Name That Toon: Knives Out
What's a cartoon without a clever caption? For that we turn to you, our witty readers. Send us your ideas not only for the chance to win a $25 Amazon gift card, but...
Critical VMware Bug Exploits Continue, as Botnet Operators Jump In
Recently uncovered VMware vulnerabilities continue to anchor an ongoing wave of cyberattacks bent on dropping various payloads. In the latest spate of activity, nefarious types are going in with the...
How Threat Actors Are a Click Away From Becoming Quasi-APTs
The first shots fired in the current conflict between Russia and Ukraine were not by firearms, but keystrokes. In this new-age war, the cybersphere is a primary battleground, and...
Microsoft Flags Attack Targeting SQL Servers With Novel Approach
Microsoft Security Intelligence this week tweeted a warning about an attack campaign targeting SQL servers and using a new approach to evade PowerShell monitoring.
Instead of PowerShell, these threat actors are using sqlps.exe, a utility...
Phishing Attacks for Initial Access Surged 54% in Q1
Threat actors doubled down on their use of phishing emails as an initial attack vector during the first quarter of 2022 — and in many cases then used that access to...
Pro-Russian Information Operations Escalate in Ukraine War
In March, in the middle of Russia's invasion of Ukraine, a video surfaced that showed Ukraine's President Volodymyr Zelensky announcing his country's surrender to the Russian forces. Another story...
Partial Patching Still Provides Strong Protection Against APTs
Analysis has surfaced what many would consider a surprising insight: Organizations that always update to the newest versions of all of their software have roughly the same risk of being...
A Roadmap to Secure Connected Cars: Charting the WP.29’s UN Regulation No. 155
Connected cars are now on the way to becoming a regular part of everyday traffic all over the world. How should stakeholders make these vehicles more secure? The regulatory...
Commodified Cybercrime Infrastructure
Cybercriminal takeover
The server takeover is the earliest stage, where exposed assets are enumerated (i.e., via network scanners), accessed, and categorized by features (e.g., availability, bandwidth, and type of GPU)...
US aims to cut off foreign adversaries access to Americans’ personal data
An executive order could potentially allow American government agencies to hold the sale of personal US citizen data a national security threat.
The Biden administration has drafted an executive order...
