Security news that informs and inspires

2376 articles by

Ukrainian Organizations Hit With New Supply Chain Attack

Mandiant researchers recently discovered a new software supply chain attack that targeted Ukrainian government agencies with trojanized Windows installers.

Russia, Ukraine

Microsoft-Signed Malicious Driver Used in Pre-Ransomware Intrusions

Researchers have found a malicious driver signed by Microsoft used in the lead up to Hive and Cuba ransomware deployments.

Ransomware, Microsoft

Decipher Podcast: Andy Greenberg on Tracers in the Dark

Wired journalist and author Andy Greenberg joins Dennis Fisher to discuss his new book Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency, which tells the stories of the agents, academics, and security experts who tracked the admins of the Silk Road, AlphaBay, and other darknet markets through specialized blockchain tracing techniques.

Podcast

APT5 Exploiting New Flaw in Citrix ADC and Gateway

APT5, a Chinese threat group, has used a newly discovered flaw (CVE-2022-27518) in Citrix ADC and Gateway to target a small number of organizations.

Citrix, China

CISA Warns of Serious Flaws in Rockwell Automations PLCs

CISA is warning about a denial-of-service flaw in several lives of Rockwell Automation controllers, as well as a SQL injection bug in Advantech iView.

Iot Security