How the government shutdown is influencing cybersecurity jobs

Exploits | Threat analysis

Improved Fallout EK comes back after short hiatus

January 17, 2019 - The Fallout exploit kit is back with some noteworthy improvements.

Cybercrime | Hacking

The Advanced Persistent Threat files: APT10

January 16, 2019 - While security companies are getting good at analyzing the tactics of nation-state threat actors, they still struggle with placing these actions in context and making solid risk assessments. So in this series, we're going to take a look at a few APT groups, and see how they fit into the larger threat landscape—starting with APT10.

Security world | Week in security

A week in security (January 7 – 13)

January 14, 2019 - A roundup of last week's security news from January 7 to 13, including breaches, takedowns, bug fixes, and social media issues.

Government | Security world

Government shutdown impacts .gov websites, puts Americans in danger

January 14, 2019 - Today, TechCrunch posted a concerning story about the shutdown and most importantly, they covered the reporting of NetCraft, a U.K. internet service company, about how numerous US government websites are now inaccessible due to expired security certificates. This is going to be a quick post to help explain what happened and more importantly, how cyber criminals will use this situation to their advantage.

Cybercrime | Hacking

Luas data ransom: the hacker who cried wolf?

January 11, 2019 - Irish tram firm Luas were recently compromised and told to pay 1 Bitcoin, or risk user data being fired into the void. The deadline for paying the ransom has now passed: So what happens next? And is anyone out there really at risk?

Cybercrime | Social engineering

Social Security Number scammers are at it again

January 10, 2019 - The Federal Trade Commission recently released a warning about a sharp increase in Social Security Number scammers. Have you gotten one of their robocalls? Here's how to recognize the scam and what to do about it.

Cybercrime | Malware

Ryuk ransomware attacks businesses over the holidays

January 8, 2019 - Over the holiday, a little-known ransomware family called Ryuk caused serious damage to numerous organizations. The attacks leave a lot of questions unanswered. What do we know so far?

Cybercrime | Privacy

Australia’s Early Warning Network compromised

January 7, 2019 - An Australian Early Warning System notifying subscribers of severe weather alerts was compromised over the weekend, with messages sent across a variety of formats. What did the hackers get up to? And why did they do it?

Security world | Week in security

A week in security (December 31, 2018 – January 6, 2019)

January 7, 2019 - A roundup of last week's security news from December 31, 2018 to January 6, 2019, including fresh breaches in the New Year, mobile malware, GandCrab, and how we remembered 2018.

Criminals | Threat analysis

Vidar and GandCrab: stealer and ransomware combo observed in the wild

January 4, 2019 - Threat actors combine new stealer Vidar and GandCrab ransomware in one-two punch.