-
North Korean threat actor APT43 pivots back to strategic cyberespionage
PRIVACY PRIVACY When it comes to threat actors working for the North Korean government, most people have heard of the Lazarus group (APT38). It was responsible for the 2014 attack against Sony Pictures, the 2016 cyber heist of funds belonging to the central bank of Bangladesh, and the 2017 WannaCry ransomware worm. However, another team…
-
Noname Security releases API security updates
PRIVACY PRIVACY API security vendor Noname Security today announced a new release of its platform, with a number of upgrades designed to enhance visibility into a user’s API environment and protect against the growing number of API-based threats. The growth in the number of those threats has been fueled by the increasing centrality of APIs…
-
Google Warns Against Commercial Spyware Exploiting Zero-Days
PRIVACY PRIVACY Spyware vendors facilitated the spread of malware by government-backed threat actors Read More
-
Clop Ransomware Group Exploits GoAnywhere MFT Flaw
PRIVACY PRIVACY The vulnerability has a CVSS score of 7.2 and was exploited against several companies in the US Read More
-
Attacks Targeting APIs Increased By 400% in Last Six Months
PRIVACY PRIVACY The new Salt Security report found that 80% of attacks happened over authenticated APIs Read More
-
HP releases Wolf Connect solution for secure remote PC management
PRIVACY PRIVACY HP Inc. has announced the launch of HP Wolf Connect, a new IT management solution that provides resilient and secure connections to remote PCs. The solution enables IT teams to manage PCs remotely even if they are powered down or offline and was showcased at HP’s Amplify Partner Conference. HP Wolf Connect uses…
-
Latin American companies, governments need more focus on cybersecurity
PRIVACY PRIVACY For the first time, over a dozen cybersecurity companies have come together to produce an agnostic study titled LATAM CISO Report 2023: Insights from Industry Leaders. More than 200 CISOs in the Americas region, in addition to the Inter-American Development Bank (IDB), Latin American Federation of Banks (FELABAN), and the World Economic Forum…
-
Spera exits stealth to reveal identity-based threat hunting capabilities
PRIVACY PRIVACY The Israeli identity-based cybersecurity provider Spera is exiting stealth mode to reveal a namesake offering with identity security posture management (ISPM) capabilities. “Two of the most prominent identity-based attack vectors — stolen credentials and phishing—take the longest to detect and are most expensive to solve,” said Dor Fledel, co-founder and CEO of Spera.…
-
Skyhawk adds ChatGPT functions to enhance cloud threat detection, incident discovery
PRIVACY PRIVACY Cloud threat detection and response (CDR) vendor Skyhawk has announced the incorporation of ChatGPT functionality in its offering to enhance cloud threat detection and security incident discovery. The firm has applied ChatGPT features to its platform in two distinct ways – earlier detection of malicious activity (Threat Detector) and explainability of attacks as…
-
The Security Vulnerabilities of Message Interoperability
PRIVACY PRIVACY Jenny Blessing and Ross Anderson have evaluated the security of systems designed to allow the various Internet messaging platforms to interoperate with each other: The Digital Markets Act ruled that users on different platforms should be able to exchange messages with each other. This opens up a real Pandora’s box. How will the…