SEARCH
All Articles
Stealthy Malware Leverages MQTT Protocol in Spam Campaigns
Researchers observed thousands of spam emails delivering the WailingCrab malware that were sent to targets in North and South America, Europe and Asia.
Decipher Podcast: What We’re Thankful For
Dennis Fisher and Lindsey O'Donnell-Welch talk about some of things in the security community they're thankful for, and a couple of things they're not.
CISA Warns of Widespread Exploitation of Citrix Bleed Flaw
Citrix is urging impacted customers to update, but also recommends that they remove any active or persistent sessions and look for patterns of suspicious session use.
Morgan Stanley Fined $6.5M, Must Take Security Measures
The fine stems from two previously known Morgan Stanley data security incidents.
Four Threat Groups Targeted Zimbra Collaboration Flaw
Google's Threat Analysis Group has identified four separate campaigns targeting the Zimbra Collaboration vulnerability (CVE-2023-37580) in recent months.
Memory Safe: Merritt Baer
Merritt Baer, field CISO at Lacework and former member of the AWS office of the CISO, joins Lindsey O'Donnel-Welch in this week's Memory Safe episode to discuss her career arc, finding a true seat at the table as a security executive, and security as a business enabler.
EU Parliament Committee Rejects Mass Scanning of Encrypted Messages
A key European Union Parliament committee has rejected proposed language that would allow for mass scanning of encrypted messages.
Microsoft Patches Three Zero Days in November Update
Microsoft released patches for 57 vulnerabilities in November's Patch Tuesday update, including three flaws that have been actively exploited.
Decipher Podcast: Source Code 11/9
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
Lace Tempest Seen Exploiting SysAid Zero Day
A path traversal zero day (CVE-2023-47246) in the SysAid on-premises product is under active attack by the ace Tempest threat group.
CISOs, Developers and the Software Supply Chain Security Disconnect
A new report revealed discrepancies in how CISOs and developers view their roles and responsibilities around software supply chain security.
Decipher Podcast: Kymberlee Price
Kymberlee Price, co-founder of Zatik, joins Dennis Fisher to talk about her experience running security response programs at Microsoft, BlackBerry, and other companies, and how the changing security landscape helped lead her to start her own company.
New Gootloader Malware Variant Harder to Detect, Block
Researchers with IBM X-Force recently observed the new Gootloader variant being used for lateral movement, marking a significant change in the malware’s post-infection tactics.
Exploit Attempts, Ransomware Target Critical Confluence Flaw
Attackers are targeting the critical Atlassian Confluence flaw (CVE-2023-22518) with active exploit attempts, including some trying to deploy ransomware.
Decipher Podcast: Source Code 11/3
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.