Collaborate Disseminate
Threat hunters saw North Korean operatives almost daily, reflecting a 220% year-over-year increase in activity, CrowdStrike said in a new report.
The post CrowdStrike investigated 320 North Korean IT worker cases in the past year appeared first on CyberScoop.
Continue reading CrowdStrike investigated 320 North Korean IT worker cases in the past year
Unit 42 said social engineering — the method of choice for groups as diverse as Scattered Spider and North Korean tech workers — was the top initial attack vector over the past year.
The post Social engineering attacks surged this past year, Palo Alto Networks report finds appeared first on CyberScoop.
Continue reading Social engineering attacks surged this past year, Palo Alto Networks report finds
A new Microsoft report finds that the long-running threat group has gained positions on state-aligned ISPs and Russian telecoms, while tricking foreign embassy staff to download custom malware.
The post Russia-affiliated Secret Blizzard conducting ongoing espionage against embassies in Moscow appeared first on CyberScoop.
Google wants to shorten delays in the vulnerability lifecycle by sharing limited details about newly discovered defects within a week of reporting to the affected vendor.
The post Project Zero disclosure policy change puts vendors on early notice appeared first on CyberScoop.
Continue reading Project Zero disclosure policy change puts vendors on early notice
IBM’s yearly report finds that a data breach now costs U.S. organizations more than $10 million for recovery.
The post Research shows data breach costs have reached an all-time high appeared first on CyberScoop.
Continue reading Research shows data breach costs have reached an all-time high
Officials said thousands of people, typically between 11 and 25 years old, are engaged in a growing and evolving online threat to commit crime for money, retaliation, ideology, sexual gratification and notoriety.
The post FBI alerts tie together threats of cybercrime, physical violence from The Com appeared first on CyberScoop.
Continue reading FBI alerts tie together threats of cybercrime, physical violence from The Com
The Departments of Energy, Homeland Security and Health and Human Services have been impacted.
The post Microsoft SharePoint attacks ensnare 400 victims, including federal agencies appeared first on CyberScoop.
Continue reading Microsoft SharePoint attacks ensnare 400 victims, including federal agencies
Officials accuse the unnamed suspect of running XSS.is, a key and long-running marketplace with more than 50,000 registered users. The suspect allegedly made more than $8.2 million.
The post Authorities in Ukraine nab alleged admin of Russian-language cybercrime forum appeared first on CyberScoop.
Continue reading Authorities in Ukraine nab alleged admin of Russian-language cybercrime forum
The software defects, which have a maximum-severity rating, do not require authentication and allow remote attackers to execute code arbitrarily on the underlying system.
The post Cisco network access security platform vulnerabilities under active exploitation appeared first on CyberScoop.
Continue reading Cisco network access security platform vulnerabilities under active exploitation
Linen Typhoon, Violet Typhoon and Storm-2603 are behind the initial attack spree that erupted over the weekend. Other threat groups are now following suit.
The post Microsoft SharePoint zero-day attacks pinned on China-linked ‘Typhoon’ threat groups appeared first on CyberScoop.