5 Easy Steps to Bypass Google Pixel Lock Screens
PIN-locked SIM card? No problem. Its easy for an attacker to bypass the Google Pixel lock screen on unpatched devices.
Understanding the Rise of RiskBased Vulnerability Management
Risk-based vulnerability management solutions foster the convergence of risk management and vulnerability management. Andrew Braunberg explains what’s driving the emergence of RBVM.
How to Close Kubernetes Network Security Gap
StackRox bridges network security and other gaps and makes applying and managing network isolation and access controls easier while extending Kubernetes automation and scalability benefit.
Evasive KmsdBot CryptominerDDoS Bot Targets Gaming Enterprises
KmsdBot takes advantage of SSH connections with weak login credentials to mine currency and deplete network resources, as it gains a foothold on enterprise systems.
Patch ASAP Critical Citrix VMware Bugs Threaten Remote Workspaces With Takeover
Hole-y software alert, Batman: Cybercriminal faves Citrix Gateway and VMware Workspace ONE have authentication-bypass bugs that could offer up total access to attackers.
InterPlanetary File System Increasingly Weaponized for Phishing Malware Delivery
Cyber attackers like IPFS because it is resilient to content blocking and takedown efforts.
Cloud9 Malware Offers a Paradise of Cyberattack Methods
The Swiss Army knife-like browser extension is heaven for attackers — and can be hell for enterprise users.
What We Really Mean When We Talk About Cybersecurity
A lack of precision in our terminology leads to misunderstandings and confusion about the activities we engage in, the information we share, and the expectations we hold.
Microsoft Quashes Bevy of Actively Exploited ZeroDays for November Patch Tuesday
Long-awaited security fixes for ProxyNotShell and Mark of the Web bypasses are part of a glut of actively exploited zero-day vulnerabilities and other critical flaws that admins need to prioritize in the coming hours.
SolarWinds Faces Potential SEC Enforcement Act Over Orion Breach
In the nearly two years since the company discovered the cyber intrusion, SolarWinds has fundamentally rearchitected its development environment to make it much harder to compromise, CISO Tim Brown tells Dark Reading.