Collaborate Disseminate
At least five APTs are believed involved with attacks tied ground campaigns and designed to damage Ukraine’s digital infrastructure. Continue reading Cyberattacks Rage in Ukraine, Support Military Operations
A campaign by APT37 used a sophisticated malware to steal information about sources , which appears to be a successor to Bluelight. Continue reading Nation-state Hackers Target Journalists with Goldbackdoor Malware
How to use zero-trust architecture effectively in today’s modern cloud-dependent infrastructures. Continue reading Zero-Trust For All: A Practical Guide
Threat actors target Office 365 and Google Workspace in a new campaign, which uses a legitimate domain associated with a road-safety center in Moscow to send messages. Continue reading Attackers Spoof WhatsApp Voice-Message Alerts to Steal Info
Ghostwriter is one of 3 campaigns using war-themed attacks, with cyber-fire coming in from government-backed actors in China, Iran, North Korea & Russia. Continue reading Belarusian ‘Ghostwriter’ Actor Picks Up BitB for Ukraine-Related Attacks
A bug in Honda is indicative of the sprawling car-attack surface that could give cyberattackers easy access to victims, as global use of ‘smart car tech’ and EVs surges. Continue reading Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn
Mystified? Now’s the time to learn about cryptocurrency-associated risks: Listen to KnowBe4’s Dr. Lydia Kostopoulos explain blockchain, NFTs and how to stay safe. Continue reading A Blockchain Primer and a Bored Ape Headscratcher – Podcast
Lapsus$ added IT giant Globant plus 70GB of leaked data – including admin credentials for scads of customers’ DevOps platforms – to its hit list.
Continue reading Lapsus$ ‘Back from Vacation’
“We made a mistake,” Okta said, owning up to its responsibility for security incidents that hit its service providers and potentially its own customers. Continue reading Okta Says It Goofed in Handling the Lapsus$ Attack
The supply-chain attack on the U.S. energy sector targeted thousands of computers at hundreds of organizations, including at least one nuclear power plant.
Continue reading DOJ Indicts Russian Gov’t Employees Over Targeting Power Sector