SEARCH
All Articles
North Korean Attackers Target Google Account Credentials
The North Korean Kimsuky group has targeted think tanks, academic institutions and news media organizations in order to steal their credentials and gather intelligence.
UNC4857 Exploits MOVEit Transfer Flaw in Data Extortion Attacks
Threat actors continue to target the critical-severity file transfer bug to launch data exfiltration attacks, and researchers say organizations should potentially expect ransom emails in the coming weeks.
MOVEit Transfer Zero Day Under Attack
A critical zero day flaw in all version of MOVEit Transfer is under active attack by multiple threat actors.
Threat Actors Exploit Critical Zyxel Flaw in Botnet Attacks
Researchers warn that they are seeing widespread exploitation of the critical-severity Zyxel flaw.
Decipher Podcast: Source Code 6/2
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
Qakbot Ducks for Cover With New Tactics
The Qakbot malware operators have shifted tactics again to adapt to changes in defenses.
New SeroXen RAT Emerges
A new RAT known as SeroXen is for sale on forums and social media platforms and has the ability to evade EDR and delivers a rootkit.
BlackCat Ransomware Improves Capabilities With Sphynx Variant
A BlackCat ransomware version announced in February includes new abilities allowing attackers to evade detection and analysis.
Q&A: Megan Stifel
From safe haven countries to crackdowns on cryptocurrency exchanges used for ransomware payments, Megan Stifel talks about how the security ecosystem is putting pressure on ransomware threat groups.
Decipher Podcast: Hazel Burton
Dennis Fisher is joined by Hazel Burton from the Cisco Talos team to talk about the importance of empathy in communications, her non-linear path to infosec, and how her improv comedy training has helped her in her roles.
New Ransomware Group Uses Repurposed LockBit, Babuk Variants
Researchers with Symantec said the threat actor behind the campaign, Blacktail, hasn’t been linked to any existing cybercrime group.
Barracuda Fixes RCE Flaw in Email Security Gateway
Barracuda has patched a remote code execution vulnerability in its Email Security Gateway appliances.
New CosmicEnergy Operational Technology Malware Found
The discovery of CosmicEnergy is unique because malware families targeting industrial control systems are rarely disclosed.
Decipher Podcast: Source Code 5/26
Welcome back to Source Code, Decipher’s weekly news wrap podcast with input from our sources.
Volt Typhoon Attack Group Targets U.S. Infrastructure
A group known as Volt Typhoon, that is affiliated with the Chinese government, has been attacking critical infrastructure in Guam and elsewhere in the United States.