Security News Sophos Endpoint continues to be recognized by analysts, independent testers and customers Sophos News
Security News Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability TheHackerNews
Security News Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware TheHackerNews
Security News It's Time to Establish the NATO of Cybersecurity Cybercriminals already operate across borders. Nations must do the same to protect their critical infrastructure, people, and technology from threats foreign and domestic.
Security News Ex-NSA Employee Pleads Guilty to Leaking Classified Data to Russia Ex-NSA employee pleads guilty to trying to transmit classified defense info to Russia, seeking $85,000 in exchange.
Security News Cyberattackers Alter Implant on 30K Compromised Cisco IOS XE Devices A seemingly sharp drop in the number of compromised Cisco IOS XE devices visible on the Internet led to a flurry of speculation over the weekend — but it turns out the malicious implants were just hiding.
How-To Articles Mageni Vulnerability and Attack Surface Management Platform. Mageni has been growing on me lately, and honestly I like it better than OpenVAS now. For those of you who followed my "OpenVAS howto", install article with the almighty Greenbone OpenVAS scanner, I think you will like this! Now, there are some pro's and cons
Security News Freelance Market Flooded with North Korean IT Actors Organizations should be careful that the workers they hire on a freelance and temporary basis are not operatives working to funnel money to North Korea's WMD program, US DOJ says.
Security News Ransomware actor exploits unsupported ColdFusion servers—but comes away empty-handed Multiple LockBit knock-off attacks in September targeting obsolete software foiled, exposing tactics and tools.
Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication Microsoft has announced that it plans to eliminate NT LAN Manager (NTLM) in Windows 11 in the future, as it pivots to alternative methods for authentication and bolster security. "The focus is on strengthening the Kerberos authentication protocol, which has been the default since 2000, and reducing reliance on
New PEAPOD Cyberattack Campaign Targeting Women Political Leaders European Union military personnel and political leaders working on gender equality initiatives have emerged as the target of a new campaign that delivers an updated version of RomCom RAT called PEAPOD. Cybersecurity firm Trend Micro attributed the attacks to a threat actor it tracks under the name Void Rabisu, which
Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration The advanced persistent threat (APT) actor known as ToddyCat has been linked to a new set of malicious tools that are designed for data exfiltration, offering a deeper insight into the hacking crew's tactics and capabilities. The findings come from Kaspersky, which first shed light on the adversary
Ransomware attacks doubled year on year. Are organizations equipped to handle the evolution of Ransomware in 2023? Ransomware attacks have only increased in sophistication and capabilities over the past year. From new evasion and anti-analysis techniques to stealthier variants coded in new languages, ransomware groups have adapted their tactics to bypass common defense strategies effectively. This article will cover just some of those new developments in Q3-2023
