SEARCH
All Articles
Successful Critical Infrastructure Security Regulations Use Risk-Informed Approach
In order to get critical infrastructure cybersecurity regulations right, regulators need to focus on risk reduction and performance outcomes rather than prescriptive measures, according to a panel at Hack the Capitol 6.0.
Ransomware Actors Adopt Leaked Babuk Code to Hit Linux Systems
Various threat groups are increasingly using Babuk’s leaked source code to build ESXi lockers, including a never-before-seen Linux version of the Play ransomware.
Greatness Phishing Service Targets Microsoft 365 Users
A new phishing service called Greatness is targeting Office 365 organizations in the U.S. and elsewhere.
Ransomware Group Targeted Dragos in Unsuccessful Extortion Attempt
A known ransomware group was able to access limited information resources, which it then attempted to use in an unsuccessful extortion attempt against the company.
FBI Disrupts Turla Espionage Malware Network
While Operation Medusa disrupts long standing espionage efforts by Turla, security researchers say that its effects will only be temporary.
GitHub Enables Push Protection to Prevent Secret Leaks
GitHub has released a new push protection feature to prevent developers from accidentally including secrets in commits.
Intel BootGuard, Firmware Signing Keys Found in MSI Data Leak
Researchers have discovered the firmware signing keys and Intel BootGuard keys for several manufacturers in data dumped by attackers who breached Taiwanese hardware maker MSI.
Microsoft Fixes Windows Bug, Secure Boot Bypass Under Active Attack
Microsoft has patched two flaws (CVE-2023-29336 and CVE-2023-24932) that have been actively exploited.
Decipher Podcast: Lucia Milica
Lucia Milica, global resident CISO at Proofpoint, discusses the top takeaways from the 2023 Voice of the CISO report.
Decipher Podcast: Source Code 5/5
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
Ransomware Task Force: Data Sharing Needed to ‘Build a Clear Picture’
The ransomware task force said in their latest progress report that private sector organizations, governments and cryptocurrency entities need to work together more in swapping information about cyber incidents.
Threat Actors Add Complexity to DLL Sideloading Attacks
A recent APT campaign shows how threat actors are adding complexity to the decade-old attack.
New EARN IT Act Has Old Issues
The newest version of the EARNT IT Act still has language that would force platform providers to weaken or abandon encrypted services.
NodeStealer Malware Targets Gmail, Outlook, Facebook Credentials
The new malware was found stealing saved usernames and passwords in browsers in order to compromise business Gmail, Outlook and Facebook accounts.
Decipher Podcast: Dawn Cappelli
Decipher talks to Dawn Cappelli, director of OT-CERT at Dragos, about the challenges of securing operational technology, particularly for organizations with limited budget and resources.