Building the Business Case for DevSecOps
“Resistance to change is proportional to how much the future might be altered by any given act.” — Stephen King
Humans are naturally resistant to change. The fear of the...
China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure
The RedAlpha advanced persistent threat (APT) group, thought to be linked to the Chinese state, has been spying on global humanitarian, think tank, and government organizations thanks to a...
‘Operation Sugarush’ Mounts Concerning Spy Effort on Shipping, Healthcare Industries
A Persian-speaking threat group has been discovered targeting industries ranging from healthcare to energy, with a particular focus on the shipping sector.
According to a report
from Mandiant, which named the...
When Countries Are Attacked: Making the Case for More Private-Public Cooperation
The Russian-supported Conti group's recent attack against Costa Rica led the country to declare a national emergency. The attack
impacted the country's Ministry of Finance and many other government institutions,...
‘DarkTortilla’ Malware Wraps in Sophistication for High-Volume RAT Infections
Researchers this week warned of a sophisticated, evasive crypter that several threat actors are using to distribute a range of information stealers and remote-access Trojans (RATs).
The crypter, dubbed "DarkTortilla,"...
Google Chrome Zero-Day Found Exploited in the Wild
A zero-day security vulnerability in Google's Chrome browser is being actively exploited in the wild.
The Internet behemoth released 11 security patches for Chrome this week, which are now being...
Another depeg: Acala trace report reveals 3B aUSD erroneously minted
High-profile security incidents continue to be a theme in 2022, with the Acala network joining a long list of stricken platforms to fall prey to exploits.The Acala USD (aUSD)...
Whack-a-Mole: More Malicious PyPI Packages Spring Up Targeting Discord, Roblox
Just a week after 10 malicious software packages were found nesting in the Python Package Index (PyPI) repository, several more have come to light, uncovered by different firms. It's...
Microsoft Disrupts Russian Group’s Multiyear Cyber-Espionage Campaign
Microsoft's Threat Intelligence Center (MSTIC) has taken steps to disrupt the operations of "Seaborgium," a Russia-based threat actor that has been involved in persistent spear-phishing and credential-theft campaigns aimed...
Xiaomi Phone Bug Allowed Payment Forgery
Mobile transactions could’ve been disabled, created and signed by attackers.
Smartphone maker Xiaomi, the world’s number three phone maker behind Apple and Samsung, reported it has patched a high-severity flaw...
