Nobelium Phishing Campaign Poses as USAID
Microsoft uncovered the SolarWinds crooks using mass-mail service Constant Contact and posing as a U.S.-based development organization to deliver malicious URLs to more than 150 organizations.
The cybercriminal group behind...
Plug-ins for Code Editors Pose Developer-Security Threat
There are two critical vulnerabilities in plug-ins for the popular Visual Studio Code editor, now patched, but security firm Snyk warns that popular plug-ins could put development environments in...
SolarWinds Attackers Impersonate USAID in Advanced Email Campaign
Microsoft shares the details of a wide-scale malicious email campaign attributed to Nobelium, the group linked to the SolarWinds supply chain attack.The group behind last year's SolarWinds supply chain...
Modern SOCs a ‘Painful’ Challenge Amid Growing Complexity: Report
A new study examines the tools and technologies driving investment and activities for security operations centers.The complexity in managing security operations centers (SOCs) has spiked, survey data shows.
In its...
Microsoft says group behind SolarWinds hack now targeting government agencies, NGOs
The group behind the SolarWinds cyber attack identified late last year is now targeting government agencies, think tanks, consultants, and non-governmental organizations, Microsoft Corp said late on Thursday.“This week...
Building Multilayered Security for Modern Threats
Justin Jett, director of audit and compliance for Plixer, discusses the elements of a successful advanced security posture.
Considering recent announcements of major attacks caused by external malicious actors, including...
HPE Fixes Critical Zero-Day in Server Management Software
The bug in HPE SIM makes it easy as pie for attackers to remotely trigger code, no user interaction necessary.
Hewlett Packard Enterprise (HPE) has fixed a critical zero-day...
