Collaborate Disseminate
The Russia-linked threat group is harvesting credentials for Microsoft’s cloud offering, and targeting mainly election-related organizations. Continue reading APT28 Mounts Rapid, Large-Scale Theft of Office 365 Logins
Vulnerability-disclosure policies (VDPs), if done right, can help provide clarity and clear guidelines to both bug-hunters and vendors when it comes to going public with security flaws. Continue reading It’s No ‘Giggle’: Managing Expectations for Vulnerability Disclosure
A cloud misconfiguration at the gaming-gear merchant potentially exposed 100,000 customers to phishing and fraud. Continue reading Razer Gaming Fans Caught Up in Data Leak
The Linux-targeted code can steal phone-call metadata, likely in spy campaigns or for use in VoIP fraud. Continue reading CDRThief Malware Targets VoIP Gear in Carrier Networks
The malware has popped up in a targeted campaign and a new infection routine. Continue reading Zeppelin Ransomware Returns with New Trojan on Board
Using a legitimate tool called Weave Scope, the cybercrime group is establishing fileless backdoors on targeted Docker and Kubernetes clusters. Continue reading TeamTNT Gains Full Remote Takeover of Cloud Instances
The most concerning of the disclosed bugs would allow an attacker to take over Microsoft Exchange just by sending an email. Continue reading Microsoft’s Patch Tuesday Packed with Critical RCE Bugs
As IT systems, IoT and operational technology converge, attacks on cyber-physical systems in industrial, healthcare and other scenarios will come with dire consequences, Gartner predicts. Continue reading CEOs Could Be Held Personally Liable for Cyberattacks that Kill
If the social-media behemoth finds a bug in another platform’s code, the project has 90 days to remediate before Facebook goes public. Continue reading Facebook Debuts Third-Party Vulnerability Disclosure Policy
The top award for flaws that allow cybercriminals to abuse legitimate services has increased by 166 percent. Continue reading Google Ups Product-Abuse Bug Bounties