To Ease the Cybersecurity Worker Shortage, Broaden the Candidate Pipeline
I've been in the tech industry for 25 years, almost all in cybersecurity. I've held security leadership positions for well over a decade, including the 18 months as head...
SparklingGoblin Updates Linux Version of SideWalk Backdoor in Ongoing Cyber Campaign
A new Linux version of the SideWalk backdoor has been deployed against a Hong Kong university in a persistent attack that's compromised multiple servers key to the institution's network...
AutoRabit launches devsecops tool for Salesforce environments
Devsecops firm AutoRabit is trying to address security issues arising from policy changes and misconfigurations in Salesforce environments with a new offering, CodeScan Shield.CodeScan Shield is the next iteration...
Attackers Can Compromise Most Cloud Data in Just 3 Steps
Companies and their cloud providers often leave vulnerabilities open in their system and services, gifting attackers with an easy path to gain access to critical data.
According to an Orca Security analysis...
Lorenz Ransomware Goes After SMBs via Mitel VoIP Phone Systems
A ransomware gang has been seen using a unique initial-access tactic to exploit a vulnerability in voice-over-IP (VoIP) appliances to breach corporate phone systems, before pivoting to corporate networks...
Name That Toon: Shiver Me Timbers!
Avast ye! Come up with a cybersecurity-themed caption for the cartoon, above, and if it's Dark Reading editors' favorite, you'll win a $25 Amazon gift card. We offer four convenient ways for...
ShadowPad Threat Actors Return With Fresh Government Strikes, Updated Tools
A threat group previously associated with the notorious ShadowPad remote access Trojan (RAT) has been observed using old and outdated versions of popular software packages to load malware on...
Google Releases Pixel Patches for Critical Bugs
A pair of critical security vulnerabilities in Google's Pixel mobile phone line could lead to privilege escalation and device takeover.
The Pixel bugs, tracked as CVE-2022-20231 and CVE-2022-20364, are in the...
Hacktivist Group GhostSec Compromises 55 Berghof PLCs Across Israel
By: Ravie Lakshmanan
A hacktivist collective called GhostSec has claimed credit for compromising as many as 55 Berghof programmable logic controllers (PLCs) used by Israeli organizations as part of a...
China Accuses NSA’s TAO Unit of Hacking its Military Research University
By: Ravie Lakshmanan
China has accused the U.S. National Security Agency (NSA) of conducting a string of cyberattacks aimed at aeronautical and military research-oriented Northwestern Polytechnical University in the city...
