CISA loses key employee behind early ransomware warnings
Listen to the article 5 min This audio is auto-generated. Please let us know if you have feedback. A Cybersecurity and Infrastructure Security Agency program…
Category: CyberSecurityDive
CISA warns of continued threat activity linked to Brickstorm malware
The Cybersecurity and Infrastructure Security Agency released new analysis of threat activity linked to Brickstorm malware, which has been used by a China-nexus threat group…
AI security is fundamentally a cloud infrastructure problem, Palo Alto Networks says
Listen to the article 2 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Virtually all organizations (99%) have…
Top lawmaker asks White House to address open-source software risks
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. A top Senate Republican is pressing the…
State-linked and criminal hackers use device code phishing against M365 users
Multiple threat groups have been ramping up attacks using a technique called device code phishing to trick users into granting access to their Microsoft 365…
Rockrose Development suffers security breach affecting 47,000 people
Dive Brief: Apartment owner and developer Rockrose Development Corp. recently found that unauthorized individuals hacked its systems and claimed to have acquired confidential information, according…
China-linked hackers exploit insecure setting in Cisco security products
Listen to the article 2 min This audio is auto-generated. Please let us know if you have feedback. China-linked hackers have been using misconfigured Cisco…
Surge of credential-based hacking targets Palo Alto Networks GlobalProtect
A coordinated, credential-based hacking campaign has been targeting Palo Alto Networks GlobalProtect services, as well as Cisco SSL VPNs, in a surge of mid-December attacks,…
FortiGate devices targeted with malicious SSO logins
Researchers warn of intrusion activity that was first discovered on Friday targeting Fortinet FortiGate appliances using malicious single sign-on (SSO) logins, according to a blog…
NIST adds to AI security guidance with Cybersecurity Framework profile
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. The National Institute of Standards and Technology…
Russia-linked hackers breach critical infrastructure organizations via edge devices
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. A Russia-linked hacker group has been targeting…
React2Shell attacks expand widely across multiple sectors
Microsoft researchers warned that “several hundred machines” across a wide range of organizations have been compromised via the exploitation of a critical vulnerability in React…