Latest articles by Solomon Klappholz
A leaked GitHub access token could have led to a catastrophic supply chain attack
News The GitHub access token with administrator level privileges could have been used to great effect by threat actors
CrowdStrike hits back at Delta’s “public posturing” as war of words intensifies
News CrowdStrike has responded to strong criticism from the CEO at Delta Air Lines, rejecting claims of gross negligence
Cyber firm KnowBe4 unknowingly hired a North Korean hacker
News KnowBe4 revealed it inadvertently hired a North Korean hacker pretending to be a remote worker based in the US
NCSC Active Cyber Defence 2.0 refresh looks to tailor services to the security market and threat landscape
News The NCSC plans to update its Active Cyber Defence program, introducing a refresh to keep the initiative up to date with the current threat landscape
Critical ServiceNow vulnerabilities exploited in ‘global reconnaissance campaign’
News Threat actors are actively exploiting vulnerabilities in the ServiceNow platform, with reports of hackers already posting personal data on the dark web
Software vendors are flocking to CISA’s Secure by Design Pledge
News CISA’s Secure by Design Pledge is picking up momentum, adding a further 100 companies to its list of signees since May
Threat actors are exploiting a VMware ESXi bug which could be “catastrophic” for affected firms
News The VMware ESXi hypervisor has become a favorite target in the digital extortion community, according to researchers
'Foreign threat actors' are targeting US tech startups to steal IP and sensitive data, cyber agencies warn
News US tech startups are a prime target for foreign intelligence agencies and threat groups, offering a chance to steal IP and state secrets
Zscaler just uncovered what could be the largest ransomware payment of all time
News Zscaler’s ThreatLabz identified a new record for the largest ransomware payment ever recorded, which is almost twice the size of the previous record holder
Rising data breach costs show no signs of slowing down, says IBM
News Data breach costs continued to rise, according to IBM, and they’re taking longer to recover from
Remote work is still causing security headaches for CISOs
Analysis CISOs still cite remote work as one of their major security sticking points four years on from the widespread shift at the beginning of COVID
The cost of the CrowdStrike outage continues to mount
News The costs associated with the CrowdStrike IT outage could surge in weeks to come, analysis suggests
US Department of State puts $10 million bounty on North Korean hacker’s head
News US law enforcement after information on the identification or location of a leading affiliate of a North Korean hacking gang, as the NCSC issues warning of its increased focus on critical infrastructure
Documents for Pentagon contractors found on dark web
News Hackers have reportedly dumped internal documents from Leidos Holdings on the dark web, raising questions about how organizations are securing their supply chains
Researchers discover “highly sophisticated’ operation using a 3,000-strong network of ghost accounts to spread malware on GitHub
A flood of ghost accounts are manipulating GitHub to promote malicious repositories and accounts – and this could be just the tip of the iceberg
Meta’s Llama 3.1 promises to compete with closed source competition
News Social media giant reveals its most powerful open source model yet, but stakeholders continue to question its credibility in the field
Wiz backs out of $23 billion Google acquisition
News Security firm cites antitrust and investor concerns as it backs out of Google deal, but experts note there are other cloud security specialists the search giant could turn to
NCA takes down world’s most prolific DDoS-for-hire website
A joint operation led by the National Crime Agency to infiltrate the Digitalstress.su criminal marketplace and take control of its infrastructure and domains
Hackers create fake CrowdStrike recovery resources
Businesses urged to exercise caution and look out for the file named ‘result.txt in %TMP%’ that could indicate a “Daolpu” infection
CISA breached a federal agency as part of its red team program — and nobody noticed for five months
News A red team assessment performed by CISA on an unnamed federal agency found a series of critical security weaknesses
Global IT outage caused by faulty CrowdStrike update could take ‘days and weeks’ to resolve, experts warn
News Responsible for one of the largest IT outages in years, CrowdStrike has had a tough day, but experts warn customers could face a "nightmare" in the coming days
Half of Australia’s population was exposed in the MediSecure breach, but victims might never know if they’re affected
News Financial difficulties at MediSecure mean it doesn’t have the resources to establish exactly who was impacted in a recent breach and what data was stolen
King’s Speech: Security in the spotlight as government promises new efforts to lock down insecure IT supply chains
News The new Labour government has promised fresh cybersecurity legislation aimed at minimizing supply chain risk and improving incident reporting
