Hackers Target High-Privileged Okta Accounts via Help Desk
Threat actors are using social engineering to convince IT desk personnel to reset multifactor authentication (MFA) for highly privileged Okta enterprise accounts, gaining access to Read More
Securing Your Legacy: Identities, Data, and Processes
Legacy systems are the bane of IT pros everywhere. “Legacy” generally is defined as outdated computer hardware and software that remains stubbornly in place because Read More
MinIO Cyberattack Showcases Fresh Corporate Cloud Vector
A brand-new attack vector has emerged in the cloud, allowing cybercriminals to remotely execute code and take full control over systems running the distributed object Read More
Google’s Souped-Up Chrome Store Review Process Foiled by Data-Stealer
Malicious yet legitimate-looking Google Chrome browser extensions that steal people’s passwords and other sensitive data can still make it into the official app store, despite Google’s Read More
Russia’s ‘Fancy Bear’ APT Targets Ukrainian Energy Facility
The group, best known for 2016 US election interference and other attacks on Ukraine, used phishing emails offering pictures of women to lure its victim Read More
AtlasVPN Linux Zero-Day Disconnects Users, Reveals IP Addresses
A security researcher has published exploit code for AtlasVPN for Linux, which could enable anybody to disconnect a user and reveal their IP address simply Read More
Overcoming Open Source Vulnerabilities in the Software Supply Chain
As workforces grow increasingly digital, developers are looking for new ways to streamline their workloads. Currently, 78% of businesses report using open source software in some component Read More
How Companies Can Cope With the Risks of Generative AI Tools
Everyone’s experienced the regret of telling a secret they should’ve kept. Once that information is shared, it can’t be taken back. It’s just part of Read More
Data Initiatives Force Closer Partnership Between CISOs, CDOs
Big data initiatives and the growing adoption of generative AI and other data-driven projects are accelerating the need for security leaders and chief data officers Read More
Tuya Smart and Amazon Web Services Collaborate to Establish an IoT Security Lab
NEW YORK, Sept. 4, 2023 /PRNewswire/ — Tuya Smart (NYSE: TUYA, HKEX: 2391), a global IoT developer service provider, announced at the re:Inforce China conference to have jointly established a Read More