Bitdefender researchers discovered a Chinese APT group stealthily attack Southeast Asian governments. Although much of the C&C servers were found to be offline, the operations are still functional.

A new gang has been taking over vulnerable WordPress sites to install hidden e-commerce stores with the purpose of hijacking the site’s search engine ranking and reputation and promote online scams.

Jamie Hart, a cyber threat intelligence analyst at Digital Shadows, said that the trend of targeting individual and business tax filings for ransomware attacks has been on the rise.

Hacktivists have reportedly downed the website of Uganda Police in the wake of protests triggered by the arrest of Robert Kyagulanyi Ssentamu, also known by his pop star alias, Bobi Wine.

Ransomware, already a major enterprise threat, is growing more problematic as operators brainstorm new ways to make their attacks easier to launch and more devastating for victims.

There were a total of 30.7 million files, including agent names, emails, password keys, security tokens, owner/client data, and other internal records, exposed to anyone with an internet connection.

VMware has released temporary workarounds to address a critical vulnerability in its products that could be exploited by an attacker to take control of an affected system.

vpnMentor’s research team has discovered a possible credential stuffing operation whose origins are unknown, but that affected some online users who also have Spotify accounts.

As 2020 nears its end, CISOs and infosec teams are expected to prepare board and C-suite briefings on the state of their organization’s cybersecurity posture, including a comprehensive 2021 budget.

CyberArk announced it is working with Forescout and Phosphorus to enable organizations to secure the increasing number of IoT devices and technologies resulting from digital business transformation.