Malware
OT/IoT security report: a deep look into the ICS threat landscape
January 30 by Cyber Security Hub Editor
An analysis of intrusion alerts between July-December 2022 to reveal the top threat vectors, most common malware used by bad actors and the most-targeted industries
GitHub supply chain attack could affect 83 million developers
August 04 by Olivia Powell
An attack on code repository GitHub has the potential to exposure users to weaponized code infected with malware
The five biggest ransomware trends you need to know about
July 21 by Adam Jeffs
CS Hub spoke to its network of cyber security experts about some of the biggest ransomware trends cyber security practitioners should know about today
Why Russia has refrained from a major cyber-attack against the West
June 15 by Beth Maundrill
While Russia has the capability to strike, we have not yet seen a SolarWinds-style incident since the outbreak of war in Ukraine
IOTW: Ukraine thwarts Russian cyber-attack on power grid
April 13 by Beth Maundrill
Sandworm appears to have used a new malware variant in its latest attack against Ukraine
Comprehensive Security Awareness: An Enterprise-Wide Goal
July 13 by Lisa Morgan
Security training is becoming non-optional for employees because every business can be victimized directly or indirectly via a third party. Below are some of the topics that should be covered as part...
IOTW: McDonald's Cyber Attack Targets Data
June 18 by Lisa Morgan
McDonald's reportedly said that the scope of the information leak was "small" and that it had hired outside consultants after it identified unauthorized access to one of the internal security systems....
IOTW: MacOS Security Patches Issued Again
June 04 by Lisa Morgan
The latest exploit necessitated a macOS update to 11.4 on May 24, which prevents XCSSET malware from being installed on a user's device. The spyware is capable of recording Zoom video, taking pictures...
IOTW: Scripps Health Malware Attack Could Cost Lives
May 21 by Lisa Morgan
Scripps is not discussing the attack, nor is it providing any meantime to recovery (MTTR) estimate. The uncertainty and tight-lipped nature of the incident is not a surprise to anyone in the cyber sec...
IOTW: While The Solarigate Rages On, A New Strategy To Cyber Security Emerges
January 29 by Seth Adler
In America’s free market, private sector and third-party technology vendors create information silos, both intentionally and unintentionally, which muddies the waters when it comes to investigating cy...
IOTW: As The SolarWinds Hack Investigation Continues, New Insights Reveal A New Suspect
January 15 by Seth Adler
The ongoing investigation into the SolarWinds cyber attack reveals a possible suspect—and it wasn’t the notorious Russian hacking group preliminary reports first assumed.
2020 Top Breaches: Part IV
December 30 by Seth Adler
2021 will look like 2020. Automated ransomware and Ransomware-as-a-Service attacks are picking up steam. The Life Sciences & Healthcare industry continue to be a central focus of malicious actors. Fed...
