Cybercrime
In a recent attack against a cryptocurrency exchange, the North Korea-linked Lazarus group went the extra mile by deploying malware for macOS, Kaspersky Lab...
Hi, what are you looking for?
SecurityWeek
Nation-State
The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
ICS/OT
The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said.
ICS/OT
The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.
Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Malware & Threats
A recent wave of ransomware attacks against organizations around the world have been linked to a notorious North Korean threat actor, security firm Check...
Nation-State
North Koren hackers are exploiting a recently patched vulnerability in Microsoft's VBScript engine vulnerability
Malware & Threats
Following trails of reused code, security researchers at Intezer and McAfee have uncovered new links between malware families attributed to North Korean threat groups...
Cyberwarfare
Watering Hole Attacks Target South Korean Users With ActiveX Exploits
Compliance
The United States on Friday formally lifted a crippling ban on exports to China's ZTE, rescuing the smartphone maker from the brink of collapse...
Cybercrime
A series of malicious Hangul Word Processor (HWP) documents used in recent attacks on cryptocurrency exchanges have been attributed to the North Korea-linked Lazarus...
Cyberwarfare
The U.S. Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have published another report on the US-CERT website detailing a...
Cyberwarfare
The number of cyber-attacks targeting Singapore skyrocketed from June 11 to June 12, during the meeting between U.S. President Donald Trump and North Korean...
Cyberwarfare
An ActiveX zero-day vulnerability discovered recently on the website of a South Korean think tank focused on national security has been abused by the...
Cyberwarfare
A threat actor linked to North Korea’s Lazarus Group has stopped targeting organizations in the United States, but remains active in Europe and East...
Cyberwarfare
The U.S. Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have issued another joint technical alert on the North Korea-linked...
Mobile & Wireless
Recent attacks orchestrated by a hacking group referred to as “Sun Team” have targeted North Korean deflectors via malicious applications in the Google Play...
Cyberwarfare
North Korea on Wednesday denied hacking the database of a UN committee tasked with monitoring sanctions against Pyongyang, and called on Washington to focus...
Audits
Researchers have analyzed an older version of North Korea’s SiliVaccine antivirus and discovered that it uses an outdated scanning engine from Japanese security solutions...
Cyberwarfare
The recently discovered KevDroid Android backdoor is tied to the North Korean hacking group APT37, Palo Alto Networks researchers say.
Cybercrime
The infamous North Korean hacking group known as Lazarus is responsible for attacking an online casino in Central America, along with various other targets,...
Nation-State
An attack leveraging the compromised website of a Hong Kong telecommunications company is using a recently patched Flash vulnerability that has been exploited by...
Cybercrime
New North Korean Hidden Cobra / Lazarus Campaign Targets Financial Institutions in TurkeyHidden Cobra, also known as the Lazarus Group from North Korea, is...
Cyberwarfare
A threat actor apparently interested in inter-Korean affairs continues to launch highly targeted attacks using new pieces of malware and decoy documents referencing North...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)