Google: Use SLSA Framework for Better Software Security
Organizations should implement the Supply Chain Levels for Software Artifacts (SLSA) framework when building software to ensure better software security and integrity, advocates Google — after the tech giant...
Iranian APT Targets US With Drokbk Spyware via GitHub
A subgroup of the state-backed Iranian threat actor Cobalt Mirage is using a new custom malware dubbed "Drokbk" to attack a variety of US organizations, using GitHub as a...
Report: Air-Gapped Networks Vulnerable to DNS Attacks
Common misconfigurations in how Domain Name System (DNS) is implemented in an enterprise environment can put air-gapped networks and the high-value assets they are aimed at protecting at risk...
Interpres Security Emerges from Stealth to Help Companies to Optimize Security Performance
CHARLESTON, S.C., Dec. 8, 2022 /PRNewswire/ — Interpres Security, a company dedicated to helping companies optimize their security performance with a comprehensive new approach to managing the defense surface,...
FTX hires forensics team to find customers’ missing billions: Report
The new management for bankrupt crypto exchange FTX has reportedly hired a team of financial forensic investigators to track down the billions of dollars worth of missing customer crypto.Financial...
Nomad releases bridge relaunch guide after patching contract vulnerability
The Nomad token bridge announced its relaunch guide after fixing the contract vulnerability that led to a $190 million exploit in August. According to a blog post from Dec....
Fraudsters Siphon $360M From Retailers Using 50M Fake Shoppers
Online fraudsters posing as consumers likely siphoned off more than $360 million from the marketing budgets of online businesses by generating fake clicks during Black Friday, while 20% of...
Rackspace Incident Highlights How Disruptive Attacks on Cloud Providers Can Be
A Dec. 2 ransomware attack at Rackspace Technology — which the managed cloud hosting company took several days to confirm — is quickly becoming a case study on the...
North Korean Lazarus Group is targeting crypto funds with a new spin on an...
Microsoft reports that a threat actor has been identified targeting cryptocurrency investment startups. A party Microsoft has dubbed DEV-0139 posed as a cryptocurrency investment company on Telegram and used...
