We’re Thinking About SaaS the Wrong Way
September 26 2022Many enterprise applications are built outside of IT, but we still treat the platforms they're built with as point solutions.
Read moreLeaking Passwords through the Spellchecker
September 26 2022Sometimes browser spellcheckers leak passwords:
When using major web browsers like Chrome and Edge, your form data is transmitted to Google and Microsoft, respectively, should enhanced spellcheck features be...
Read more
Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?
September 24 2022Is this the same suspect as before? Is he part of LAPSUS$? Is this the man who hacked Uber and Rockstar? And, if so, who else?
Read moreThis one has chewed-up tentacles. (Note that this is a different squid than the one that recently washed up on a South African beach.) As usual, you can also use this...
Read moreApp Developers Increasingly Targeted via Slack, DevOps Tools
September 23 2022Slack, Docker, Kubernetes, and other applications that allow developers to collaborate have become the latest vector for software supply chain attacks.
Read moreThe ongoing ad fraud campaign can be traced back to 2019, but recently expanded into the iOS ecosystem, researchers say.
Read moreAccused Russian RSOCKS Botmaster Arrested, Requests Extradition to U.S.
September 23 2022A 36-year-old Russian man recently identified by KrebsOnSecurity as the likely proprietor of the massive RSOCKS botnet has been arrested in Bulgaria at the request of U.S. authorities. At...
Read moreCISA: Zoho ManageEngine RCE Bug Is Under Active Exploit
September 23 2022The bug allows unauthenticated code execution on the company's firewall products, and CISA says it poses "significant risk" to federal government.
Read moreCybercriminals took control of enterprise Exchange Servers to spread large amounts of spam aimed at signing people up for bogus subscriptions.
Read moreHow Europe Is Using Regulations to Harden Medical Devices Against Attack
September 23 2022Manufacturers need to document a medical device's intended use and operational environment, as well as plan for misuse, such as a cyberattack.
Read more
Recent Comments