Kevin Townsend

Identity deception attacks continue to grow, but the type of attack seems to be changing. During Q3, 2019, phishing campaigns impersonating brands dropped by...

"Spear phishing... remains the principal attack vector for most cybercrimes," says Europol in a new report. Sixty-five percent of targeted attack groups use it...

There have been many studies and investigations into the number of stolen credentials available on the dark web. However, a new report that was...

It's Often Difficult for Readers to Distinguish Between Hyperbole and Genuinely Shocking Survey Statistics

A chain of vulnerabilities in MikroTik routers could allow an attacker to gain a backdoor. The chain starts with DNS poisoning, goes on to...

A network of 50 honeypots deployed around the world has been catching and monitoring attacks against IoT devices. Such detected attacks have increased almost...

Raccoon is a malware-as-a-service (MaaS) infostealer that appeared in early 2019, and was aggressively marketed on underground forums from April 2019. Since then, its...

New Hardware-based Security Solution Helps Secure IoT Devices at the Silicon Level

Researchers have discovered a vulnerability in the Maxthon 5 Browser for Windows. Maxthon is a freeware browser developed by Maxthon Ltd, a firm headquartered...

Magecart is the umbrella term for a range of criminal groups that use software to perform digital credit card skimming. It isn't clear how...

Two bills, currently in the Senate, have the potential to change the U.S. cybersecurity landscape if passed into law. The first is the 'Cybersecurity...

Three years after Thoma Bravo acquired a majority holding in DigiCert, the Utah-based digital certificate firm has announced its acquisition by Clearlake Capital Group...

Shadow IT is a well-known and long-standing organizational issue that has never really been solved. The problem is that it is a boon as...

The California Attorney General Xavier Becerra has released the draft proposed regulations on how the state will enforce the California Consumer Protection Act (CCPA)...

Blockchain, or distributed ledger, is sometimes described as a 'solution in search of a problem'. There are many valid applications outside of pure cybersecurity...

In 2010, SANS reported that knowledge of the Pass the Hash attack first described some thirteen years earlier was still poor. By 2019, knowledge...

An analysis of more than 2.2 billion emails between April and June (Q2) 2019 exposes the current tactics, techniques and targets of contemporary attackers. 

Despite everything that has happened over the last four years, the security posture of the 2020 presidential candidates' campaign websites is little better and...

NIST has published a draft Zero Trust Architecture (ZTA) special publication (SP.800.207). The purpose is to develop a technology-neutral lexicon of the logical components...