Security news that informs and inspires

2376 articles by

The Lasting Repercussions of the Sony Hack

The Sony Pictures hack in 2014 by the North Korean Lazarus Group was a seminal event both in Hollywood and in the security community, bringing to light the capabilities and ambitions of North Korean attackers and showing the damage a leak of sensitive data can be. Brian Raftery joins Dennis Fisher to discuss his new Ringer‬ podcast, The Hollywood Hack, that digs deep into the incident, its repercussions in Hollywood, and how it helped set the tone for how companies handle public data leaks.

Podcast, Sony

FTC: Verkada Must Create Security Program After Breaches

Security camera firm Verkada must develop and implement a security program after the company was hit with two separate security incidents in 2020 and 2021.

FTC

APT29 Watering Hole Attacks Used Spyware Exploits

The Russian-backed APT29 group was seen using the same iOS and Google Chrome exploits as commercial surveillanceware vendors NSO Group and Intellexa.

Spyware

Zero Day Exploit Reuse and A Busy Week for Iranian APTs

The focus was on Iranian APTs this week, both from private threat intelligence teams and CISA, exposing new operations from UNC757 and other groups targeting government, higher education, and private industry. We also check in on a new report from Google's Threat Analysis Group on APTs using the same exploits for zero days that were developed by private commercial surveillance vendors NSO Group and Intellexa.

Iran, Video

CISA: RansomHub Ransomware Has Hit 210 Victims

A new advisory by CISA and the FBI warned of recent attacks by RansomHub and said that the group and its affiliates have successfully hit over 210 victims since its inception in February.

Ransomware