News

OIG finds city had no authorized list of vendor signatories when it paid hacker posing as a vendor

Attackers are increasingly leveraging LinkedIn to socially engineer victims into clicking on phishing links

Three members of the RSA Advisory board offered insights into ransomware, Log4j and supply chain security

Insider used some of the funds across online gambling sites

Another nine bugs added to catalog of known exploited vulnerabilities

Russia suspected of intensifying cyber-attacks

Hats off to VMWare for not using weasel words: “When should you act?” Immediately…

The resurgent trojan has targeted 60 top companies to harvest credentials for a wide range of applications, with an eye to virulent follow-on attacks.

The phishing attacks are spoofing LinkedIn to target ‘Great Resignation’ job hunters, who are also being preyed on by huge data-scraping bot attacks.

On the plus side, only instances with non-standard not recommended configurations are vulnerable. On the downside, those configurations aren’t easy to track down, and it’s easy as pie to exploit.