Attackers continue to leverage popular AWS cloud and GitHub developer services as a way to “live-off-the-land” and launch malware.

Known for its adaptability, the threat group is once again taking advantage of recent vulnerabilities organizations may not have patched yet.

The critical flaw is an authentication bug could let users compromise the security of the system.

Magnet Goblin, a newly identified cyber gang, is the latest threat group discovered abusing the Ivanti flaws.

Security pros say targeting source code will continue because it lets attackers identify new bugs and inject their own malware into the software supply chain.

Researchers unearthed a possible connection between nation-state groups and the ALPHV/BlackCat affiliate responsible for the highly disruptive attack.

Attackers are creating hundreds of admin accounts, with a high potential for supply chain attacks.

Security pros say given the installed base of VMware products many companies have, it makes sense to apply the updates right away.