Name That Toon: Modern-Day Fable
We provide the carrot — the chance to win a $25 Amazon gift card — and you provide a possible caption for the cartoon above. It's that simple (and...
WordPress Page Builder Plug-in Under Attack, Can’t Be Patched
Although the plug-in is no longer available, the Kaswara Modern WPBakery Page Builder Addons is still running on as many as 8,000 WordPress sites, according to analysts who warn...
Journalists Emerge as Favored Attack Target for APTs
Since 2021, various state-aligned threat groups have turned up their targeting of journalists to siphon data and credentials and also track them.
Targeted phishing attacks are traced to multiple threat...
A look inside Russian cybercrime syndicate TrickBot reveals an organized, potent adversary
Written by AJ Vicens Jul 15, 2022 |...
Sandworm APT Trolls Researchers on Its Trail as It Targets Ukraine
The infamous Sandworm threat group operating out of Russia's military GRU unit has no qualms about taunting researchers when it finds it is being watched. Just ask Robert Lipovsky and...
Ex-CIA Programmer Found Guilty of Stealing Vault 7 Data, Giving It to Wikileaks
Joshua Schulte, a former CIA programmer, has been found guilty by a jury in a Manhattan, NY court for stealing the trove of classified data on US cyber espionage...
Netwrix Auditor Bug Could Lead to Active Directory Domain Compromise
Netwrix IT asset tracker and compliance auditor, used across more than 11,500 organizations, contains a critical Insecure Object Deserialization vulnerability that could lead to Active Directory domain compromise, a new...
DHS Review Board Deems Log4j an ‘Endemic’ Cyber Threat
The US Department of Homeland Security's Cyber Safety Review Board (CSRB) has concluded that the Apache Log4j vulnerability disclosed in December 2021 will remain a significant risk to organizations...
Cryptocurrency ‘mixers’ see record transactions from sanctioned actors
Written by Tonya Riley Jul 14, 2022 |...
‘Callback’ Phishing Campaign Impersonates Security Firms
Victims instructed to make a phone call that will direct them to a link for downloading malware.
A new callback phishing campaign is impersonating prominent security companies to try to...
