SEARCH
All Articles
Atlassian Fixes Critical Confluence, Bamboo Bugs
Atlassian has patched three nigh-risk vulnerabilities, two in its Confluence products and one in its Bamboo products.
CISA Warns of Actively Exploited Citrix Flaw
Organizations are urged to apply patches for the flaw in Netscaler (formerly Citrix) ADC and Gateway products.
Decipher Podcast: Source Code 7/21
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
Security Industry Mulls Spyware ‘Whack-A-Mole’ Problem
As the commercial spyware market continues to grow, public and private sector organizations are considering all their options - from financial sanctions to a complete global moratorium.
Capibar Malware Used in Turla Espionage Attacks
Researchers and Ukraine’s governmental computer emergency response team are publishing details on new Turla malware used in espionage attacks against the defense sector in Ukraine and Eastern Europe.
White House Unveils New Cyber Trust Mark for IoT Security
The new U.S. Cyber Trust Mark program is meant as a seal of approval for IoT device security and could drive more secure development practices.
FIN8 Reworks Backdoor to Sidestep Detection
A financially motivated threat group is using a reworked version of its known backdoor to deploy the Noberus ransomware.
Adobe Fixes Critical ColdFusion Flaw
Adobe has released a patch for a critical bug in ColdFusion (CVE-2023-38203) and warns that a proof-of-concept analysis is available for it.
Workers Come and Go: Offboarding Security Gaps Remain the Same
Onboarding and offboarding are operationally complex, time-consuming processes - and security frequently falls between the cracks.
Decipher Podcast: Source Code 7/14
Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.
Zimbra Warns of Zero Day in Collaboration Suite
The Zimbra Collaboration Suite version 8.8.15 has a cross-site scripting flaw that Google researchers say has been actively exploited.
White House Maps Out National Cybersecurity Strategy
The White House has dropped the long-awaited plan for executing its National Cybersecurity Strategy, which involves 65 initiatives and 18 government agencies.
Rockwell Automation Warns of Critical Bug in ControlLogix Modules
Rockwell Automation discovered an exploit for its ControlLogix modules that was developed by an unnamed APT actor.
Microsoft: China-Based Hackers Accessed U.S. Government Emails
The threat group used forged authentication tokens - with an acquired Microsoft account consumer signing key - to access the email accounts of more than two dozen organizations.
Decipher Podcast: Jackie Burns Koven
Jackie Burns Koven, head of cyber threat intelligence at Chainalysis, talks about cryptocurrency-related cybercrime.