The U.K. National Crime Agency (NCA) on Wednesday announced that it led an international investigation to disrupt Russian money laundering networks that were found to facilitate serious and organized crime… Read More »NCA Busts Russian Crypto Networks Laundering Funds and Evading Sanctions
The Russia-linked advanced persistent threat (APT) group known as Turla has been linked to a previously undocumented campaign that involved infiltrating the command-and-control (C2) servers of a Pakistan-based hacking group… Read More »Russia-Linked Turla Exploits Pakistani Hackers’ Servers to Target Afghan and Indian Entities
Are you using the cloud or thinking about transitioning? Undoubtedly, multi-cloud and hybrid environments offer numerous benefits for organizations. However, the cloud’s flexibility, scalability, and efficiency come with significant risk… Read More »7 PAM Best Practices to Secure Hybrid and Multi-Cloud Environments
Europol on Tuesday announced the takedown of an invite-only encrypted messaging service called MATRIX that’s created by criminals for criminal purposes. The joint operation, conducted by French and Dutch authorities… Read More »Europol Dismantles Criminal Messaging Service MATRIX in Major Global Takedown
Many organizations struggle with password policies that look strong on paper but fail in practice because they’re too rigid to follow, too vague to enforce, or disconnected from real security… Read More »How to Plan a New (and Improved!) Password Policy for Real-World Security Challenges
Cybersecurity researchers are alerting to a software supply chain attack targeting the popular @solana/web3.js npm library that involved pushing two malicious versions capable of harvesting users’ private keys with an… Read More »Researchers Uncover Backdoor in Solana’s Popular Web3.js npm Library
A joint advisory issued by Australia, Canada, New Zealand, and the U.S. has warned of a broad cyber espionage campaign undertaken by People’s Republic of China (PRC)-affiliated threat actors targeting… Read More »Joint Advisory Warns of PRC-Backed Cyber Espionage Targeting Telecom Networks
Cybersecurity researchers have called attention to a novel phishing campaign that leverages corrupted Microsoft Office documents and ZIP archives as a way to bypass email defenses. “The ongoing attack evades… Read More »Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses
A critical security vulnerability has been disclosed in SailPoint’s IdentityIQ identity and access management (IAM) software that allows unauthorized access to content stored within the application directory. The flaw, tracked… Read More »Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access
Veeam has released security updates to address a critical flaw impacting Service Provider Console (VSPC) that could pave the way for remote code execution on susceptible instances. The vulnerability, tracked… Read More »Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console