Hi, what are you looking for?
In this edition of the Security Conversations podcast, John Hultquist, Manager of Cyber Espionage Threat Intelligence at ISIGHT Partners, talks about “NEWSCASTER,” a cyber espionage operation that uses fictitious social media accounts to launch attacks. Hultquist says the targeting, professional operational schedule and complexity suggest this activity is carried out by Iranian actors.
Related Reading: Iranian Hackers Targeted US Officials in Elaborate Social Media Attack Operation
How threat intelligence is critical when justifying budget for GRC personnel, and for threat intelligence, incident response, security operations and CISO buyers.
Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the password dependency cycle. But how can this be done?
Cybersecurity-related risk is a top concern, so boards need to know they have the proper oversight in place. Even as first-timers, successful CISOs make for successful board members.
A threat-based approach to security often focuses on a checklist to meet industry requirements but overlooked the key component of security: reducing risk.
Tips for making a presentation that will help improve the state of security programs and reflect favorably on the presenters and their companies
Technical details published for an Arm Mali GPU flaw leading to arbitrary kernel code execution and root on Pixel 6.
Apple rolled out iOS 16.3 and macOS Ventura 13.2 to cover serious security vulnerabilities.
VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.
Apple’s iOS 12.5.7 update patches CVE-2022-42856, an actively exploited vulnerability, in old iPhones and iPads.
Security researchers have observed an uptick in attacks targeting CVE-2021-35394, an RCE vulnerability in Realtek Jungle SDK.
Two vulnerabilities in Samsung’s Galaxy Store that could be exploited to install applications or execute JavaScript code by launching a web page.
Several vulnerabilities have been patched in OpenText’s enterprise content management (ECM) product.
Google has awarded more than $25,000 to the researchers who reported the vulnerabilities patched with the release of the latest Chrome update.
