FamousSparrow APT Group Flocks to Hotels, Governments, Businesses
A cyberespionage group dubbed FamousSparrow is targeting hotels, governments, and private businesses around the world, leveraging the ProxyLogon Microsoft Exchange Server vulnerability along with its own custom backdoor, SparrowDoor.
ESET...
NIST Brings Threat Modeling into the Spotlight
One noteworthy element of the National Institute of Standards and Technology's recent Recommended Minimum Standard for Vendor or Developer Verification of Code is the prominence given to threat modeling, which is...
Apple Patches Zero-Days in iOS, Known Vuln in macOS
Apple today released security updates for three vulnerabilities in iOS and one flaw in macOS Catalina. Two of the iOS flaws may have been actively exploited, while exploits for...
10 top API security testing tools
Application programming interfaces (APIs) are a critical part of most modern programs and applications. In fact, both cloud deployments and mobile applications have come to rely so heavily on...
Who Is BlackMatter?
If you hadn't heard of BlackMatter before this week, you now likely know it as the group linked to a recent ransomware attack against Iowa-based farm services provider New...
Password Reuse Problems Persist Despite Known Risks
While people have become aware of the pitfalls of password security, about two-thirds continue to use the same password, or a variation of that password, for their accounts. That's a...
