Mac Attack: North Korea’s Lazarus APT Targets Apple’s M1 Chip
North Korean advanced persistent threat (APT) Lazarus is casting a wider net with its ongoing Operation In(ter)ception campaign, targeting Macs with Apple's M1 chip.
The state-sponsored group is continuing its...
China’s APT41 Embraces Baffling Approach for Dropping Cobalt Strike Payload
An analysis of China-backed advanced persistent threat (APT) actor APT41's activities has shown the group to be using a unique — and somewhat inexplicable — method for deploying its main Cobalt...
Celer Network shuts down bridge over potential DNS hijacking
Interoperability protocol Celer Network has asked its users to revoke the approval for several contracts after shutting down its cBridge over a suspected Domain Name System (DNS) hijacking. According to...
Building the Business Case for DevSecOps
“Resistance to change is proportional to how much the future might be altered by any given act.” — Stephen King
Humans are naturally resistant to change. The fear of the...
China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure
The RedAlpha advanced persistent threat (APT) group, thought to be linked to the Chinese state, has been spying on global humanitarian, think tank, and government organizations thanks to a...
‘Operation Sugarush’ Mounts Concerning Spy Effort on Shipping, Healthcare Industries
A Persian-speaking threat group has been discovered targeting industries ranging from healthcare to energy, with a particular focus on the shipping sector.
According to a report
from Mandiant, which named the...
When Countries Are Attacked: Making the Case for More Private-Public Cooperation
The Russian-supported Conti group's recent attack against Costa Rica led the country to declare a national emergency. The attack
impacted the country's Ministry of Finance and many other government institutions,...
‘DarkTortilla’ Malware Wraps in Sophistication for High-Volume RAT Infections
Researchers this week warned of a sophisticated, evasive crypter that several threat actors are using to distribute a range of information stealers and remote-access Trojans (RATs).
The crypter, dubbed "DarkTortilla,"...
Google Chrome Zero-Day Found Exploited in the Wild
A zero-day security vulnerability in Google's Chrome browser is being actively exploited in the wild.
The Internet behemoth released 11 security patches for Chrome this week, which are now being...
Another depeg: Acala trace report reveals 3B aUSD erroneously minted
High-profile security incidents continue to be a theme in 2022, with the Acala network joining a long list of stricken platforms to fall prey to exploits.The Acala USD (aUSD)...
