06/2023 at 05:45 By Help Net Security Katie Boswell spent years on the front lines securing the most critical national infrastructure in energy and life sciences. Yet, earlier in her career, she was told that senior leadership was not for her if she planned on

React to this headline:

Loading spinner

Katie Boswell on AI security and women’s rise in cybersecurity Read More »

Evasive NoEscape Ransomware Uses Reflective DLL Injection

8Base Ransomware, ChaCha20, CryptoAPI, cybercrime, ESXi servers, Linux, Linux Variant, Malware, Microsoft Visual C/C++, NoEscape Ransomware, RaaS, Ransomware, SQL, Threat Actors, Twitter, Vmware Converter, Windows 7, Windows XP /

Evasive NoEscape Ransomware Uses Reflective DLL Injection 04/06/2023 at 21:21 By cybleinc Cyble Research and Intelligence Labs analyzes the NoEscape Ransomware-as-a-Service platform and explains how it targets VMware ESXi servers. The post Evasive NoEscape Ransomware Uses Reflective DLL Injection appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to

React to this headline:

Loading spinner

Evasive NoEscape Ransomware Uses Reflective DLL Injection Read More »

Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released

News, Week in review /

Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released 04/06/2023 at 11:03 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: MOVEit Transfer zero-day attacks: The latest info Progress Software has updated the security advisory and confirmed that the vulnerability (still without

React to this headline:

Loading spinner

Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released Read More »

Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech

Artificial Intelligence /

Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech 03/06/2023 at 23:37 By Associated Press Shift5 founder Josh Lospinoso discusses AI and how software vulnerabilities in weapons systems are a major threat to the U.S. military. The post Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech appeared first on SecurityWeek. This article is an

React to this headline:

Loading spinner

Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech Read More »

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack 

Malware & Threats, news roundup, Tracking & Law Enforcement, Vulnerabilities /

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack  03/06/2023 at 14:33 By Eduard Kovacs Cybersecurity news that you may have missed this week: the spyware used by various governments, new vulnerabilities, industrial security products, and Linux router attacks. The post In Other News: Government Use of Spyware, New Industrial

React to this headline:

Loading spinner

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack  Read More »

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

Uncategorized /

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal 03/06/2023 at 11:36 By An analysis of the Linux variant of a new ransomware strain called BlackSuit has covered significant similarities with another ransomware family called Royal. Trend Micro, which examined an x64 VMware ESXi version targeting Linux machines, said it identified an “extremely high degree

React to this headline:

Loading spinner

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal Read More »

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council’s Certified CISO Hall of Fame Report 2023

Uncategorized /

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council’s Certified CISO Hall of Fame Report 2023 03/06/2023 at 11:36 By A survey of global cybersecurity leaders through the 2023 Certified CISO Hall of Fame Report commissioned by the EC-Council identified 4 primary areas of grave concern: cloud security, data security, security governance, and lack of cybersecurity

React to this headline:

Loading spinner

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council’s Certified CISO Hall of Fame Report 2023 Read More »

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring

Uncategorized /

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring 03/06/2023 at 11:36 By The U.S. Federal Trade Commission (FTC) has fined Amazon a cumulative $30.8 million over a series of privacy lapses regarding its Alexa assistant and Ring security cameras. This comprises a $25 million penalty for breaching children’s privacy laws

React to this headline:

Loading spinner

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring Read More »

Scroll to Top