When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise

Commentary that downplays the compromise’s impact misses the point, the co-founder of Sonatype argues.

The post When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise appeared first on CyberScoop.

Continue reading When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise

Apple’s new Memory Integrity Enforcement system deals a huge blow to spyware developers

The system, a five-year effort to address memory safety “at scale,” is the result of spyware developers making zero-click exploits that targeted a device’s memory.

The post Apple’s new Memory Integrity Enforcement system deals a huge blow to spyware developers appeared first on CyberScoop.

Continue reading Apple’s new Memory Integrity Enforcement system deals a huge blow to spyware developers

U.S. indicts Ukrainian national for hundreds of ransomware attacks using multiple variants

The Department of Justice unsealed an indictment against a Ukrainian national alleged to be central to a ransomware campaign affecting hundreds of companies worldwide.  Volodymyr Viktorovych Tymoshchuk, known online as “deadforz,” “Boba,” “msfv,” and “farnetwork,” is accused of developing and deploying ransomware variants Nefilim, LockerGoga, and MegaCortex, all of which have been used in attacks […]

The post U.S. indicts Ukrainian national for hundreds of ransomware attacks using multiple variants appeared first on CyberScoop.

Continue reading U.S. indicts Ukrainian national for hundreds of ransomware attacks using multiple variants

Mitsubishi Electric to acquire Nozomi Networks in $1 billion deal

The acquisition represents the Japanese industrial giant’s largest to date.

The post Mitsubishi Electric to acquire Nozomi Networks in $1 billion deal appeared first on CyberScoop.

Continue reading Mitsubishi Electric to acquire Nozomi Networks in $1 billion deal

Top FBI official says Chinese reliance on domestic firms for hacking is a weakness

Jason Bilnoski with the FBI’s cyber division told CyberScoop that investigators seized on the mistakes of companies China has used in its widespread cyberespionage.

The post Top FBI official says Chinese reliance on domestic firms for hacking is a weakness appeared first on CyberScoop.

Continue reading Top FBI official says Chinese reliance on domestic firms for hacking is a weakness