Dropbox Code Repositories Stolen in Cyberattack on GitHub-Based Developers
A massive phishing campaign targeting GitHub users convinced at least one developer at Dropbox to enter in their credentials and a two-factor authentication code, leading to the theft of...
Deribit crypto exchange halts withdrawals amid $28M hot wallet hack
Major cryptocurrency derivatives exchange Deribit has halted withdrawals after suffering a $28 million hot wallet hack.Deribit exchange got its hot wallet compromised before midnight UTC on Nov. 1, the...
The Sky Is Not Falling: Disclosed OpenSSL Bugs Are Serious but Not Critical
Security experts described two highly anticipated vulnerabilities that the OpenSSL Project team patched Tuesday as issues that need to be addressed quickly, but not necessarily meriting a drop-everything-else type...
Chinese Hackers Using New Stealthy Infection Chain to Deploy LODEINFO Malware
By: Ravie Lakshmanan
The Chinese state-sponsored threat actor known as Stone Panda has been observed employing a new stealthy infection chain in its attacks aimed at Japanese entities.
Targets include media,...
China-Backed APT10 Supercharges Spy Game With Custom Fileless Backdoor
Chinese-speaking threat actor APT10 has been using a sophisticated and sometimes fileless backdoor to target media, diplomatic, governmental, public sector, and think-tank targets, since at least March, researchers have found.Researchers...
The OSPO – the front line for secure open-source software supply chain governance
Organizations of every shape, size, and sector have embraced open-source software (OSS). The financial, medical, and manufacturing industries – and even national security – now use OSS to power...
Scary stats: $3B stolen in 2022 as of ‘Hacktober,’ doubling 2021
The month of October has broken all records for crypto exploits and the amount of digital loot pilfered — living up to its new moniker of “Hacktober” — according...
White House Convenes International Ransomware Summit
U.S. officials will meet this week with delegations from more than 36 countries to share intelligence and strategize about how to push back against crippling and costly ransomware attacks...
Patch Now: Dangerous RCE Bug Lays Open ConnectWise Server Backup Managers
ConnectWise has patched a critical remote code execution (RCE) vulnerability in its ConnectWise Recover and R1Soft server backup manager technologies that could give attackers a way to compromise thousands...
Fodcha DDoS Botnet Resurfaces with New Capabilities
By: Ravie Lakshmanan
The threat actor behind the Fodcha distributed denial-of-service (DDoS) botnet has resurfaced with new capabilities, researchers reveal.
This includes changes to its communication protocol and the ability to...
