New “MITRE ATT&CK-like” framework outlines software supply chain attack TTPs

Fantastic video of a female Gonatus onyx squid swimming while carrying her egg sack. An earlier related post. Blog moderation...

The security provider has elevated its warning about a vulnerability affecting firewall management interfaces after observing active exploitation Read More

Ilya Lichtenstein hacked into the cryptocurrency exchange in 2016 and stole around 120,000 bitcoins Read More

The new vulnerability was named “FortiJump Higher” due to its similarity with the “FortiJump” vulnerability discovered in October Read More

Stuart Schechter makes some good points on the history of bad password policies: Morris and Thompson’s work brought much-needed data...

SentinelOne described some of ransomware groups’ favorite techniques for targeting cloud services Read More