Hacker-for-Hire Group Spied on More Than 3,500 Targets in 18 Months
A Russian-speaking hacker-for-hire group has been quietly spying on thousands of individuals and organizations worldwide and selling highly private information about them to various customers, motivated by financial gain...
Microsoft Nov. Patch Tuesday Fixes Six Zero-Days, 55 Bugs
Experts urged users to prioritize patches for Microsoft Exchange and Excel, those favorite platforms so frequently targeted by cybercriminals and nation-state actors.
Microsoft reported a total of 55 vulnerabilities, six...
New Android Spyware Poses Pegasus-Like Threat
PhoneSpy already has stolen data and tracked the activity of targets in South Korea, disguising itself as legitimate lifestyle apps.
Researchers discovered new Android spyware that provides similar capabilities to...
Dark Reading Video News Desk Comes to Black Hat Europe
Nov. 10, 2021 — The Dark Reading News Desk has, in past years, come to you live from Black Hat with live video interviews featuring top security researchers who...
Securing the Public: Who Should Take Charge?
BLACK HAT EUROPE 2021 — London — When governments rely on private organizations to build and protect their digital infrastructure, who is charged with protecting the public? How can...
Defining the Hierarchy of Value in Cyber Intelligence
Since our adversaries are not on the same playing field as we are, perhaps it's time to rethink the rules of the game or how much we choose to...
SolarWinds Vulnerability Exploited in First Stage of Clop Ransomware Attacks
A recent surge in Clop ransomware attacks led researchers to spot a common thread in the first stage of the attack: the exploitation of a known and patched vulnerability in SolarWinds...
Massive Zero-Day Hole Found in Palo Alto Security Appliances
Researchers have a working exploit for the vulnerability (now patched), which allows for unauthenticated RCE and affects an estimated 70,000+ VPN/firewalls.
Researchers have developed a working exploit to gain...
Critical Citrix DDoS Bug Shuts Down Network, Cloud App Access
The distributed computing vendor patched the flaw, affecting Citrix ADC and Gateway, along with another flaw impacting availability for SD-WAN appliances.
A critical security bug in the Citrix Application Delivery...
4 tools to prevent leaks in public code repositories
Secrets stored in Git repositories have been a thorn in the side of developers and a go-to source for attackers for a long time. Ensuring that sensitive information is...
