Shared secret: EDR killer in the kill chain

Cybersecurity researchers are calling attention to a new type of credential phishing scheme that ensures that the stolen information is associated with valid online accounts. The technique has been codenamed precision-validating phishing by Cofense, which it said employs real-time email validation so that only a select set of high-value targets are served the fake login…

Hackers and cybercrime groups are part of a virtual feeding frenzy, after Microsoft’s recent disclosure of new vulnerabilities in on-premises editions of SharePoint Server.

Making a case for empathy in cyber-leadership roles as a strategic business advantage.

Once trust is granted to the repository’s author, a malicious app executes arbitrary commands on the victim’s system with no other user interaction.

Cybersecurity researchers have discovered over a dozen security vulnerabilities impacting Tridium’s Niagara Framework that could allow an attacker on the same network to compromise the system under certain circumstances. “These vulnerabilities are fully exploitable if a Niagara system is misconfigured, thereby disabling encryption on a specific network device,” Nozomi Networks Labs said in a

Attackers are becoming faster at exploiting vulnerabilities but this startup seeks to stop threats before they lead to breaches.