The Stakes Are Higher in Healthcare: Fighting Cybercrime During a Pandemic

A ransomware attack attributed to an Eastern European group forced Colonial Pipeline, supplier of nearly half the US East Coast's fuel, to shut down its entire system and triggered a federal response.

This guest post examines why Active Directory is both foundational and vulnerable across U.S. public sector agencies, from the OPM breach onward, and why detection and hardening are essential.

Semperis contributed to NIST data-integrity guides SP 1800-25/26 showing how complementary tools—with Cisco, Symantec and Tripwire—identify, detect and respond to ransomware; layered defense beats single products as breach costs mount.

Trojanized proof-of-concept exploits turn the vulnerability-research workflow itself into an attack surface. Researchers should isolate, inspect and verify exploit code before execution.

233 versions across three Laravel-Lang repositories were compromised via malicious tags pointing to attacker fork commits, loading a PHP credential stealer through Composer's autoloader.

HackenProof revisits the 2018 open-Elasticsearch breach of 57 million US records—and eight years of larger misconfiguration leaks since, a pattern that keeps growing rather than going away.