Hi, what are you looking for?
SecurityWeek
Nation-State
The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
ICS/OT
The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said.
ICS/OT
The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.
Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Cybercrime
North Korea-linked hacking group Lazarus stole close to $400 million worth of crypto-assets last year, Chainalysis reports.
Cyberwarfare
China-linked cyberespionage group Aquatic Panda was recently observed exploiting the Log4Shell vulnerability to compromise a large academic institution, CrowdStrike’s Falcon OverWatch team reports.
Cybercrime
The Belgian military said on Tuesday it had been hit with a cyberattack five days ago and was still battling to restore affected parts...
Application Security
If defenders needed any more urgency to patch and mitigate the explosive Log4j zero-day, along comes word that APT actors linked to China, Iran,...
Malware & Threats
Kaspersky has analyzed a new espionage campaign conducted by the threat actor named ScarCruft, and the security firm’s researchers have uncovered a previously unknown...
Cybercrime
A North Korea-linked threat actor tracked as TA406 has intensified its attacks in 2021, particularly credential harvesting campaigns, Proofpoint reports.
Application Security
The North Korea-linked state-sponsored hacking group Lazarus has started to target the IT supply chain in recent attacks, according to cybersecurity firm Kaspersky.
Audits
A previously unseen threat actor, likely a nation-state, is targeting various entities in South Asia, with a focus on Afghanistan, according to a warning...
Nation-State
Threat hunters at Microsoft are raising the alarm about a new Iran-linked threat actor caught using password-spraying techniques to break into defense technology companies...
Incident Response
Understanding the naming conventions of various threat groups can help us better understand the overall threat landscape
Cybercrime
A prominent American cryptocurrency promoter and former hacker has pleaded guilty to advising North Korea on using virtual money to avoid international controls, a...
Cybercrime
A major U.S. port was the target last month of suspected nation-state hackers, according to officials.The Port of Houston, a critical piece of infrastructure...
Cyberwarfare
Nation-State
A new domain name system (DNS) attack method that involves registering a domain with a specific name can be leveraged for what researchers described...
Cyberwarfare
Hacking Operation Sought to Help China Develop Cyberattack Capabilities for Damaging and Disrupting U.S. Pipelines
Cybercrime
The South Korean Atomic Energy Research Institute (KAERI) has confirmed that an unknown third-party gained unauthorized access to its systems.
Cybercrime
Nuclear-armed North Korea is advancing on the front lines of cyberwarfare, analysts say, stealing billions of dollars and presenting a clearer and more present...
Application Security
A North Korean government-backed APT group has been caught using a fake pen-testing company and a range of sock puppet social media accounts in...
Cybercrime
During an attack on the defense industry, the North Korea-linked threat group known as Lazarus was able to exfiltrate data from a restricted network...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)