April 28, 2020

Data-Stealing Asnarök Malware Exploits Zero-Day Flaw in Sophos XG Firewalls

2 min read - Cybercriminals have been using a Trojan dubbed Asnarök to steal data by exploiting a vulnerability in enterprise firewalls from Sophos, the company warned.

March 10, 2020

Threat Actors Launch Attacks Based on Exchange Control Panel Vulnerability

2 min read - Threat groups are exploiting a vulnerability in the Exchange Control Panel (ECP) just weeks after Microsoft issued a patch, security researchers have discovered.

January 15, 2020

Cable Haunt Leaves an Estimated 200 Million Modems Open to Potential Attacks

2 min read - An estimated 200 million modems or more may be vulnerable to an exploit dubbed Cable Haunt, which researchers said would give attackers complete control over their victims' devices.

CISO November 21, 2019

How Old-School Hackers Are Enabling the Next Generation of Offensive Security Professionals

6 min read - Despite hackers' successes, we're still being mistaken for criminals in hoodies — a misconception that has helped keep the skills gap, especially when it comes to offensive security, as wide as ever.

Intelligence & Analytics September 10, 2019

10 Surprisingly Bright Spots on the Darknet

4 min read - The darknet isn't all creepy, illegal content. In between criminal marketplaces and hacker forums, there's a few hidden websites that exist for legitimate purposes.

CISO May 28, 2019

Interns and Social Media: A Goldmine for Hackers

7 min read - A social media post from one of a company's interns was all this people hacker needed to enter a secure area with a counterfeit employee badge.

Intelligence & Analytics August 6, 2018

7 Ways to Identify Darknet Cybersecurity Risks

5 min read - Explore seven characteristics of security risk from the dark and hidden web. Learn how organizations can capture the latent value of dark-sourced threat intelligence.

CISO June 6, 2017

Avoiding Security Hype, the Hazard From Hollywood

2 min read - Unfortunately, the Hollywood approach of security hype doesn't do much to help organizations improve their actual security.

April 20, 2017

Vigilante White-Hat Hacker Boosts IoT Device Security

2 min read - Hajime appears to have been created by a vigilante that is attempting to improve IoT device security and help IT decision-makers tighten defenses.

Identity & Access March 17, 2017

Your Cybercriminal Has an Image Problem

2 min read - The classic image of the Hollywood hacker is misleading. The typical cybercriminal is more likely to be a state-sponsored actor or malicious insider.