Vulnerabilities/Threats

The previously unknown state-sponsored group is compromising industrial targets with the ShadowPad malware before burrowing deeper into networks.

Swarms of breach attempts against the Atlassian Confluence vulnerability are likely to continue for years, researchers say, averaging 20,000 attempts daily as of this week.

Developers need to think like WAF operators for security. Start with secure coding and think of Web application firewalls not as a prophylactic but as part of the secure coding test process.

Like a hydra, every time one ransomware gang drops out (REvil or Conti), plenty more step up to fill the void (Black Basta).

Abuse primitives have a longer shelf life than bugs and zero-days and are cheaper to maintain. They're also much harder for defenders to detect and block.

Researchers have created a new community website for reporting and tracking security issues in cloud platforms and services — plus fixes for them where available.

LockBit 3.0 promises to 'Make Ransomware Great Again!' with a side of cybercrime crowdsourcing.

Cerby platform emerges from stealth mode to let users automate security for applications outside of the standard IT purview.

If you haven't properly addressed the issue, you're already behind. But even if you've had a false start, it's never too late to get back up.

Continuous monitoring is key to keeping up with software-as-a-service changes, but that's not all you'll need to get better visibility into your SaaS security.

Analysts say an 18% drop in ransomware attacks seen in May is likely fleeting, as Conti actors regroup.

Bronze Starlight’s use of multiple ransomware families and its victim-targeting suggest there’s more to the group’s activities than just financial gain, security vendor says.

Bipartisan legislation allows cybersecurity experts to work across multiple agencies and provides federal support for local governments.

The concept might make us sharp and realistic, but it's not enough on its own.

To prevent these attacks, businesses must have complete visibility into, and access and management over, disparate devices.