Shaun Nichols

A cross-site scripting flaw in Cobalt Strike would allow attacker to remotely execute commands on the widely used penetration testing tool.

Multifactor authentication tools are increasingly being targeted by threat actors with MFA bypass attacks, according to Okta.

ReversingLabs discovered a malicious NPM package was masquerading as a developer tool called Material Tailwind in an apparent supply chain attack.

Cisco Talos researchers uncovered a new malware attack that uses job-themed phishing emails to deliver Cobalt Strike beacons.

While ransomware gangs have adopted a new tactic known as intermittent encryption, infosec experts say the risk is likely not severe.

Once inside an environment, network intruders are getting away with low-effort methods to avoid detection, according to Secureworks.

Uncle Sam outlined the top known vulnerabilities exploited by Chinese hackers and urged organizations to patch them immediately.

A supply chain attack using NPM malware ran unchecked for over a year, according to researchers at Checkmarx.

An NPM API flaw could let attackers view company packages, according to new research from Aqua Security.

A resurgent LockBit ransomware operation wasn’t enough to stop a trend of dwindling attacks this year, according to new Cyberint research.

A newly disclosed Azure vulnerability could allow for remote administrator attacks, according to researchers at Orca Security.

An unnamed defendant, who is accused of being a member of the Lapsus$ hacking group, was arrested by Brazilian federal police.

Victor Zhora, Ukraine’s head of cybersecurity, shed light on the evolution of Russian cyber attacks during a keynote at the 2022 Blackberry Security Summit.

Buffer overflow errors led to two OpenSSL vulnerabilities that required patching for the widely used open source cryptography library.

An anonymous Twitter account leaked chats from the Yanluowang ransomware operation, which provided insight into the cybercrime group’s origins.

A root certificate authority called TrustCor Systems is facing scrutiny over alleged ties to a spyware vendor, according to a Washington Post report.

A series of widespread attacks from Magecart threat actors on Adobe Commerce and Magento customers is raising alarms.

Orange Tsai’s four sets of ‘Proxy’ bugs in Microsoft Exchange Server are poised to remain a threat for organizations.

The team at HP Wolf Security found that cybercriminals are using archive files as the preferred method for spreading malware, beating Microsoft Office for the first time.

Eclypsium discovered three vulnerabilities, including a critical remote code execution bug, in MegaRAC BMC software from America Megatrends, Inc.