Prisma Cloud Provides New Extensive Use Cases for Azure Customers
Microsoft Azure customers can now secure their data and networks and gain broader governance across their cloud assets.
Prisma Cloud, a leader in Cloud Security Posture Management (CSPM), reduces...
Evasive KmsdBot Cryptominer/DDoS Bot Targets Gaming, Enterprises
A just-discovered evasive malware takes advantage of a key Internet-facing protocol to gain entry onto enterprise systems to mine cryptocurrency, launch distributed denial-of-service (DDoS) attacks, and gain a foothold...
LockBit Bigwig Arrested for Ransomware Crimes
One of LockBit's alleged ringleaders has been arrested in Ontario, Canada and is on his way to the US to face charges related to ransomware attacks against at least...
Malicious Python Package Relies on Steganography to Download Malware
Check Point Research has detected a malicious open source code package that uses steganography to hide malicious code inside image files.The malicious package was available on PyPI, a package index...
Several Cyber Attacks Observed Leveraging IPFS Decentralized Network
By: Ravie Lakshmanan
A number of phishing campaigns are leveraging the decentralized Interplanetary Filesystem (IPFS) network to host malware, phishing kit infrastructure, and facilitate other attacks.
"Multiple malware families are currently...
APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network
By: Ravie Lakshmanan
The Russia-linked APT29 nation-state actor has been found leveraging a "lesser-known" Windows feature called Credential Roaming as part of its attack against an unnamed European diplomatic entity.
"The...
Cloud9 Malware Offers a Paradise of Cyberattack Methods
A malicious browser extension that works on both Google Chrome and Microsoft Edge allows attackers to remotely take over someone's browser session and carry out a full range of...
Rezilion expands SBOM to support Windows environments
Software security platform Rezilion has expanded its Dynamic Software Bill of Materials (SBOM) capability to support Windows environments. The firm said the move will provide organizations with the tools...
GitHub releases new SDLC security features including private vulnerability reporting
GitHub has announced new security features across its platform to help protect the software development lifecycle (SDLC). These include private vulnerability reporting, CodeQL vulnerability scanning support for the Ruby...
Microsoft Quashes Bevy of Actively Exploited Zero-Days for November Patch Tuesday
Microsoft finally patched the publicly known "ProxyNotShell" and Mark of the Web (MotW) security vulnerabilities in its penultimate monthly security update for 2022 — two of six zero-day bugs...
