Open-source security rests on understanding risks, scaling fixes
Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report. Source link
Category: CyberSecurityDive
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Researchers say the hacker is harvesting credentials and stealing sensitive information. Source link
Internet exposure of AI tools, ICS devices continues to grow
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found. Source link
Thousands of refrigerator devices remain exposed following French cyberattack
The investigation points to a much wider risk for industrial systems across the globe. Source link
Microsoft, Health-ISAC and partners take down popular phishing kit services
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names. Source link
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots. Source link
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Risks are growing at a time when companies are relying more than ever on vendors for cybersecurity, according to a new report. Source link
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Hundreds of French supermarkets faced a sophisticated hack where industrial controls were manipulated. Source link
Ahold Delhaize experiencing cybersecurity issue
The company said it took some systems offline as part of “precautionary measures.” Websites for all five of the grocer’s U.S. banners were down Monday…
GitLab fixes serious vulnerability that exposed software environments to sabotage
The company urged customers to upgrade to the latest versions of its flagship products. Source link
FBI seizes domains linked to China-nexus botnet
The infrastructure supported an international hacking campaign that targeted critical infrastructure, including a South Carolina-based power company. Source link
As frontier models go rogue, colleges beef up AI cybersecurity education
Student interest in AI safety is surging, and schools are rushing to prepare for new career paths. Source link