Southeast Asia subjected to suspected Chinese cyberespionage campaign
Numerous high-profile organizations across Southeast Asia, including government agencies from two countries, a telecommunications ...
Trust exploited in widespread ongoing phishing operation
Infiltration of a single user's email in a phishing attack between May 8 and May 9 allowed threat actors to compromise indivi...
More advanced Zloader malware variant emerges
Attacks involved the exploitation of open-source and living-off-the-land tactics previously associated with Chinese advanced ...
Silent threats: The hidden danger of machine identities
As non-human identities outnumber humans 45 to 1, enterprises face escalating security risks from unmonitored APIs, bots, and serv...
Cyberattack hits Krispy Kreme’s online ordering systems
Internal and external cybersecurity experts have immediately acted to investigate and address the incident upon its discovery, said Kri...
Electrica Group compromise pinned on Lynx ransomware gang
"Based on available data, critical power supply systems have not been affected and are operational, and the investigation is currently ...
Several Splunk, Atlassian flaws addressed
Updates have been issued by Splunk to address over 15 vulnerabilities impacting its products and third-party dependencies, the most ser...
How to secure third parties and spot fake job applicants: Okta’s verification tips
The identity management provider Okta has learned that the accounts of third-party contractors, temporary workers, vendors, and se...
Here’s how we can empower the next generation of cyber defenders
COMMENTARY: Media coverage and vendor perspectives share a common thread when discussing today’s state of cybersecurity careers. I...
Study highlights challenges, priorities in securing open-source software
A collaborative study by the Linux Foundation, the Laboratory for Innovation Science at Harvard, and software composition ana...