Tenable Adds Third-Party Connectors to Exposure Management Platform
Tenable One now pulls in data from AWS, Microsoft, and competitors to provide a holistic security view of an organization's…
rooter
A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist
Another adversary picks up the email bombing / vishing Storm-1811 playbook, doing thorough reconnaissance to target specific employees with fake…
Regeneron Pledges Privacy Protection in $256M Bid for 23andMe
Regeneron's planned acquisition of 23andMe raises significant privacy concerns as experts warn about the lack of comprehensive federal regulations governing…
Bumblebee Malware Takes Flight via Trojanized VMware Utility
An employee inadvertently downloaded a malicious version of the legitimate RVTools utility, which launched an investigation into an attempted supply…
UK Legal Aid Agency Data Breach Worse Than Initially Reported — Sensitive Information Stolen
The United Kingdom Legal Aid Agency (LAA) has confirmed that hackers have accessed and stolen sensitive data belonging to individuals…
Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery
A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3…
Large Retailers Land in Scattered Spider’s Ransomware Web
The threat group games IT help desks to gain entry into retailer networks, and signs show it has shifted its…
100+ Fake Chrome Extensions Found Hijacking Sessions, Stealing Credentials, Injecting Ads
An unknown threat actor has been attributed to creating several malicious Chrome Browser extensions since February 2024 that masquerade as…
‘Hazy Hawk’ Cybercrime Gang Swoops In for Cloud Resources
Since December 2023, the threat group has preyed on domains belonging to the US Centers for Disease Control and Prevention…
Novel Phishing Attack Combines AES With Poisoned npm Packages
Researchers discovered a phishing attack in the wild that takes multiple well-tread technologies like open source packages and AES encryption…