Beyond the Pen Test How to Protect Against Sophisticated Cybercriminals
Why are we still doing perfunctory penetration testing when we can be emulating realistic threats and stress-testing the systems most at risk?
RomCom Malware Woos Victims With Wrapped SolarWinds KeePass Software
An analysis of the RomCom APT shows the group is expanding its efforts beyond the Ukrainian military into the UK and other English-speaking countries.
Microsoft Warns on ZeroDay Spike as NationState Groups Shift Tactics
The software giant also recorded an increase in attacks on IT services companies as state-backed threat actors have adapted to better enterprise defenses and cast a wider net, Microsoft says.
W4SP Stealer Stings Python Developers in Supply Chain Attack
Threat actors continue to push malicious Python packages to the popular PyPI service, striking with typosquatting, authentic sounding file names, and hidden imports to fool developers and steal their information.
Build Security Around Users A HumanFirst Approach to Cyber Resilience
Security is more like a seat belt than a technical challenge. Its time for developers to shift away from a product-first mentality and craft defenses that are built around user behaviors.
Why ThirdParty Risk Should Be Manufacturings Top Priority
Manufacturing relies on complex interconnected networks and technologies, but with more vendors comes risk that needs to be secured.
FIN7 Cybercrime Group Likely Behind Black Basta Ransomware Campaign
Several artifacts from recent attacks strongly suggest a connection between the two operations, researchers say.
Oreo Giant Mondelez Settles NotPetya Act of War Insurance Suit
The settlement muddies the waters even further for the viability of war exclusion clauses when it comes to cyber insurance.
Supply Chain Attack Pushes Out Malware to More than 250 Media Websites
TA569 has modified the JavaScript of a legitimate content and advertising engine used by news affiliates, in order to spread the FakeUpdates initial access framework.
Economic Uncertainty Isnt Stopping Cybercrime Recruitment Its Fueling It
Confused economies and rising unemployment rates foster a rich opportunity for cybercrime recruitment.