June 11, 2019

Attack Campaign Exploits CVE-2019-2725, Abuses Certificate Files to Deliver Monero Miner

< 1 min read - Researchers observed an attack campaign exploiting CVE-2019-2725 and abusing certificate files to deliver a Monero miner.

June 11, 2019

Windows 10 Zero-Day Lets Threat Actors Bypass Patch and Escalate Role to Admin Level

2 min read - Threat actors could use a recently discovered Windows 10 zero-day flaw to take over a computer and bypass local privilege escalation.

June 5, 2019

BlackSquid Malware Capable of Abusing 8 Exploits to Install XMRig Monero Miner

2 min read - The new BlackSquid malware is capable of abusing eight notorious exploits in its attempts to install the XMRig Monero miner.

CISO May 31, 2019

What Cartoons Can Teach Us About Cyberattacks

4 min read - I will never watch "The Little Mermaid" again without thinking about ransomware and cyberattacks.

Application Security May 29, 2019

Application Security Takeaways From the Ai4 Cybersecurity Conference

4 min read - While AI in cybersecurity is still in its infancy, the inaugural Ai4 Cybersecurity conference was a great first step in advancing the discussion, especially as it relates to application security.

May 28, 2019

Sodinokibi Ransomware Fixes Scaling Issues, Targets Large Enterprises

2 min read - Recent variants of Sodinokibi accounted for scaling issues as the ransomware family steadily moves to target large enterprises.

May 14, 2019

Pirate Chick Poses as VPN Tool, Secretly Installs Malicious Payloads

2 min read - Malicious actors are bundling a Trojan called Pirate Chick, which looks like a virtual private network (VPN) software tool, into adware to install malware on infected machines.

May 14, 2019

Updated Version of KPOT Stealer Available for Purchase on Underground Hacking Forums

2 min read - Researchers observed cybercriminals selling an updated version of the KPOT stealer on some underground hacking forums.

Application Security May 8, 2019

AppSec Insights From Think 2019: Four Steps to Optimize Your Application Security Program

3 min read - Whether you're a small startup or an international enterprise, a successful application security program involves more than just scanning for vulnerabilities.

Software Vulnerabilities May 2, 2019

Published Exploits for Accessing SAP Systems Put Security Teams on Alert

6 min read - Researchers published two pieces of exploit code that can allow anyone to interact with an organization's SAP enterprise resource planning platform and perform unauthorized transactions.