Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
The article outlines seven security awareness training pitfalls, including infrequent or forgettable lessons, punitive phishing simulations, compliance-only programs, outdated threat content, and burdensome administration.
ThreatFabric discusses Android banking trojans that reportedly downgrade biometric checks to PINs and explains how behavioral biometrics could provide passive authentication, while noting risks such as false positives.
A DarkOwl overview describes SCATTERED SPIDER’s reported phishing, helpdesk impersonation, SIM swapping and credential theft, along with its tools, malware and high-profile targets. It recommends training helpdesk staff on vishing, smishing and OTP attacks.
An explainer of macOS TCC covers how tccd and its database track app permissions, and warns that MDMOverrides.plist can grant broad access, such as full disk access for bash, without a clear reflection in the UI.
A DarkOwl webinar explains how analysts can combine darknet and surface-web sources for OSINT, with examples involving threat actors, leaked data, cryptocurrency, and conflict-related activity.
An overview of DORA’s ICT-risk requirements for financial organizations, including cloud risk assessments, security provisions in provider contracts, ongoing monitoring, and potential CNAPP support.
The article explains CTEM as a business-focused approach to managing exposure through scoping, discovery, prioritization, validation and mobilization, with practical steps for each stage.
The article explains why Chia’s proof-of-storage model may appeal to cryptojackers and how large cloud storage usage can evade some common monitoring. It outlines cost, logging and detection considerations for defenders.
The article outlines healthcare cyber risks, forthcoming HHS cybersecurity standards and support, and steps smaller organizations can take, including endpoint protection, email security, and staff awareness training.
Attackers use QR codes in phishing emails to direct victims to credential-stealing pages or malware on personal mobile devices, where enterprise protections may be weaker. Talos recommends mobile security, QR-code URL inspection, user education, and MFA.
A Huntress webinar recap explains how attackers misuse RMM tools for remote access and persistence, discusses challenges in detecting abuse, and demonstrates silently installing AnyDesk from a Sliver beacon.
A high-level overview profiles eight state-linked threat groups, outlining their suspected origins, motivations, target sectors, and reported malware and tactics, including espionage, phishing, credential theft, and surveillance.
A hunting walkthrough examines an open directory containing a cryptocurrency phishing site and XWorm RAT, showing how its files attempt to steal credentials and recovery phrases and how scripts download and execute additional files.
A webinar transcript surveys Iran’s cyber program, including state-linked groups, malware, ransomware, front companies and cryptocurrency. The speaker discusses the difficulty of attributing operations specifically to the MOIS or IRGC.
DarkOwl analysts review 2023 cyber threats and forecast continued ransomware, credential theft, dark web activity, messaging-app use and malicious adoption of AI in 2024.
Wiz revisits selected 2023 stories on cloud vulnerabilities, supply-chain attacks, ransomware, Microsoft’s stolen signing key and AI data poisoning, highlighting lessons about credential security, data hygiene and training-data integrity.
An overview of macOS TCC explains how it records app permissions for sensitive data, where its databases reside, and why managing permissions across business devices can add complexity.
A curated list of 10 articles explores AI security, including LLM vulnerabilities, safeguards, insecure machine-learning code, policy, AI-assisted fuzzing, and malicious uses of chatbots.
The article outlines four questions for assessing AI security: visibility into AI components, identifying risks, prioritizing them, and detecting pipeline misuse. It also promotes Wiz’s AI-SPM capabilities.
DarkOwl describes darknet fraud involving refund services, stolen accounts, gift cards, personal and financial data, counterfeit documents, and healthcare information, and recommends password managers and avoiding password reuse.
The vendor blog explains how organizations can apply NIST CSF 2.0 to supply-chain security, including continuous asset discovery, risk scoring that combines vulnerability severity with business context, partner benchmarking, and real-time threat intelligence.
The article explains how small and midsize businesses can focus cyber threat intelligence on their decisions, balance the cost of formal requirements development, and assess external providers for relevant, actionable insights.
The article explains that indicators are limited without context, but high-confidence indicators can still provide SMBs and MSPs with a practical, low-cost layer of defense alongside other security controls.
Stealer logs collect recent data from infected devices, including credentials, cookies, browser autofill, and device details. Criminals can use the information for account takeover, identity theft, and fraud.
