Taiwanese network-attached storage (NAS) devices maker QNAP on Thursday warned its customers of a fresh wave of DeadBolt ransomware attacks. The intrusions are said to …
New Bluetooth Hack Could Let Attackers Remotely Unlock Smart Locks and Cars
A novel Bluetooth relay attack can let cybercriminals more easily than ever remotely unlock and operate cars[1], break open residential smart locks[2], and breach secure …
7 Key Findings from the 2022 SaaS Security Survey Report
The 2022 SaaS Security Survey Report,[1] in collaboration with CSA, examines the state of SaaS security as seen in the eyes of CISOs and security …
High-Severity Bug Reported in Google’s OAuth Client Library for Java
Google last month addressed a high-severity flaw in its OAuth client library for Java that could be abused by a malicious actor with a compromised …
Web Trackers Caught Intercepting Online Forms Even Before Users Hit Submit
A new research published by academics from KU Leuven, Radboud University, and the University of Lausanne has revealed that users’ email addresses are exfiltrated to …
VMware Releases Patches for New Vulnerabilities Affecting Multiple Products
VMware has issued patches to contain two security flaws[1] impacting Workspace ONE Access, Identity Manager, and vRealize Automation that could be exploited to backdoor enterprise …
How to Protect Your Data When Ransomware Strikes
Ransomware[1] is not a new attack vector. In fact, the first malware of its kind[2] appeared more than 30 years ago and was distributed via …
Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang
The inner workings of a cybercriminal group known as the Wizard Spider have been exposed, shedding light on its organizational structure and motivations. “Most of …
[eBook] Your 90-Day MSSP Plan: How to Improve Margins and Scale-Up Service Delivery
To cash in on a thriving market, a managed security service provider (MSSP) must navigate unprecedented competition and complex challenges. The good news is that …
Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility
Microsoft on Tuesday warned that it recently spotted a malicious campaign targeting SQL Servers that leverages a built-in PowerShell binary to achieve persistence on compromised …