Securing CI/CD pipelines: 6 best practices
Recent cyberattacks leveraging weaknesses in continuous integration/continuous delivery (CI/CD) pipelines and developer tooling warrant a need for increased security of the developer infrastructure. Prominently, the Codecov supply-chain attack has...
NIST’s EO-mandated software security guidelines could be a game-changer
Following a string of high-profile supply chain hacks, President Biden's wide-ranging executive order on cybersecurity (EO) issued on May 12 directed the National Institute of Standards and Technology (NIST)...
Is gut instinct as effective as AI at spotting fakes online?
Earlier this year, the world looked on in amazement as a series of TikTok videos of a deepfake Tom Cruise showed the progress being made by the technology. The...
UK Police Seize $250M Worth of Crypto
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides...
Chinese Hackers Exploited Latest SolarWinds 0-Day in Targeted Attacks
By: Ravie Lakshmanan
Microsoft on Tuesday disclosed that the latest string of attacks targeting SolarWinds Serv-U managed file transfer service with a now-patched remote code execution (RCE) exploit is the...
Windows Hello Bypass Fools Biometrics Safeguards in PCs
A Windows security bug would allow an attacker to fool a USB camera used in the biometric facial-recognition aspect of the system.
A vulnerability in Microsoft’s Windows 10 password-free authentication...
REvil Ransomware Gang Mysteriously Disappears After High-Profile Attacks
By: Ravie Lakshmanan
REvil, the infamous ransomware cartel behind some of the biggest cyberattacks targeting JBS and Kaseya, has mysteriously disappeared from the dark web, leading to speculations that the...
Linux-Focused Cryptojacking Gang Tracked to Romania
The gang is using a new brute-forcer – “Diicot brute” – to crack passwords on Linux-based machines with weak passwords.
A cryptojacking gang that’s likely based in Romania is...
Apps Built Better: Why DevSecOps is Your Security Team’s Silver Bullet
Phil Richards, vice president and CSO at Ivanti, explains how organizations can design DevOps processes and systems to thwart cyberattacks.
Security should never be an afterthought when developing software and...
Cryptominer Farm Rigged with 3,800 PS4s Busted in Ukraine
Ukrainian cops seize PlayStation 4 consoles, graphics cards, processors and more in cryptomining sting involving alleged electricity theft.
Authorities in Ukraine have made another cybersecurity bust — this time shutting...
