Browsing: News

Commercial Surveillance Vendor Exploitation Grows For the first time since we started tracking zero-day exploitation, we attributed more exploitation to…

UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours Google’s Cloud Threat Horizons Report for…

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We’ve highlighted the major updates below.…

As we approach 2025, Canadian small and medium-sized organizations (SMEs) will face a more complex digital threat scenario. Cybercriminals are…

I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy (“oh, why…

Medtech Giant Stryker Offline After Iran-Linked Wiper Malware Attack Fortune 500 medical technology company Stryker — manufacturer of surgical and…

Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8 Google has released an emergency update to…

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos The persistent GlassWorm supply chain threat actor has…

Virtualization Infrastructure Protections  Threat actors often target virtualization infrastructure (e.g., VMware vSphere, Microsoft Hyper-V) as part of their reconnaissance, lateral…

Microsoft Azure Monitor alerts are being abused to send callback phishing emails that impersonate warnings from the Microsoft Security Team…