SEARCH
All Articles
Collaboration Key to Log4j Response
The cooperative efforts of the private sector and CISA's Joint Cyber Defense Collaborative helped limit the damage of the recent Log4j vulnerability.
DoJ Seizes $3.6 Billion in Bitcoin Stolen From Bitfinex Hack
U.S. officials arrested two individuals and seized $3.6 billion in bitcoin related to the 2016 Bitfinex hack.
Microsoft Details Malware Attacks on Ukrainian Organizations
Microsoft said the Actinium threat group (also known as Gamaredon) has been observed targeting government, military and law enforcement organizations in Ukraine with spear-phishing emails.
Attackers Use SEO Poisoning to Spread Malware, Steal Credentials
SEO-friendly websites promising Zoom or TeamViewer application installations are actually attacker-owned and deploy malware.
Decipher Podcast: Source Code 2/4
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources.
DHS Launches Cyber Safety Review Board
The board, tasked with identifying and sharing lessons learned from “significant cybersecurity events," will first assess the Log4j logging library flaw.
Critical Samba Remote Code Execution Flaw Fixed
A Samba bug could allow remote attackers without authentication to execute arbitrary code as root on impacted systems.
Alpha-Omega Project Aims to Secure Open Source Ecosystem
The new Alpha-Omega Project from the Open Source Security Foundation will offer technical and financial assistance to open source maintainers to help them find and fix security flaws.
The Hunt For a Federal Data Privacy Law
Privacy experts pinpoint the challenges and complexities behind a federal data privacy law.
Decipher Podcast: Source Code 1/28
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources.
Decipher Podcast: Jon Callas
Jon Callas, director of technology projects with EFF, talks about invasive data tracking and surveillance during the pandemic.
BotenaGo Malware Source Code Uploaded to GitHub
The source code's release on GitHub can potentially mean future attacks on IoT devices and routers, warn researchers.
‘Every Intrusion Attempt Has a Story to Tell’
Developing good communication and storytelling skills can be a vital career step for cyber threat intelligence professionals.
Serious Privilege Escalation Flaw in Linux Component Patched
A local privilege escalation bug in the Polkit Linux component could allow an attacker to gain root privileges with a simple exploit.
White House Orders Federal Agencies to Adopt Zero-Trust Strategy
The White House has outlined a number of cybersecurity measures that federal agencies must adopt - as part of an overall zero-trust strategy - though it acknowledges that the transition "will not be a quick or easy task."