New Cross-Industry Group Launches Open Cybersecurity Framework
BLACK HAT USA – LAS VEGAS -- Amazon Web Services (AWS) and Splunk are leading an industry effort of 18 systems and security vendors to standardize how different monitoring...
88% of Nomad Bridge exploiters were ‘copycats’ — Report
Close to 90% of addresses taking part in the $186 million Nomad Bridge hack last week have been identified as “copycats,” making off with a total of $88 million...
Hackers Behind Twilio Breach Also Targeted Cloudflare Employees
By: Ravie Lakshmanan
Web infrastructure company Cloudflare on Tuesday disclosed at least 76 employees and their family members received text messages on their personal and work phones bearing similar characteristics...
The Business of Hackers-for-Hire Threat Actors
By: The Hacker News
Today's web has made hackers' tasks remarkably easy. For the most part, hackers don't even have to hide in the dark recesses of the web to...
Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws
August Patch Tuesday tackles 121 CVEs, 17 critical bugs and one zero-day bug exploited in the wild.
Microsoft is urging users to patch a zero-day vulnerability dubbed Dogwalk that...
OPSWAT Presents New Malware Analysis Capabilities for Operational Technology at Black Hat USA 2022
Las Vegas, Nev., August 10, 2022 –
OPSWAT, a global leader in critical infrastructure protection (CIP) cybersecurity solutions, today announced new malware analysis capabilities for IT and OT at...
Many ZTNA, MFA Tools Offer Little Protection Against Cookie Session Hijacking Attacks
Many of the tools that organizations are deploying to isolate Internet traffic from the internal network — such as multifactor authentication, zero-trust network access, SSO, and identity provider services...
Curve Finance exploit: Experts dissect what went wrong
Decentralized finance protocols continue to be targeted by hackers, with Curve Finance becoming the latest platform to be compromised after a domain name system (DNS) hijacking incident.The automated market...
Software Development Pipelines Offer Cybercriminals ‘Free-Range’ Access to Cloud, On-Prem
Continuous integration/continuous development (CI/CD) pipelines may be the most dangerous potential attack surface of the software supply chain, researchers say, as cyberattackers step up their interest in probing for...
What to watch for as ‘Hacker Summer Camp’ gets underway in Las Vegas
Written by Suzanne Smalley and AJ Vicens Aug...
