Google announced that its protected Kernel-based Virtual Machine (pKVM) for Android has achieved SESIP Level 5 certification, the highest security assurance level for IoT and mobile platforms. […] Go to Source Author: Bill Toulas
Author Archives: Onsite Computing, Inc.
The first documented deployment of the novel malware in a campaign against the Middle Eastern public sector and aviation industry may be tied to China’s state-sponsored actor Earth Baxia. Go to Source Author: Elizabeth Montalbano, Contributing Writer
A new cyber-espionage threat group has been using a new backdoor malware that provides persistent access through a seemingly inactive scheduled task. […] Go to Source Author: Bill Toulas
Over 3,300 Citrix NetScaler devices remain unpatched against a critical vulnerability that allows attackers to bypass authentication by hijacking user sessions, nearly two months after patches were released. […] Go to Source Author: Sergiu Gatlan
Securing business logic isn’t just a technical requirement — it’s a business imperative. Go to Source Author: Dirk Schrader
Healthcare led all industries in 2024 breaches—over 275M patient records exposed, mostly via weak or stolen passwords. See how the self-hosted password manager by Passwork helps providers meet HIPAA requirements, protect ePHI, and keep healthcare running. Try it free for 1 month. […] Go to Source Author: Sponsored by Passwork
Microsoft announced today that systems running Home and Pro editions of Windows 11 23H2 will stop receiving updates in three months. […] Go to Source Author: Sergiu Gatlan
A previously undocumented threat actor dubbed Curly COMrades has been observed targeting entities in Georgia and Moldova as part of a cyber espionage campaign designed to facilitate long-term access to target networks. “They repeatedly tried to extract the NTDS database from domain controllers — the primary repository for user password hashes and authentication data in […]
Manpower, one of the world’s largest staffing companies, is notifying nearly 145,000 individuals that their information was stolen by attackers who breached the company’s systems in December 2024. […] Go to Source Author: Sergiu Gatlan
There’s growing evidence that two of arguably the most dangerous cybercrime groups out there are tag-teaming big targets. Go to Source Author: Jai Vijayan, Contributing Writer