What are IABs? Initial Access Brokers (IABs) specialize in gaining unauthorized entry into computer systems and networks, then selling that access to other cybercriminals. This […]
SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps
Cybersecurity researchers have found that threat actors are setting up deceptive websites hosted on newly registered domains to deliver a known Android malware called SpyNote. […]
Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways
Palo Alto Networks has revealed that it’s observing brute-force login attempts against PAN-OS GlobalProtect gateways, days after threat actors warned of a surge in suspicious […]
OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclosure. The vulnerability, tracked […]
Zero-Day in CentreStack File Sharing Platform Under Attack
Gladinet’s platform is widely used among managed service providers, and a critical deserialization flaw could put MSP customers in jeopardy. ​The original article found on […]
AuthZEN Aims to Harmonize Fractured Authorization Controls
Managing permissions and authorizations across dozens or hundreds of cloud services and platforms poses significant headaches for companies. An open specification aims to change that. […]
Trump’s DoJ Targets Krebs, Revokes SentinelOne Security Clearance
An executive order is targeting former Trump appointees, including former CISA director Chris Krebs and his current coworkers, in the latest in a series of […]
Digital Asset Management Platform Liminal Raises $4.7M Funding Led by Elevation Capital
Post Content ​The original article found on darkreading Read More
Ping Identity Doubles Down on Partner Strategy with New Partner Program and Advisory Board
Post Content ​The original article found on darkreading Read More
_Araki-Illustrations-Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale)
Open Source Poisoned Patches Infect Local Software
Malicious packages lurking on open source repositories like npm have become less effective, so cyberattackers are using a new strategy: offering “patches” for locally installed […]