Aggregator

Attackers are automating exploitation at scale, targeting both new and old vulnerabilities — some before appearing in KEV. Our latest report breaks down which CVEs were exploited most in 2024, how ransomware groups are leveraging mass exploitation, and why real-time intelligence is critical.

基于DeepSeek的智能化安全运营方案

威努特工控安全

9 months 2 weeks ago

威努特安全运营平台SASOC与DeepSeek的集成架构与实现方案。

How cloud sync and other SaaS dark patterns can put your organization at risk

Security Boulevard

9 months 2 weeks ago

While SaaS features and discounts offer many conveniences, some of the industry's darker patterns can put your organization at risk.

The post How cloud sync and other SaaS dark patterns can put your organization at risk appeared first on Security Boulevard.

Nudge Security Blog

Threat Attack Daily - February 26th, 2025

Dark Web Informer - Cyber Threat Intelligence

9 months 2 weeks ago

Threat Attack Daily - February 26th, 2025

Dark Web Informer - Cyber Threat Intelligence

Southern Water says Black Basta ransomware attack cost £4.5M in expenses

Bleeping Computer.

9 months 2 weeks ago

United Kingdom water supplier Southern Water has disclosed that it incurred costs of £4.5 million ($5.7M) due to a cyberattack it suffered in February 2024. [...]

Bill Toulas

OpenSSF Sets Minimum Security Baselines for Open Source Projects

darkreading

9 months 2 weeks ago

OSPS Baseline provides a starting point for project owners and adopters to understand an open source project's security posture by outlining all the controls that have been applied.

Edge Editors

GrassCall malware campaign drains crypto wallets via fake job interviews

Bleeping Computer.

9 months 2 weeks ago

A recent social engineering campaign targeted job seekers in the Web3 space with fake job interviews through a malicious "GrassCall" meeting app that installs information-stealing malware to steal cryptocurrency wallets. [...]

Lawrence Abrams