State actors from China, Iran, North Korea and other countries are targeting the Log4j (CVE-2021-44228) flaw.
Attackers were attempting to exploit the flaw to distribute the Emotet, Trickbot and Bazaloader malware.
John Hammond of Huntress discusses the seriousness of the Apache Log4j vulnerability, the community response, and how attackers are exploiting it.
Apple has released iOS 15.2 and macOS Monterey 12.1, which both include dozens of security fixes for critical flaws.
The use-after-free flaw (CVE-2021-4102) has been fixed in Chrome version 96.0.4664.110 for Windows, Mac and Linux. Learn more about it.
The widespread usage of Log4j is adding complexity to organizations attempting to apply patches.
John Hammond of Huntress joins Dennis Fisher to discuss the critical Log4j vulnerability, the community response, and the potential long-term effects of the bug.
This week's Source Code podcast by Decipher takes a look behind the scenes at top news with input from our sources.
While a patch is available from the Apache Software Foundation, researchers say that numerous companies may need to wait until vendors push security updates out to their own products.
Wade Baker and Ben Edwards of Cyentia Institute discuss the design and analysis of the data from the Cisco Security Outcomes Study.
New versions of Emotet have been dropping Cobalt Strike beacons directly, rather than relying on intermediate payloads such as Trickbot.
Starting in February 2020, attackers have leveraged weaknesses that occur “by design” in OAuth 2.0 implementations from Microsoft and GitHub.
Wade Baker and Ben Edwards of the Cyentia Institute join Dennis Fisher to discuss the process of designing and interpreting the data from the Cisco Security Outcomes study, what surprised them from the data, and how organizations can use the study.
The Moobot botnet has been infecting popular surveillance cameras and using them in distributed denial-of-service (DDoS) attacks.
Google has taken down servers associated with the huge Glupteba botnet and also sued two alleged operators of the network.