Software Supply Chain Attacks Soar 742% in Three Years
Sonatype reveals scale of threats to open source ecosystem
Cyber News, Cyber Threat TrendsDeadbolt Ransomware Extorts Vendors and Customers
New report provides in-depth look at novel NAS-based threat
Cyber News, Cyber Threat Trends
- October 19, 2022
CISA Warns of Critical Flaws Affecting Industrial Appliances from Advantech and Hitachi
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday released two Industrial Control Systems (ICS) advisories pertaining to severe flaws in Advantech R-SeeNet and Hitachi Energy APM Edge appliances. This consists of three weaknesses in the R-SeeNet monitoring solution, successful exploitation of which “could result in an unauthorized attacker remotely deleting files on the
Cyber News, Cyber Threat TrendsToyota Data Breach Exposes Customer Data – What You Can Do to Protect Yourself
Automobile manufacturer Toyota recently announced a data breach that may have exposed the emails of up to 300,000 customers for a period of nearly five years. Toyota says the breach is the result of a subcontractor posting source code for Toyota’s “T-Connect” app on the software development platform GitHub in December 2017. This code included […]
Cyber News, Cyber Threat Trends
- October 19, 2022
How Card Skimming Disproportionally Affects Those Most In Need
When people banking in the United States lose money because their payment card got skimmed at an ATM, gas pump or grocery store checkout terminal, they may face hassles or delays in recovering any lost funds, but they are almost always made whole by their financial institution. Yet, one class of Americans — those receiving […]
Cyber News, Cyber Threat TrendsQatar Spyware
Everyone visiting Qatar for the World Cup needs to install spyware on their phone. Everyone travelling to Qatar during the football World Cup will be asked to download two apps called Ehteraz and Hayya. Briefly, Ehteraz is an covid-19 tracking app, while Hayya is an official World Cup app used to keep track of match […]
Cyber News, Cyber Threat Trends
- October 19, 2022
GitGuardian adds IaC scanning to code security platform to protect SDLC
GitGuardian has added infrastructure-as-code (IaC) scanning to its code security platform to enhance the security of software development. The firm said the new feature will help security and development teams write, maintain, and run secure code, protecting the software development lifecycle (SDLC) against risks like tampering, code leakage and hardcoded credentials. The release reflects a […]
Cyber News, Cyber Threat Trends
- October 19, 2022
User-Specific Secrets on AWS: KMS
ACM.84 Granting an IAM Group permission to use a KMS key in a Key Policy This is a continuation of my series of posts on Automating Cybersecurity Metrics. We’ve been working on adding a user-specific secret in Secrets Manager in the past few posts and considered how to deploy secrets in a manner that supports non-repudiation. […]
Cyber News, Cyber Threat Trends
- October 19, 2022
Сryptocurrency and Ransomware — The Ultimate Friendship
Both cryptocurrency and ransomware are nothing new in the digital world; both have been there for a very long time, which was enough for them to find common pieces for starting their relationship. Ransomware can be like a virtual car that works on all types of fuels, and crypto is the one that is currently […]
Cyber News, Cyber Threat Trends