Black Hat 2019: Addressing Supply-Chain Risk Starts with People, Microsoft Says

LAS VEGAS – Supply-chain attacks have nabbed headlines lately thanks to high-profile incidents like the Wipro news last April, where attackers were able to compromise the staffing agency’s network and pivot to their customers. That incident point… Continue reading Black Hat 2019: Addressing Supply-Chain Risk Starts with People, Microsoft Says

Critical RCE Bug Found Lurking in Avaya VoIP Phones

The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant’s most popular models. Continue reading Critical RCE Bug Found Lurking in Avaya VoIP Phones

The Threat in the Cloud: Phishing Abuses Amazon AWS S3 Buckets

An ongoing campaign is hosting its phishing landing pages on enterprise-class public cloud storage services — a nascent trend meant to throw defenders off. Continue reading The Threat in the Cloud: Phishing Abuses Amazon AWS S3 Buckets