23965 shaares
66 results
tagged
supplychain
Researcher Alex Birsan came up with a method to breach 35 big tech companies and earned $130,000 in bug bounties.
Most enterprises have no clue they're sitting ducks for average attackers of moderate skill, much less nation state-backed adversaries with unlimited resources.
It’s clear the SolarWinds incident has rocked the infosec community to its core, with the still-unfolding episode expected to reverberate in the industry for years to come. While there is still much to be uncovered, the public details point to a known Russian APT inserting code into a third-party…
Those behind the widespread intrusion into government and corporate networks exploited seams in U.S. defenses and gave away nothing to American monitoring of their systems.
The government doesn’t do much to verify the security of software from private contractors. And that’s how suspected Russian hackers got in.
No easy answers.
password of "solarwinds123" SRSLY?!?!?!?!
And why it could take months more to discover how many other governments and companies have been breached.
Just a few brief thoughts on the initial reports of a SolarWinds Orion supply chain attack allegedly impacting a multitude of high profile government and corporate targets. We’re still waitin…
Russian Hackers Steal Data for Months in Global Supply Chain Attacks. US government agencies hit just days after FireEye announced breach
Software supply chain security remains an under-appreciated domain of national security policymaking. Working to improve the security of software supporting private sector enterprise as well as sensitive Defense and Intelligence organizations requires more coherent policy response together industry and open source communities.
The Commerce Department’s muddled guidance could put the United States’s technological advantage at risk and could decrease the likelihood that U.S. companies’ preferences will be incorporated in
Threat researchers tracking public reports of MSP ransomware incidents up count to 13 this year.
Ransomware group gains access to dental software backend, deploys ransomware on customers' systems.
An interesting example of communicating the nature and severity of a vulnerability through metaphor.
After reports about Chinese backdoor chips being built into its motherboards, Super Micro will stop purchasing server components made in China.
Hackers targeted and compromised “hundreds of thousands” of Asus computer owners by pushing a backdoored update software tool from the company’s own servers. The bombshell claims, first reported by Motherboard, said the hackers digitally signed the Asus Live Update tool with one of the company’s own code-signing certificates before pushing it to Asus’ download servers, […]
The Taiwan-based tech giant ASUS is believed to have pushed the malware to hundreds of thousands of customers through its trusted automatic software update tool after attackers compromised the company’s server and used it to push the malware to machines.
Earlier this month I spoke at a cybersecurity conference in Albany, N.Y. alongside Tony Sager, senior vice president and chief evangelist at the Center for Internet Security and a former bug hunter at the U.S. National Security Agency. We talked…