New attacks use Windows security bypass zero-day to drop malwareNew phishing attacks use a Windows zero-day vulnerability to drop the Qbot malware without displaying Mark of...
Year: 2022
Medibank hackers release 1,500 more patient records on dark web, including mental health data
Medibank hackers release 1,500 more patient records on dark web, including mental health dataCompany says leak includes details on chronic conditions such as heart disease and...
‘Welcome Back’—Donald Trump returns to Twitter after Elon Musk’s poll
'Welcome Back'—Donald Trump returns to Twitter after Elon Musk's pollIn a surprising move, Twitter has lifted the "permanent suspension" of former U.S. President Donald Trump's account. The move...
Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket Products
Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket ProductsAustralian software company Atlassian has rolled out security updates to address two critical flaws affecting Bitbucket Server, Data...
Chinese ‘Mustang Panda’ Hackers Actively Targeting Governments Worldwide
Chinese 'Mustang Panda' Hackers Actively Targeting Governments WorldwideA notorious advanced persistent threat actor known as Mustang Panda has been linked to a spate of spear-phishing attacks targeting government,...
Security Recruiter Directory
Security Recruiter DirectoryLooking for a qualified candidate or new job? CSO's security recruiter directory is your one-stop shop. The recruiters listed below can help you find...
Different Professional Backgrounds Are Key to a Successful Compliance Team
Different Professional Backgrounds Are Key to a Successful Compliance TeamHiring a compliance team with different professional backgrounds is key to building your compliance department. Here’s why....
Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware
Microsoft Warns of Hackers Using Google Ads to Distribute Royal RansomwareA developing threat activity cluster has been found using Google Ads in one of its campaigns...
CISA, NSA, ODNI Publish Software Supply Chain Guidelines For Customers
CISA, NSA, ODNI Publish Software Supply Chain Guidelines For CustomersThe come after the August release of guidance for developers and the October one for suppliersLeer másThe...
Tor vs. VPN: Which should you choose?
Tor vs. VPN: Which should you choose?Both Tor and a VPN can greatly help you keep prying eyes away from your online life, but they’re also...
Holiday Shopping Online: Safety on Black Friday, Cyber Monday
Holiday Shopping Online: Safety on Black Friday, Cyber MondayWhat are the latest online security tips as we head into another holiday season? What’s the best cyber...
Indian Government Publishes Draft of Digital Personal Data Protection Bill 2022
Indian Government Publishes Draft of Digital Personal Data Protection Bill 2022The Indian government on Friday released a draft version of the much-awaited data protection regulation, making...
Feds Alert Healthcare, Other Sectors of Growing Hive Threats
Feds Alert Healthcare, Other Sectors of Growing Hive ThreatsCISA, FBI and HHS Provide Lists of Latest IoCs and TTPs IdentifiedU.S. federal authorities are warning critical infrastructure...
K69334442: Intel Processors RRSBA advisory CVE-2022-28693
K69334442: Intel Processors RRSBA advisory CVE-2022-28693Intel Processors RRSBA advisory CVE-2022-28693 Security Advisory Security Advisory Description ** RESERVED ** This candidate has been reserved by an organization...
Chinese hackers use Google Drive to drop malware on govt networks
Chinese hackers use Google Drive to drop malware on govt networksState-backed Chinese hackers launched a spearphishing campaign to deliver custom malware stored in Google Drive to...
Ransomware attack on CommonSpirit Health could affect 20 million Americans
Ransomware attack on CommonSpirit Health could affect 20 million AmericansHackers are targeting the healthcare industry. Health systems are making progress around cyber security, but a great...
Beware of these Black Friday scams that could spoil your holiday season
Beware of these Black Friday scams that could spoil your holiday seasonEXECUTIVE SUMMARY: Black Friday is almost here and many consumers are eager to bag-a-bargain. An...
US charges BEC suspects with targeting federal health care programs
US charges BEC suspects with targeting federal health care programsThe U.S. Department of Justice (DOJ) has charged ten defendants for their alleged involvement in business email...
A CISO’s 100-day run to cyber success
A CISO’s 100-day run to cyber successCheck Point Software’s cyber security evangelist Ashwin Ram shares a framework and crucial must-do’s to set CISOs up for success...
Researchers secretly helped decrypt Zeppelin ransomware for 2 years
Researchers secretly helped decrypt Zeppelin ransomware for 2 yearsSecurity researchers found vulnerabilities in the encryption mechanism of the Zeppelin ransomware and exploited them to create a...
Exploit released for actively abused ProxyNotShell Exchange bug
Exploit released for actively abused ProxyNotShell Exchange bugProof-of-concept exploit code has been released online for two actively exploited and high-severity vulnerabilities in Microsoft Exchange, collectively known...
Introducing Infrastructure as Code Security
Introducing Infrastructure as Code SecurityThe GitGuardian Internal Monitoring platform will now include Infrastructure as Code (IaC) scanning to help organizations protect their infrastructure at the source....
Security Budget Cuts and Recession Spark Worries Among IT Admins
Security Budget Cuts and Recession Spark Worries Among IT AdminsThe report suggests 44% agree their firm will cut security spending in the next yearLeer másThe report...
How Information Stealers Get User Credentials
How Information Stealers Get User CredentialsThroughout 2022, the theft of user credentials continued to blanket the threat landscape. A recent example that illustrates both the simplicity...
Zeus Botnet Suspected Leader Arrested in Geneva
Zeus Botnet Suspected Leader Arrested in GenevaVyacheslav Igorevich Penchukov was arrested in Geneva on October 23, 2022, and is now pending extradition to the USLeer másVyacheslav...
Palo Alto Networks Updates OS to Strengthen Cybersecurity Platforms
Palo Alto Networks Updates OS to Strengthen Cybersecurity Platforms Palo Alto Networks this week delivered a Nova update to the PAN-OS operating system it embeds across...
First Review of A Hacker’s Mind
First Review of A Hacker’s MindKirkus reviews A Hacker’s Mind: A cybersecurity expert examines how the powerful game whatever system is put before them, leaving it...
BSidesKC 2022 – Brandon Colley’s ‘Push Comes To Shove: Exploring SCCM Attack Paths’
BSidesKC 2022 – Brandon Colley’s ‘Push Comes To Shove: Exploring SCCM Attack Paths’Our sincere thanks to BSidesKC 2022 for publishing their outstanding conference videos on the...
Hive Ransomware Has Made $100m to Date
Hive Ransomware Has Made $100m to DateCISA notice warns of 1300 victims and countingLeer másCISA notice warns of 1300 victims and counting
Successful Hack of Time-Triggered Ethernet
Successful Hack of Time-Triggered EthernetTime-triggered Ethernet (TTE) is used in spacecraft, basically to use the same hardware to process traffic with different timing and criticality. Researchers...





















