Network security

The newly discovered InfectedSlurs botnet is being built through the exploitation of two zero-day RCE vulnerabilities in routers and network video recorder devices.

Once again, Theresa Lanowitz joins us to discuss Edge Computing, but with a twist this time, as Mani Keerthi Nagotu from SentinelOne joins us as well! As a field CISO, Mani knows all too well the struggles security leaders are going through, given the current market and threat landscape: Maybe not less budget, but more pressure to produce results...

VentureBeat reports that California-based enterprise key management startup Fortanix has enhanced its Data Security Manager platform with the introduction of the new Key Insight tool, which seeks to consolidate digital encryption key management in the enterprise.

Browser-based attacks using malware-laced downloads now usurp email-based ransomware attacks involving malicious executables, researchers say.

The short-lived ransomware gang’s assets are going cheap, its affiliates are expected to move on to other extortion activities.

Sixty-eight percent of U.S. websites lacked defenses against simple bot attacks and permitted all nine different bot types, while only 10% totally averted bot requests, reports SiliconAngle.

OpenAI reported multiple disruptions this week, culminating in a distributed-denial-of-service attack on ChatGPT on Nov. 8.

Today, we discuss the state of attack surface across the Internet. We've known for decades now that putting an insecure service on the public Internet is a recipe for disaster, often within minutes. How has this knowledge changed the publicly accessible Internet? We find out when we talk to Censys's Aidan Holland today.

North Korea's Lazarus Group has leveraged the backdoored PDF reader app SwiftLoader used in the RustBucket campaign to facilitate the deployment of the KANDYKORN macOS malware in a bid to better evade detection, according to The Hacker News.

Cerber ransomware attacks started over the weekend, just days after “critical information” about the now-patched Atlassian Confluence vulnerability was posted online.