Catégorie : Cybersecurity

After an extended period underground, the Chinese hackers have added a more sophisticated infection chain and additional EDR evasion techniques.

The Coalition for Secure AI is a consortium of influential AI companies aiming to develop tools to secure AI applications and set up an ecosystem for sharing best practices.

Though the cybersecurity vendor has since reverted the update, chaos continues as companies continue to struggle to get back up and running.

Judge dismisses claims against SolarWinds for actions taken after its systems had been breached, but allows the case to proceed for alleged misstatements prior to the incident.

The tactic is not new, but there has been a steady increase in its use as of this spring.

The group — which has targeted Israel, Saudi Arabia, and other nations — often uses spear phishing and legitimate remote management tools but is developing a brand-new homegrown toolset.

Russian threat actor FIN17 has shifted gears multiple times in recent years, focusing now on helping ransomware groups be even more covertly effective.

Credential management gets a boost with the latest infostealers’ extortion campaign built on info stolen from cloud storage systems.

Retail banks in the nation-state will eliminate the use of one-time passwords (OTPs) by bank customers in an effort to thwart phishing.

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.