Latest articles by Solomon Klappholz
A “disaster waiting to happen”: Sellafield plant admits to glaring cybersecurity failures
News Sellafield, which houses the largest store of plutonium in the world, was found to have left staggering cyber vulnerabilities unaddressed for four years
How Africa became the testing ground for cyber warfare
Analysis Africa has become a major battleground for state-affiliated cyber criminals, with firms in the region frequently targeted by sophisticated attacks before they reach Europe and the US
The Royal ransomware group has rebranded
News The Royal ransomware group has rebranded under the BlackSuit name after two years operating as one of the most prolific threat groups in the world
A Microsoft Authenticator flaw is bricking accounts – here’s how to fix it
News Users are having their accounts overwritten by the Microsoft Authenticator service – and it's an issue that's been happening for years
A new critical vulnerability in Apache OFBiz has been uncovered – here's what you need to know
News SonicWall has found another major flaw in the Apache OFBiz enterprise resource planning software, marking the latest in a slew of vulnerabilities over the last year
A leaked GitHub access token could have led to a catastrophic supply chain attack
News The GitHub access token with administrator level privileges could have been used to great effect by threat actors
CrowdStrike hits back at Delta’s “public posturing” as war of words intensifies
News CrowdStrike has responded to strong criticism from the CEO at Delta Air Lines, rejecting claims of gross negligence
Cyber firm KnowBe4 unknowingly hired a North Korean hacker
News KnowBe4 revealed it inadvertently hired a North Korean hacker pretending to be a remote worker based in the US
NCSC Active Cyber Defence 2.0 refresh looks to tailor services to the security market and threat landscape
News The NCSC plans to update its Active Cyber Defence program, introducing a refresh to keep the initiative up to date with the current threat landscape
Critical ServiceNow vulnerabilities exploited in ‘global reconnaissance campaign’
News Threat actors are actively exploiting vulnerabilities in the ServiceNow platform, with reports of hackers already posting personal data on the dark web
Software vendors are flocking to CISA’s Secure by Design Pledge
News CISA’s Secure by Design Pledge is picking up momentum, adding a further 100 companies to its list of signees since May
Threat actors are exploiting a VMware ESXi bug which could be “catastrophic” for affected firms
News The VMware ESXi hypervisor has become a favorite target in the digital extortion community, according to researchers
'Foreign threat actors' are targeting US tech startups to steal IP and sensitive data, cyber agencies warn
News US tech startups are a prime target for foreign intelligence agencies and threat groups, offering a chance to steal IP and state secrets
Zscaler just uncovered what could be the largest ransomware payment of all time
News Zscaler’s ThreatLabz identified a new record for the largest ransomware payment ever recorded, which is almost twice the size of the previous record holder
Rising data breach costs show no signs of slowing down, says IBM
News Data breach costs continued to rise, according to IBM, and they’re taking longer to recover from
Remote work is still causing security headaches for CISOs
Analysis CISOs still cite remote work as one of their major security sticking points four years on from the widespread shift at the beginning of COVID
The cost of the CrowdStrike outage continues to mount
News The costs associated with the CrowdStrike IT outage could surge in weeks to come, analysis suggests
US Department of State puts $10 million bounty on North Korean hacker’s head
News US law enforcement after information on the identification or location of a leading affiliate of a North Korean hacking gang, as the NCSC issues warning of its increased focus on critical infrastructure
Documents for Pentagon contractors found on dark web
News Hackers have reportedly dumped internal documents from Leidos Holdings on the dark web, raising questions about how organizations are securing their supply chains
Researchers discover “highly sophisticated’ operation using a 3,000-strong network of ghost accounts to spread malware on GitHub
A flood of ghost accounts are manipulating GitHub to promote malicious repositories and accounts – and this could be just the tip of the iceberg
Meta’s Llama 3.1 promises to compete with closed source competition
News Social media giant reveals its most powerful open source model yet, but stakeholders continue to question its credibility in the field
Wiz backs out of $23 billion Google acquisition
News Security firm cites antitrust and investor concerns as it backs out of Google deal, but experts note there are other cloud security specialists the search giant could turn to
NCA takes down world’s most prolific DDoS-for-hire website
A joint operation led by the National Crime Agency to infiltrate the Digitalstress.su criminal marketplace and take control of its infrastructure and domains
