Managing container vulnerability risks: Tools and best practices
Containers are quickly becoming the de facto form of compute and workload deployments in the cloud-native ecosystem. The latest Cloud Native Computing Foundation (CNCF) Cloud Native Survey shows that...
Karakurt Ensnares Conti, Diavol Ransomware Groups in Its Web
Connections that show the cybercriminal teams are working together signal shifts in their respective tactics and an expansion of opportunities to target victims.
Researchers have found financial and technological links...
New Hacking Campaign Targeting Ukrainian Government with IcedID Malware
By: Ravie Lakshmanan
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new wave of social engineering campaigns delivering IcedID malware and leveraging Zimbra exploits with the...
The best browsers for privacy: Secure web browsing
Big changes are afoot in the ad-sponsored web, and...
Feds: APTs Have Tools That Can Take Over Critical Infrastructure
Threat actors have developed custom modules to compromise various ICS devices as well as Windows workstations that pose an imminent threat, particularly to energy providers.
Threat actors have built and...
GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens
By: Ravie Lakshmanan
Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data...
Lazarus Group Behind $540 Million Axie Infinity Crypto Hack and Attacks on Chemical Sector
By: Ravie Lakshmanan
The U.S. Treasury Department has implicated the North Korea-backed Lazarus Group (aka Hidden Cobra) in the theft of $540 million from video game Axie Infinity's Ronin Network...
