Security news that informs and inspires

All Articles

1074 articles:

Attackers Eyeing Cloud Platforms

Attack groups are increasingly focusing their attention on cloud platforms and services as common entry points for victim networks.

Cloud

Decipher Podcast: Amanda Berlin

Amanda Berlin of Blumira joins Dennis Fisher to talk about how she got her start in security, learning new skills on the fly, and helping customers find the things that really matter on their networks.

Podcast

Mimecast Says Attackers Stole Certificate, Targeted Customers’ Email

Email security firm Mimecast said attackers stole a certificate some of its customers use to authenticate to some of its cloud services.

Data Breaches

New Rule May Require Banks to Report Incidents Sooner

A proposed rule from a trio of federal financial regulatory agencies aims to change current reporting requirements so that financial service organizations have to notify federal regulators of a security incident within 36 hours.

Bank Security, Government

No Easy Path to Cyber Norms

Discussions on developing norms for cyber operations have resurfaced in the wake of the SolarWinds breach and subsequent intrusions, but experts say it's not a simple task.

Government

Intel vPro Chips Include Ransomware Detection

The latest Intel vPro processor will include built-in protections to detect and block ransomware attacks, Intel said.

Hardware, Ransomware

Data Shows More Exploits Are Being Published on GitHub

From a vulnerability management perspective, it makes sense for defenders to be aware of which vulnerabilities have publicly available exploit code. Increasingly, much of that code is beginning to appear on GitHub.

Vulnerabilities

CISA Identifies Multiple Vectors Used by SolarWinds Attackers

CISA has found several initial access vectors used by the SolarWinds attackers, including abusing legitimate accounts and forging SAML tokens.

Government, Solarwinds

Number of SolarWinds Orion Servers Online Rising Post-Breach

The number of SolarWinds Orion servers online is rising in the past week, possibly a result of misconfigurations as customers work to patch after the breach.

Solarwinds, Government

Citrix Releases Mitigations for DDoS Attacks on ADC, Gateway Appliances

Citrix has released software mitigations to help prevent DDoS attacks using its ADC and Gateway appliances.

Citrix

Torvalds Favors Memory Protections in AMD Chips

Linux creator Linus Torvalds prefers AMD processors because of the chip company's unofficial support for ECC memory, something Intel has chosen not to offer for its non-server processors.

Hardware

SolarWinds Attackers Accessed, But Did Not Modify, Microsoft Source Code

The SolarWinds attackers had access to some Microsoft source code repositories, but did not have the ability to change them, the company said.

Microsoft, Solarwinds

Ransomware Task Force to Figure Out How To Fight Ransomware

A group of security and technology vendors, non-profit groups, and other organizations have formed a coalition to tackle the impact of ransomware on various industry sectors such as government, education, healthcare, and other critical verticals. The Ransomware Task Force will release a standard framework addressing how to deal with attacks.

Ransomware

Emotet Back in Circulation

The Emotet malware has begun spreading again after one of its periodic breaks, using Christmas and COVID lures.

Emotet, Malware

Decipher Library: Holiday Edition

The editors of Decipher have put together a list of books, technical and otherwise, you can enjoy during a well-deserved holiday break.

Books