Lazarus Group Hits COVID-19 Vaccine-Maker in Espionage Attack

The nation-state actor is looking to speed up vaccine development efforts in North Korea. Continue reading Lazarus Group Hits COVID-19 Vaccine-Maker in Espionage Attack

Defending Against State and State-Sponsored Threat Actors

State and state-sponsored threat actors are the apex predators of the cybersecurity world.   Continue reading Defending Against State and State-Sponsored Threat Actors

Zero-Click Apple Zero-Day Uncovered in Pegasus Spy Attack

The phones of 36 journalists were infected by four APTs, possibly linked to Saudi Arabia or the UAE. Continue reading Zero-Click Apple Zero-Day Uncovered in Pegasus Spy Attack

Critical Bugs in Dell Wyse Thin Clients Allow Code Execution, Client Takeovers

The bugs rate 10 out of 10 on the vulnerability-severity scale, thanks to the ease of exploitation. Continue reading Critical Bugs in Dell Wyse Thin Clients Allow Code Execution, Client Takeovers

Sunburst’s C2 Secrets Reveal Second-Stage SolarWinds Victims

Examining the backdoor’s DNS communications led researchers to find a government agency and a big U.S. telco that were flagged for further exploitation in the spy campaign. Continue reading Sunburst’s C2 Secrets Reveal Second-Stage SolarWinds Victims

Microsoft Caught Up in SolarWinds Spy Effort, Joining Federal Agencies

The ongoing, growing campaign is “effectively an attack on the United States and its government and other critical institutions,” Microsoft warned. Continue reading Microsoft Caught Up in SolarWinds Spy Effort, Joining Federal Agencies