Article Twitter’s cybersecurity whistleblower: What it means for the community The recent whistleblower complaint against Twitter highlights the disconnect between cybersecurity experts and executives in organizations.
Article vSingle is abusing GitHub to communicate with the C2 server Lazarus' advanced persistent threat (APT) operations use malware specially crafted for attacking financial institutions, espionage, and disruptive…
Article Analysis of Nokoyawa ransomware Ransomware is an ongoing threat. New variants are constantly detected, and existing threats keep adding new features and techniques for performing…
Article Will corporate support for Fast ID Online [FIDO] mean mass adoption? If so, what does that mean for security and identity? FIDO for consumers offers a passwordless online experience, but will adoption mean better security and seamless identity?
Article Cybersecurity Weekly: IRS leak, TikTok bug, James Webb telescope photo installs malware IRS confirms data leak of personal info, TikTok bug in Android allows account hijack, and hackers use James Webb space telescope to install malware.…
Article 2022 cybersecurity spending trends: Where are organizations investing? Nearly 70 percent of organizations plan to spend more on cybersecurity in 2022. Learn what organizations are investing in — and why.
Article AstraLocker releases the ransomware decryptors Astralocker is a piece of ransomware first identified in 2021. It is probably a fork from the well-known Babuk and other ransomware like Rook.…
Article Security control mapping: Connecting MITRE ATT&CK to NIST 800-53 The alignment of NIST 853 and MITRE ATT&CK is a step toward simplifying threat and response profiles and how they relate to cyber threats.
Article Cybersecurity Weekly: Cobalt Strike DDoS, Patreon security team laid off, US sanctions Iran over APT activity Cobalt Strike servers DDoSed, city-operated ISP knocked offline due to ransomware, and Patreon lays off security team. All these and more in this…
Article LockBit 3.0 ransomware analysis Hospitals and health systems are susceptible to the LockBit ransomware.
Article Common misperceptions about PCI DSS: Let’s dispel a few myths Find out why your company should look into how payment card industry data security standards affect your business.
Article What is a cloud administrator? Essential roles and skills Learn about the role of a cloud administrator, the salary, required skills and certifications that can help advance a cloud administration career.
Article Linux+ certification: Related training and courses [2022 update] Learn about the popular, open-source operating system and how to study for the exam and advance your career.
Article Run your security awareness program like a marketer with these campaign kits Learn how security professionals can adopt basic marketing principles to transform an otherwise routine and easily dismissed security training…
Article 6 cybersecurity truisms the industry needs to rethink Do cybersecurity cliches make you roll your eyes? Alyssa Miller breaks down five of the most comment (and dangerous) truisms and why they need to…
Article Cybersecurity Weekly: Uber breach, Tesla Model Y NFC hack, EvilProxy phishing Details on Uber breach are still hazy, New Tesla Model Y NFC hack, and phishing service bypasses 2FA. All these and more in this week's edition of…
Article U.S. privacy and cybersecurity laws — an overview Learn how federal and state privacy laws intersect with cybersecurity and how to comply without being overwhelmed.
Article Red Teaming: Taking advantage of Certify to attack AD networks Learn more about using Certify to attack AD networks.
Article Bahamut Android malware and its new features Learn all about the Bahamut malware that is once again infecting devices.
Article How a career harnessing Navy nuclear energy can power a transition to a Security+ certification Whether in uniform or out, Charles Dorfeuille isn’t shy of a challenge. After more than 10 years as a nuclear electrician’s mate in the U.S. Navy,…
Article Understanding the DevSecOps Pipeline Learn more about DevSecOps, a DevSecOps Pipeline, the concept of Shift Left, what it is and why the Shift Left mindset is becoming essential.
Article Cybersecurity Weekly: Lapsus$ attacks Uber, NSA and CISA share info on ICS/OT threats, Microsoft Exchange Servers compromised Lapsus$ identified as source of Uber hack, NSA explains ICS/OT threats, and Microsoft Exchange servers compromised. All these and more in this…
Article Digium Phones Under Attack and how web shells can be really dangerous Learn about the dangers web shells have on Digium phones.
Article Luna ransomware encrypts Windows, Linux and ESXi systems Criminals use the Rust and Goland programming languages to develop new threats.
