Security news that informs and inspires

All Articles

2237 articles:

The Origin of Threat Groups: Setting the Foundation

The Conti leaks show how threat groups have refined the process of building out their resources, talent and infrastructure.

Cybercrime, Threat Actors

Decipher Podcast: Source Code 4/8

This week's Source Code podcast by Decipher takes a look behind the scenes at top news with input from our sources.

Source Code

FIN7 Member Sentenced to Five Years in Jail

Denys Iarmak, 32, is the third member of the infamous FIN7 cybercrime group to be sentenced in the U.S.

Cybercrime

Meta Disrupts Two Iranian Threat Groups

Meta has disrupted the operations of two Iranian threat actors, including UNC788 and a previously unidentified group, that were using the company's platforms to target a wide range of victims.

Iran, Facebook

APT10 Espionage Attacks on U.S. Orgs Uncovered

A recent wide-ranging campaign shows how APT10 is broadening its victimology beyond Japanese organizations.

APT, Malware

Government Needs to be ‘Postured for the Future’ of Cyber Threats

The U.S. government and military is looking to attract and retain more talented cyber operators to keep pace with the evolving threat landscape.

Government

Decipher Podcast: Tazin Khan

Tazin Khan, founder of Cyber Collective, joins Dennis Fisher to talk about the ethos behind the group's work and the challenges of educating people about the safest ways to use technology.

Podcast

Hydra Market Takedown Indicative of ‘More Intense’ Law Enforcement Efforts

The takedown by German authorities of Hydra Market is only the latest law enforcement operation impacting darknet marketplaces.

Dark Web, Cybercrime

NSA Director: ‘We Need Speed, Agility, and Unity of Effort’

Joint partnerships between the government and private sector are helping to harden U.S. networks and address ongoing threats.

Government

FIN7 Evolves With New Malware, Initial Access Tactics

The threat group has been using a new initial access vector and a novel malware family in the first stages of its attack.

Malware, Cybercrime, Fin7

Decipher Podcast: Source Code 4/1

This week's Source Code podcast by Decipher takes a look behind the scenes at top news with input from our sources.

Source Code, Podcast

GitLab Fixes Critical Account-Takeover Bug

GitLab has patched a critical vulnerability caused by hardcoded passwords in several versions.

Gitlab

Local Government Ransomware Attacks Disrupt Public Services

Ransomware attacks on local governments over the past year have resulted in various public service disturbances, from disabling jail surveillance cameras to disrupting COVID-19 vaccination appointment scheduling.

Ransomware, Local Government, State and Local Government

Log4Shell Attacks by Chinese APT Reveal Windows Rootkit

After investigating the Deep Panda APT's recent exploitation attempts of the Log4j flaw, researchers uncovered a new kernel rootkit.

APT, Rootkit, Log4j

Researchers Warn of RCE Bug in Spring Framework

A remote code execution flaw in the Spring Java framework has been uncovered, and exploits are circulating in some places.

Java