Cybersecurity

Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA

Introduction The modern software supply chain represents an ever-evolving threat landscape, with each package added to the manifest introducing new attack vectors. To meet industry requirements, organizations must maintain a fast-paced development process while staying up-to-date with the latest security patches. However, in practice, developers often face a large amount of security work without clear […]

Cybersecurity

Feds Warn Health Sector About Akira Again, Amid New Attacks

Fraud Management & Cybercrime , Healthcare , Industry Specific Recent Victims Include Pennsylvania Emergency Dispatch System Marianne Kolbasuk McGee (HealthInfoSec) • February 8, 2024     An IT system used by emergency dispatchers in Bucks County, Pennsylvania was recently attacked by ransomware gang Akira. (Image: Bucks County) U.S. federal authorities are again warning the healthcare […]

Cybersecurity

New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

Feb 09, 2024NewsroomEndpoint Security / Cryptocurrency Sixty-one banking institutions, all of them originating from Brazil, are the target of a new banking trojan called Coyote. “This malware utilizes the Squirrel installer for distribution, leveraging Node.js and a relatively new multi-platform programming language called Nim as a loader to complete its infection,” Russian cybersecurity firm Kaspersky […]

Cybersecurity

Critical Manufacturing Vulnerabilities Surge 230% in Six Months

Threat actors are targeting operational technology (OT) and Internet of Things (IoT) environments with increasing sophistication and have a growing attack surface of vulnerabilities to help them do so, Nozomi Networks has warned in a new report. Its Assessing the Threat Landscape report covers the second half of 2023 using internally sourced data from honeypots and customer […]

Cybersecurity

Security Compass Announces Acquisition of Kontra from ThriveDX, Expanding its Application Security Training Offerings

TORONTO, February 05, 2024–(BUSINESS WIRE)–Security Compass, The Security by Design Company, today announces the acquisition of application security training software provider Kontra from ThriveDX, the global leader in cyber training and talent development. The acquisition marks a pivotal step forward in Security Compass’s ongoing mission to empower businesses with application security solutions centered on a […]