Cyberattacks
Cyberattacks | News, how-tos, features, reviews, and videos
Mitre D3FEND explained: A new knowledge graph for cybersecurity defenders
D3FEND is a new schema released by Mitre last month to establish a common language to help cyber defenders share strategies and methods. It is a companion project to the company’s ATT&CK framework.
![Praying mantis among green leaves [camouflage/stealth]](https://images.idgesg.net/images/article/2019/02/camouflage_stealth_praying_mantis_among_green_leaves_by_david_clode_cc0_via_unsplash_2400x1600-100788546-small.3x2.jpg?auto=webp)
APT group hits IIS web servers with deserialization flaws and memory-resident malware
Praying Mantis group is likely a nation-state actor that uses custom malware and is adept at avoiding detection.
18 new cybersecurity bills introduced as US congressional interest heats up
The new bills, many with bi-partisan support, aim to increase cybersecurity funding, improve breach reporting, investigate cryptocurrencies, and more.
CISA: China successfully targeted US oil and natural gas infrastructure
CISA alert details past network compromises and exposes a lack of preparedness among ICS companies.
Biden administration, US allies condemn China's malicious hacking, espionage actions
Global coalition calls on China to curtail its cyber activities. For the first time, the US blames China directly for ransomware attacks.
US charges four suspected Chinese spies who coordinated APT40 hackers
The government outlines how APT40 conducted its Microsoft Exchange Server attack and offers advice to defend against nation-state threats.
The 15 biggest data breaches of the 21st century
Data breaches affecting millions of users are far too common. Here are some of the biggest, baddest breaches in recent memory.
Ransomware talks: How Biden could push Putin to the table
Under pressure to end the ransomware scourge, the White House faces strong headwinds. The problem: Putin has no motivation to change the status quo.
Rainbow tables explained: How they work and why they're (mostly) obsolete
Rainbow tables are password cracking tools with origins dating back to research from the early 1980s. Here's how they work, why attacks are easy to prevent, and how they compare to modern password cracking.
![Digital fingerprints are virtually connected. [tracking / identity / genetics / data privacy]](https://images.idgesg.net/images/article/2020/09/digital_fingerprints_virtually_connected_identity_genetic_data_privacy_concerns_by_rick_jo_gettyimages-1132147542_2400x1600-100860110-small.3x2.jpg?auto=webp)
Supply-chain attack on Kaseya remote management software targets MSPs
REvil ransomware pushers exploit zero-day flaw in Kaseya VSA to infect MSPs and their customers.
US and UK issue rare joint guidance in response to Russian GRU brute force campaign
CISOs should leverage this guidance to help get the resources they need to make these and other cyberattacks too costly for nation-state threat actors and criminals.
What is the dark web? How to access it and what you'll find
The dark web is part of the internet that isn't visible to search engines and requires the use of an anonymizing browser called Tor to be accessed.
Botnet attacks on APIs: Why most companies are unprepared
The use of botnets to target applications for illegal and unethical purposes is growing, yet implementation of bot detection tools and best practices lags.
Security firm COO indicted for allegedly aiding hospital's attackers: What CSOs should know
A grand jury has indicted Securolytics COO Vikas Singla for allegedly helping attackers access Gwinnett Medical Center's phone system and printers. This breach of trust presents a dilemma for CISOs.
US Congress tees up ambitious cybersecurity agenda in the wake of supply chain, ransomware attacks
Roughly 115 cybersecurity-related bills are working their way through the legislative process, in many cases with bipartisan support.
New DDoS extortion attacks detected as Fancy Lazarus group returns
After operating under other names, Fancy Lazarus has fine-tuned its DDoS extortion campaigns, although with mixed results.
10 things to do now to reduce the cost of your next data breach
Taking these steps will save money, time, and reputation when that next breach hits.
Colonial Pipeline take-away for CISOs: Embrace the mandates
The DarkSide attack on Colonial is yet another wake-up call for companies to harden their systems against ransomware. History suggests that might not happen despite new government guidance.
Ransomware response: What CISOs really want from the federal government
What should the federal government's role and responsibility be regarding ransomware? Security leaders weigh in.
![Digital Transformation [DX] > dandelion seeds blown by a virtual wind of change](https://images.idgesg.net/images/article/2020/01/cio_dandelion_seeds_blown_by_virtual_wind_of_change_digital_transformation_flower_by_dawid_zawila_cc0_via_unsplash_abstract_digital_wave_stream_by_pete_linforth_aka_thedigitalartist_cc0_via_pixabay_1200x800-100826623-small.3x2.jpg?auto=webp)
The SolarWinds hack timeline: Who knew what, and when?
Impact, detection, response, and ongoing fallout from the attack on SolarWinds' Orion remote IT management software.
-
White Paper
-
Analyst Report
Sponsored -
Video/Webcast
Sponsored -
White Paper
-
eBook
Sponsored
Most Popular
BrandPosts
Learn more-
Sponsored by OneNeck IT Solutions
-
Sponsored by Netscout
-
Sponsored by ExtraHop