2021 Attacker Dwell Time Trends and Best Defenses
The time that attackers stay hidden inside an organization’s networks is shifting, putting pressure on defenders and upping the need to detect and respond to threats in real-time.
Read More
Web Security
Microsoft, Google Clouds Hijacked for Gobs of Phishing
Attackers sent 52M malicious messages leveraging the likes of Office 365, Azure, OneDrive, SharePoint, G-Suite and Firebase storage in Q1 2021.
Read MoreKeksec Cybergang Debuts Simps Botnet for Gaming DDoS
The newly discovered malware infects IoT devices in tandem with the prolific Gafgyt botnet, using known security vulnerabilities.
Read MoreWindows PoC Exploit Released for Wormable RCE
The exploit pries open CVE-2021-31166, a bug with a CVSS score of 9.8 that was the baddest of the bad in Microsoft’s Patch Tuesday release last week.
Read MoreScammers Pose as Meal-Kit Services to Steal Customer Data
Attackers are sending messages disguised as offers from meal-kit services, like HelloFresh.
Read MoreIt’s Time to Prepare for a Rise in Insider Threats
Anurag Kahol, CTO at Bitglass, discusses options for detecting malicious or dangerous activity from within an organization.
Read MoreMicrosoft, Adobe Exploits Top List of Crooks’ Wish List
You can’t possibly patch all CVEs, so focus on the exploits crooks are willing to pay for, as tracked in a study of the underground exploit market.
Read MoreMagecart Goes Server-Side in Latest Tactics Changeup
The latest Magecart iteration is finding success with a new PHP web shell skimmer.
Read MoreWhat a Year It’s Been: RSA 2021 Embraces ‘Resilience’
Keynoters from Cisco, Netflix and RSA highlighted lessons from the last year, and cybersecurity’s new mandate in the post-pandemic world: Bounce back stronger.
Read MoreDarkSide Hits Toshiba; XSS Forum Bans Ransomware
The criminal forum washed its hands of ransomware after DarkSide’s pipeline attack & alleged shutdown: A “loss of servers” that didn’t stop another attack.
Read More