Details emerge on how Axios was infected with a Remote Access Trojan in March, undermining the security in one of the most popular JavaScript libraries that has 100 million downloads weekly. The attack path was a customized social engineering attack
hack (35)
Stryker, a major medical equipment provider for the healthcare sector, has suffered a destructive cyberattack that wiped corporate data and severed employee access, likely from an Iranian sponsored hacking group.
Stryker Corporation is a global leader
The recent attack against the Polish power grid has been attributed to ELECTRUM, a Russian state-sponsored cyber group. That hack sought to disable communications and control units in Industrial Control Systems of heat and power systems.
Aggressive Na
Cybercriminals continue to target the cryptocurrency industry, this time with an exploit that affected the Balancer decentralized finance platform, with total losses exceeding $100 million and involving several exchanges that use the software across
We are entering the greatest window of opportunity for criminals and malicious actors since the creation of the Internet. Carnegie Mellon researchers have shown how AI systems can autonomously plan and execute cyberattacks against enterprise-grade de
The face of war is constantly changing. Cyberattacks have often been discounted as a support function at best when it comes to winning on a traditional battlefield. But if military weapons supply chains can be disrupted, it may shift perceptions. Den
Knights of Old, a 150-year-old UK company, is gone – due to a cyberattack! This terribly unfortunate event is a good example of how cybersecurity matters to every company that depends on digital technology - even if it is to run your books or manage
This may turn out to be the biggest #cryptocurrency hack in history! $1.5 BILLION. The details are sparse, but I am interested in the origins of this attack, especially if it was from a nation-state level attacker.
Apparently, it was the cold wallet t
Secureworks released a report detailing how North Korean attackers are targeting western countries with a new tactic. Attackers are fraudulently obtaining positions so they can victimize the employer!
I predict we will see more of these types of attac
One of the most impressive hacks ever! Such tremendous sophistication is the hallmark of Nation State level attackers. Truly epic, but should you be worried?
Some say no, as the attack is not currently widespread.
I say we should all be concerned wi
Hackers are exploiting an un-patchable vulnerability (CVE-2023–2868) in Barracuda Email Security Gateway appliances. Barracuda has announced that customers should discontinue using the email security product or upgrade. Hackers are using multiple typ
Aggressive countries are leveraging cyber to conduct offensive operations against targets across the globe. The threat of nation-state attacks is growing and I had the opportunity to discuss the challenges with Jeremey Strozer, a strategic risk and i
When I heard of the MSI compromise, I had similar fears of an IT supply chain attack. However, after walking the logic and high-level details I felt that the current attack was unlikely a sophisticated play to compromise downstream consumers of MSI p
One of my cybersecurity predictions for 2023 is the rise of cyber Private Military Companies (PMC) to specialize in cyberattacks.
One of the most famous PMCs currently in the news is the Russian Wagner group that is fighting for Russia on the ground
The cyber attacks on LastPass continue to be more invasive and damaging to its customers. Numerous security failures and poor leadership decisions have undermined this cybersecurity company’s reputation and sent its customers scrambling to protect t
On January 19, 2023, it was reported that thousands of PayPal accounts have been hacked. This news has caused concern among PayPal users who are now wondering if their own accounts have been compromised. In this blog post, we will provide an overview
The recent outage of the Federal Aviation Administration’s Notice to Air Missions (NOTAM) Pilot-Alert system, which triggered a 90 minute “ground stop” delayed over 9 thousand flights and was behind the cancelation of 1300, leaving countless flyers s
There are 3 things that LastPass customers need to know and do, to protect themselves from the recent encrypted vault breach!
Consider this a community service video for LastPass users!
Join The Community Discussion
CISO Platform
A global community of 5K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.
Join CISO Community Share Your Knowledge (Post A Blog)
