Collaborate Disseminate
Invest and practice: Grant Oviatt, director of incident-response engagements at Red Canary, lays out the key building blocks for effective IR. Continue reading 3 Guideposts for Building a Better Incident-Response Plan
Aamir Lakhani, security researcher at Fortinet, says no sector is off limits these days: It’s time for everyone to strengthen the kill chain. Continue reading All Sectors Are Now Prey as Cyber Threats Expand Targeting
The private key used to sign the vaccine passports was leaked and is being passed around to create fake passes for the likes of Mickey Mouse and Adolf Hitler.
Continue reading EU’s Green Pass Vaccination ID Private Key Leaked
The kid was busted after abusing Google Ads to lure users to his fake gift card site. Continue reading Teen Rakes in $2.74M Worth of Bitcoin in Phishing Scam
The incident triggered shutdowns at pumps across the country as attackers flashed the phone number of Supreme Leader Ali Khamenei across video screens. Continue reading Cyber Attack Cripples Iranian Fuel Distribution Network
A SQL injection bug in the BillQuick billing app has not only leaked sensitive information, it’s also let malicious actors remotely execute code and deploy ransomware. Continue reading BillQuick Billing App Rigged to Inflict Ransomware
The Nobelium group, linked to Russia’s spy agency, is looking to use resellers as a path to infiltrate their valuable downstream customers – and it’s working. Continue reading SolarWinds APT Targets Tech Resellers in Latest Supply-Chain Cyberattacks
Google has caught and brushed off a bunch of cookie-stealing YouTube channel hijackers who were running cryptocurrency scams on, or auctioning off, ripped-off channels. Continue reading Google Crushes YouTube Cookie-Stealing Channel Hijackers
The APT, which targets Middle-Eastern energy firms & telecoms, has been relatively quiet since its exposure but not entirely silent. It’s kept up attacks through 2021 and is working on retooling its arsenal yet again. Continue reading Lyceum APT Returns, This Time Targeting Tunisian Firms
The accounts were used to catfish security researchers into downloading malware in a long-running cyber-espionage campaign attributed to North Korea. Continue reading Twitter Suspends Accounts Used to Snare Security Researchers