News
Plain-English guides on web security, compliance, and keeping your clients protected.
Threat actors have been using long-dormant GitHub accounts to automate reconnaissance against organizations, according to research from Datadog. The activity has continued for months and involves effo...
Read article →Jen Ellis has been recognized as a Member of the Order of the British Empire, highlighting her work on behalf of the cybersecurity community and the security researchers whose findings help protect us...
Read article →Microsoft has analyzed a Windows backdoor that combines disk wiping, irreversible file encryption, surveillance and remote-control features in a single modular package. The company calls the Golang-ba...
Read article →Security researchers have disclosed six vulnerabilities in U-Boot, the widely used open-source bootloader found in embedded Linux systems, enterprise server management controllers, networking gear, in...
Read article →Progress Software is urging ShareFile customers to shut down Windows servers running Storage Zone Controllers after the company said it was responding to a credible external security threat. The vendo...
Read article →The UK’s National Cyber Security Centre (NCSC) says its Cyber Essentials Pathways proof of concept has shown that some organisations can meet the scheme’s security goals through alternative controls,...
Read article →Israeli startup QIZ Security said it has secured $17 million in seed funding to support its cryptographic posture management and post-quantum cryptography (PQC) platform. The round was led by Bessemer...
Read article →Security analysts say organizations should not assume they are safe simply because they are not part of a critical infrastructure sector. Recent guidance tied to Iranian cyber activity suggests that a...
Read article →A leaked transcript and supporting artifacts suggest that an unidentified US county paid $1 million to an extortion group after criminals claimed to have taken more than 2 TB of data. The episode, des...
Read article →A cybersecurity startup called IRIS C2 is advertising large payments for zero-day exploits and other offensive capabilities, according to its website and social media accounts. Public records and corp...
Read article →Mount Royal University in Calgary has confirmed that it suffered a cyberattack in June that led to unauthorized access to some data and disruption across several campus systems.In a notice posted on i...
Read article →Sophos has reported that several popular AI coding assistants are generating endpoint activity that resembles attacker behavior closely enough to trigger security controls designed for intrusion detec...
Read article →