Vulnerabilities/Threats

Machine-learning algorithms alone may miss signs of a successful attack on your organization.

The discovery adds to the growing list of recent incidents where threat actors have used public code repositories to distribute malware in software supply chain attacks.

A worsening threat landscape, increased digitization, and the long-term positive effects of modern security strategies are pushing critical infrastructure operators to do better.

For the right price, threat actors can get just about anything they want to launch a ransomware attack — even without technical skills or any previous experience.

With names, email addresses, and mobile numbers from underground databases, one person in five is at risk of account compromise even with SMS two-factor authentication in place.

Development of digital gateways to protect the places where we live, work, and converse need to be secure and many doors need to offer restricted access.

A dangerous VMware authentication-bypass bug could give threat actors administrative access over virtual machines.

The CVE-2022-27535 local privilege-escalation security vulnerability in the security software threatens remote and work-from-home users.

It's a myth that consuming and processing alerts qualifies as security. Today's technology allows better detection and prevention, rather than accepting the low bar for protection set by ingrained incident response reactions.

In the last month, "Pl0xP" cloned several GitHub repositories, adding malicious code to the forks that would attempt to infect developer systems and steal sensitive files that included software keys.

Copado's Kyle Tobener will discuss a three-pronged plan at Black Hat USA for addressing human weaknesses in cybersecurity with this medical concept — from phishing to shadow IT.

SMBs should patch CVE-2022-32548 now to avoid a host of horrors, including complete network compromise, ransomware, state-sponsored attacks, and more.

The malware packages had names that were common typosquats of a legitimate widely used Python library. One was downloaded hundreds of times.

Because they leave so little time to patch and defuse, zero-day threats require a proactive, multilayered approach based on zero trust.

Rising interest in chess may feed the next generation of cybersecurity experts.