Designing Tabletop Exercises That Actually Thwart Attacks

Have you ever wondered how they design blue team exercises? One ransomware and cyber extortion simulation demonstrates the best practices.

https://www.darkreading.com/edge-article...berattacks

How Strategic Investors Can Help Cybersecurity Startups

Cybersecurity startups face pressure during this economic uncertainty, but strategic investors can help them succeed in providing tech that defends against cyberattacks.

https://www.darkreading.com/attacks-brea...-startups-

What RASP Should Have Been

When runtime application self-protection is held to a higher standard, it can secure thousands of applications and prevent burnout in security teams.

https://www.darkreading.com/attacks-brea...-have-been

15M+ Services & Apps Remain Sitting Ducks for Known Exploits

Scans of the Internet find that millions of computers, virtual machines, and containers are vulnerable to one or more of the hundreds of cyberattacks currently used in the wild, despite being patchable.

https://www.darkreading.com/vulnerabilit...n-exploits

WinRAR SFX archives can run PowerShell without being detected


Hackers are adding malicious functionality to WinRAR self-extracting archives that contain harmless decoy files, allowing them to plant backdoors without triggering the security agent on the target system. [...]


https://www.bleepingcomputer.com/news/se...-detected/

US seizes $112 million from cryptocurrency investment scammers


Today, the U.S. Department of Justice seized six virtual currency accounts containing over $112 million in funds stolen in cryptocurrency investment schemes. [...]


https://www.bleepingcomputer.com/news/se...-scammers/

CISA warns of Zimbra bug exploited in attacks against NATO countries


The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a Zimbra Collaboration (ZCS) cross-site scripting flaw exploited by Russian hackers to steal emails in attacks targeting NATO countries. [...]


https://www.bleepingcomputer.com/news/se...countries/

IRS-authorized eFile.com tax return software caught serving JS malware


eFile.com, an IRS-authorized e-file software service provider used by many for filing their tax returns, has been caught serving JavaScript malware. [...]


https://www.bleepingcomputer.com/news/se...s-malware/

New Rorschach ransomware is the fastest encryptor seen so far


Following a cyberattack on a U.S.-based company, malware researchers discovered what appears to be a new ransomware strain with "technically unique features," which they named Rorschach. [...]


https://www.bleepingcomputer.com/news/se...en-so-far/

ALPHV ransomware exploits Veritas Backup Exec bugs for initial access


An ALPHV/BlackCat ransomware affiliate was observed exploiting three vulnerabilities impacting the Veritas Backup product for initial access to the target network. [...]


https://www.bleepingcomputer.com/news/se...al-access/