North Korea Poses as Meta to Deploy Complex Backdoor at Aerospace Org
North Korea’s state-sponsored Lazarus Group appears to have added a complex and still evolving new backdoor to its malware arsenal, first spotted in a successful Read More
The Silent Threat of APIs: What the New Data Reveals About Unknown Risk
The rapidly evolving digital landscape has given organizations a wealth of capabilities, largely due to the proliferation of cloud applications. Yet, with this boon comes Read More
DHS: Physical Security a Concern in Johnson Controls Cyberattack
In the latest development around the cyberattack impacting Johnson Controls International (JIC), officials at the Department of Homeland Security (DHS) are now reportedly concerned that the Read More
Making Sense of Today’s Payment Cybersecurity Landscape
The surge in cybercrime activity since the outbreak of the COVID-19 pandemic has been tough to ignore. This is particularly true for “high-value” sectors such Read More
Attacks on Azerbaijan Businesses Drop Malware via Fake Image Files
A spear-phishing email posing as a memo from the president of an Azerbaijan company hid malware behind images to infiltrate businesses associated with the firm. Read More
Researchers Release Details of New RCE Exploit Chain for SharePoint
Researchers who discovered two critical vulnerabilities in Microsoft SharePoint Server have released details of an exploit they developed that chains the two vulnerabilities together to Read More
Johnson Controls International Disrupted by Major Cyberattack
Johnson Controls International (JCI) this week reported in a filing with the US Securities and Exchange Commission (SEC) that it had suffered a cyberattack that Read More
New Cisco IOS Zero-Day Delivers a Double Punch
A vulnerability affecting Cisco operating systems could enable attackers to take full control of affected devices, execute arbitrary code, and cause reloads that trigger denial Read More
Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain
An Israeli surveillanceware company used the three Apple zero-day vulnerabilities disclosed last week to develop an exploit chain for iPhones, and a Chrome zero-day to Read More
How Can Your Security Team Help Developers Shift Left?
Question: How can I get my organization to shift its security left without slowing down our developers? Scott Gerlach, CSO and co-founder of StackHawk: Ultimately, Read More