Security News
![Three Ways To Supercharge Your Software Supply Chain Security](/static/build/img/news/three-ways-to-supercharge-your-software-supply-chain-security-small.jpg)
Section four of the "Executive Order on Improving the Nation’s Cybersecurity" introduced a lot of people in tech to the concept of a “Software Supply Chain” and securing it. If you make software...
![New iPhone Exploit Uses Four Zero-Days](/static/build/img/news/alt/antivirus-stats-small.jpg)
Kaspersky researchers are detailing "An attack that over four years backdoored dozens if not thousands of iPhones, many of which belonged to employees of Moscow-based security firm Kaspersky." It's a zero-click exploit that makes use of four iPhone zero-days. It uses return/jump oriented programming and multiple stages written in the NSExpression/NSPredicate query language, patching the JavaScriptCore library environment to execute a privilege escalation exploit written in JavaScript.
![As lawmakers mull outlawing poor security, what can they really do to tackle online gangs?](/static/build/img/news/as-lawmakers-mull-outlawing-poor-security-what-can-they-really-do-to-tackle-online-gangs-small.jpg)
Comment In some ways, the ransomware landscape in 2023 remained unchanged from the way it looked in previous years. The industry needs governments to insert themselves into the crisis and take decisive action to stop ransomware from becoming even more out of hand than it already is.
![Beware: 3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners](/static/build/img/news/beware-3-malicious-pypi-packages-found-targeting-linux-with-crypto-miners-small.jpg)
Three new malicious packages have been discovered in the Python Package Index (PyPI) open-source repository with capabilities to deploy a cryptocurrency miner on affected Linux devices. The three...
![Three Chinese balloons float near Taiwanese airbase](/static/build/img/news/three-chinese-balloons-float-near-taiwanese-airbase-small.jpg)
Four Chinese balloons have reportedly floated over the Taiwan Strait, three of them crossing over the island's land mass and near its Ching-Chuan-Kang air base before disappearing, according to the Taiwan's defense ministry. An appearance of a similar Chinese balloon caused quite a stir in the US last February.
!['everything' blocks devs from removing their own npm packages](/static/build/img/news/everything-blocks-devs-from-removing-their-own-npm-packages-small.jpg)
Since these 3,000+ packages manage to include every single npm package on the npmjs.com registry as their dependency, npm package authors who have ever published to the npm registry would now be unable to remove their packages at will, because of npm's policy. Everything prevents you from unpublishing your packages.
![UAC-0050 Group Using New Phishing Tactics to Distribute Remcos RAT](/static/build/img/news/uac-0050-group-using-new-phishing-tactics-to-distribute-remcos-rat-small.jpg)
The threat actor known as UAC-0050 is leveraging phishing attacks to distribute Remcos RAT using new strategies to evade detection from security software. "The group's weapon of choice is Remcos...
![Mandiant's Twitter Account Restored After Six-Hour Crypto Scam Hack](/static/build/img/news/mandiant-s-twitter-account-restored-after-six-hour-crypto-scam-hack-small.jpg)
American cybersecurity firm and Google Cloud subsidiary Mandiant had its X (formerly Twitter) account compromised for more than six hours by an unknown attacker to propagate a cryptocurrency scam....
![DriveFS Sleuth: Open-source tool for investigating Google Drive File Stream’s disk forensic artifacts](/static/build/img/news/drivefs-sleuth-open-source-tool-for-investigating-google-drive-file-streams-disk-forensic-artifacts-small.jpg)
DriveFS Sleuth automates the investigation of Google Drive File Stream disk artifacts. The tool can parse the disk artifacts and build a filesystem tree-like structure enumerating the synchronized files along with their respective properties.
![15 open-source cybersecurity tools you’ll wish you’d known earlier](/static/build/img/news/15-open-source-cybersecurity-tools-youll-wish-youd-known-earlier-small.jpg)
Open-source tools represent a dynamic force in the technological landscape, embodying innovation, collaboration, and accessibility. In cybersecurity, open-source tools are invaluable assets, empowering organizations to fortify their defenses against evolving threats.