CXO
SecuritySoftware Supply Chain Security Attacks Up 200%: New Sonatype Research
Sonatype's 9th annual State of the Software Supply Chain also covers regulations and how AI could help developers protect organizations from security risks.
-
Image: ArtemisDiana/Adobe Stock -
Image: Askha/Adobe Stock Amazon
SecurityNew DDoS Attack is Record Breaking: HTTP/2 Rapid Reset Zero-Day Reported by Google, AWS & Cloudflare
A vulnerability in the HTTP/2 network protocol is currently being exploited, resulting in the largest DDoS attack in history. Find out what security teams should do now, and hear what Cloudflare's CEO has to say about this DDoS.
-
Attack chain representation with EvilProxy being used as a reverse proxy. Image: Menlo Security CXO
SecurityNew EvilProxy Phishing Attack Uses Indeed.com Redirector to Target US Executives
Microsoft, the Dark Web and the name John Malkovich all factor into this EvilProxy phishing attack. The good news is there are steps IT can take to mitigate this security threat.
-
Image: ~ Bitter ~/Adobe Stock International
SecurityZenRAT Malware Targets Windows Users Via Fake Bitwarden Password Manager Installation Package
We talked to Proofpoint researchers about this new malware threat and how it infects Windows systems to steal information.
-
Image: Sergey Nivens/Adobe Stock Big Data
SecurityCensys Reveals Open Directories Share More Than 2,000 TB of Unprotected Data
These open directories could leak sensitive data, intellectual property or technical data and let an attacker compromise the entire system. Follow these security best practices for open directories.
-
Image: James Thew/Adobe Stock Microsoft
SecurityNew DarkGate Malware Campaign Hits Companies Via Microsoft Teams
Get technical details about how this new attack campaign is delivered via Microsoft Teams and how to protect your company from this loader malware.
-
Image: Michael Traitov/Adobe Stock Artificial Intelligence
Artificial IntelligenceUK’s NCSC Warns Against Cybersecurity Attacks on AI
The National Cyber Security Centre provides details on prompt injection and data poisoning attacks so organizations using machine-learning models can mitigate the risks.
-
Image: SomYuZu/Adobe Stock International
SecurityCisco Talos Research: New Lazarus Group Attack Malware Campaign Hits UK & US Businesses
The Cisco Talos report exposes new malware used by the group to target Internet backbone infrastructure and healthcare organizations in the U.K. and the U.S.
-
Image: Sashkin/Adobe Stock Apple
SecurityXLoader Malware Variant Targets MacOS Disguised as OfficeNote App
A new variant of malware called XLoader is targeting macOS users. XLoader’s execution, functionalities and distribution are detailed.
-
Image: ronstik/Adobe Stock Microsoft
SecurityMajor US Energy Company Hit by QR Code Phishing Campaign
This QR code phishing campaign is targeting multiple industries and using legitimate services such as Microsoft Bing to increase its efficiency and bypass security.