News

Threat Post2y

Black Hat and DEF CON Roundup - Threatpost

‘Summer Camp’ for hackers features a compromised satellite, a homecoming for hackers and cyberwarfare warnings. There was nothing typical this year at BSides LV, Black Hat USA and DEF CON ...
Threat Post3y

Authentication Risks Discovered in Okta Platform - Threatpost

Researchers at Authomize have discovered four “high impact” security risks in the identity and access management (IAM) platform Okta, according to a Tuesday report.
Threat Post3y

Large-Scale Phishing Campaign Bypasses MFA | Threatpost

Attackers used adversary-in-the-middle attacks to steal passwords, hijack sign-in sessions and skip authentication and then use victim mailboxes to launch BEC attacks against other targets.
Threat Post3y

Ransomware Risk in Healthcare Endangers Patients - Threatpost

Ryan Witt, Proofpoint's Healthcare Cybersecurity Leader, examines the impact of ransomware on patient care.
Threat Post3y

Travel-related Cybercrime Takes Off as Industry Rebounds

Researchers are warning a post-COVID upsurge in travel has painted a bullseye on the travel industry and has spurred related cybercrimes.
Threat Post3y

Potent Emotet Variant Spreads Via Stolen Email Credentials

The dangerous malware appears to be well and truly back in action, sporting new variants and security-dodging behaviors in a wave of recent phishing campaigns.
Threat Post3y

Cybercriminals Expand Attack Radius and Ransomware Pain Points

Melissa Bischoping, security researcher with Tanium and Infosec Insiders columnist, urges firms to consider the upstream and downstream impact of "triple extortion" ransomware attacks.
Threat Post3y

Sysrv-K Botnet Targets Windows, Linux | Threatpost

Unpatched vulnerabilities in the Spring Framework and WordPress plugins are being exploited by cybercriminals behind the Sysrv botnet to target Linux and Windows systems. The goal, according to ...
Threat Post3y

Security Turbulence in the Cloud: Survey Says… | Threatpost

Exclusive Threatpost research examines organizations’ top cloud security concerns, attitudes towards zero-trust and DevSecOps. Over the past 15 years, the cloud has blown business into a new age ...
Threat Post3y

Microsoft Takes Down Domains Used in Cyberattack Against Ukraine

Microsoft steps up defensive actions to ‘defend against an onslaught of cyberwarfare that has escalated since the invasion’ of Ukraine.
Threat Post3y

Apple Rushes Out Patches for 0-Days in MacOS, iOS - Threatpost

Apple rushed out patches for two zero-days affecting macOS and iOS Thursday, both of which are likely under active exploitation and could allow a threat actor to disrupt or access kernel activity.
Threat Post3y

Critical Sophos Security Bug Allows RCE on Firewalls

The security vendor’s appliance suffers from an authentication-bypass issue. Cybersecurity stalwart Sophos has plugged a critical vulnerability in its firewall product, which could allow remote ...