Derek Manky, Chief, Security Insights & Global Threat Alliances at Fortinet’s FortiGuard Labs, discusses the top threats and lessons learned from the first half of 2021. [...]

versions of the software are affected by a spate of bugs under active exploitations. [...]

Networking giant issues two critical patches and six high-severity patches. [...]

Then again, you don’t even need the actual device – in this case, a SteelSeries peripheral – since emulation works just fine to launch with full SYSTEM rights. [...]

The new APT uses an undocumented backdoor to infiltrate the education, retail and government sectors. [...]

Hao Kou Chi pleaded guilty to four felonies in a hacker-for-hire scam that used socially engineered emails to trick people out of their credentials. [...]

The attacker returned the loot after being offered a gig as chief security advisor with Poly Network. [...]

Cybersecurity watchdog Citizen Lab saw the new zero-day FORCEDENTRY exploit successfully deployed against iOS versions 14.4 & 14.6, blowing past Apple's new BlastDoor sandboxing feature to install spyware on the iPhones of Bahraini activists – even one living in London at the time. [...]

Researchers have spotted the latest version of the Triada trojan targeting mobile devices via an advertising SDK. [...]

Chad Anderson, senior security researcher for DomainTools, demonstrates how seemingly disparate pieces of infrastructure information can form perfect fingerprints for tracking cyberattackers' infrastructure. [...]

Data leaked includes COVID-19 vaccination records, social security numbers and email addresses tied to American Airlines, Ford, Indiana Department of Health and New York City public schools. [...]

CISA is warning about a surge of ProxyShell attacks, as Huntress discovered 140 webshells launched against 1,900 unpatched Microsoft Exchange servers. [...]

So much for Windows 10's security: A zero-day in the device installer software grants admin rights just by plugging in a mouse or other compatible device. UPDATE: Microsoft is investigating. [...]

Joseph Carson, chief security scientist & advisory CISO at ThycoticCentrify, discusses how to implement advanced privileged-access practices. [...]

Multiple vulnerabilities in software used by 65 vendors under active attack. [...]

Systems are ripe for abuse by attackers who can abuse systems to launch DDoS attacks. [...]

Campaign emails company insiders and initially offers 1 million in Bitcoin if they install DemonWare on an organization’s network. [...]

Hopefully not a hacked-up hairball of a “no can do” message when customers rush to change their PINs. In this episode: Corporate resilience vs. the opposite. [...]

Oliver Tavakoli, CTO at Vectra, lays out the different layers of ransomware defense all companies should implement. [...]

The issue affects a range of Cisco Wireless-N and Wireless-AC VPN routers that have reached end-of-life. [...]

The North Korea-linked APT group leverages known Internet Explorer vulns for watering-hole attacks. [...]

Microsoft first dismissed the elevation of privilege flaw but decided yesterday that attackers injecting malicious code is worthy of attention. [...]

COVID-19-related exploitation and abuse is on the rise as vaccine data opens new frontiers for threat actors. [...]

Government says cybersecurity failures were many within failed January hack of U.S. Census Bureau systems. [...]

The apps attempt to swindle users into buying in-app upgrades or clicking on masses of ads. [...]