Securing Open Source

detection, campaigns, threat, HEAT, managed detection and response, Apache ActiveMQ, vulnerability, Aqua Cham, threat, elGang APT Meltdown Spectre Threat Detection

Three Nation-State Campaigns Targeting Healthcare, Banking Discovered

Nathan Eddy | June 27, 2024 | AiTM, bec, MFA, Phishing, Ransomware, threat actor

Researchers have identified three distinct nation-state campaigns leveraging advanced highly evasive and adaptive threat (HEAT) tactics ...

Security Boulevard

A flock of ostriches (or is it a troop?)

WordPress Plugin Supply Chain Attack Gets Worse

30,000 websites at risk: Check yours ASAP! (800 Million Ostriches Can’t Be Wrong.) ...

Security Boulevard

Google Hates Ad Blockers: Manifest V3 Push Starts Today

We warned you. As of June 3, Google is following through on its threat to kill ad blockers. Privacy-focused Chrome extensions are living on borrowed time; developers must upgrade to the less ...

Security Boulevard

Malicious PyPI Package ‘Pytoileur’ Targets Windows and Leverages Stack Overflow for Distribution

Steven J. Vaughan-Nichols | May 29, 2024 | Malware, PyPI, python, Sonatype, windows malware

Another day, another PyPI malware package. But this one has a new way to (try to) sneak into your computer ...

Security Boulevard

GitHub Issues Patch for Critical Exploit in Enterprise Server

Nathan Eddy | May 23, 2024 | Authentication, CVE-2024-4985, ghes, GitHub, SAML SSO, single sign on

The vulnerability affects all GHES versions prior to 3.13.0 and achieves the highest possible CVSS score of 10. Instances with SAML SSO authentication are at risk ...

Security Boulevard

North Korea IT Worker Scam Brings Malware and Funds Nukes

Richi Jennings | May 17, 2024 | DPRK, Korea, Korean military, Korean ransomware, North Korea, North Korean Hacking, North Korean Threat Actors, northkorea, Noth Korea, SB Blogwatch

WTH? DPRK IT WFH: Justice Department says N. Korean hackers are getting remote IT jobs, posing as Americans ...

Security Boulevard

VFCFinder Highlights Security Patches in Open Source Software

Nathan Eddy | May 16, 2024 | north Carolina state university, open source, security patches, software dependencies, vfc, vfcfinder, vulnerability, Vulnerability Fixing Commits

VFCFinder analyzes commit histories to pinpoint the most likely commits associated with vulnerability fixes ...

Security Boulevard

Richi Jennings | April 30, 2024 | bad passwords, blank password, Consumer IoT, gchq, gov.uk, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, iot, National Cyber Security Centre, NCSC, Product Security and Telecommunications Infrastructure act (PSTI), SB Blogwatch, The ‘S’ in IoT stands for Security, uk, United Kingdom

Nice Cup of IoTea? The UK’s Product Security and Telecommunications Infrastructure Act aims to improve the security of net-connected consumer gear ...

Security Boulevard

Securing Open Source

Senator Sanders Wants to Own AI Companies — and Hand America’s Adversaries the Keys

NIST’s Nine: The PQC Signature Race Moves to Round Three

The Quantum Arms Race: Why Washington Just Wrote a $2 Billion Check to Nine Companies

Beyond Moore’s Law: The Hyper-Acceleration of Autonomous AI Cyber Capabilities

The Exception Economy: When Security Teams Stop Protecting and Start Negotiating

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On