Federal Agencies Infested by Cyberattackers via Legit Remote Management Systems
Hackers dont need a key to get past your defenses, if they can essentially teleport using RMMs, warns CISA and the NSA.
Hive Ransomware Gang Loses Its Honeycomb Thanks to DoJ
The US Department of Justice hacked into Hives infrastructure, made off with hundreds of decryptors, and seized the gangs operations.
Researchers Pioneer PoC Exploit for NSAReported Bug in Windows CryptoAPI
The security vulnerability allows attackers to spoof a target certificate and masquerade as any website, among other things.
North Koreas Top APT Swindled 1B From Crypto Investors in 2022
The DPRK has turned crypto scams into big business to replenish its depleted state coffers.
Log4j Vulnerabilities Are Here to Stay Are You Prepared
Dont make perfect the enemy of good in vulnerability management. Context is key — prioritize vulnerabilities that are actually exploitable. Act quickly if the vulnerability is on a potential attack path to a critical asset.
Chat Cybersecurity AI Promises a Lot But Can It Deliver
Machine learning offers great opportunities, but it still cant replace human experts.
DragonSpark Malware East Asian Cyberattackers Create an OSS Frankenstein
Hackers cleverly cobbled together a suite of open source software — including a novel RAT — and hijacked servers owned by ordinary businesses.
Microsoft to Block Excel Addins to Stop Office Exploits
The company will block the configuration files, which interact with Web applications — since threat actors increasingly use the capability to install malicious code.
Security and the Electric Vehicle Charging Infrastructure
When EVs and smart chargers plug in to critical infrastructure, what can go wrong? Plenty.