Category: News

Swati KhandelwalJul 10, 2026Enterprise Security / Security Incident Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, confirming to The Hacker News that it is responding to a “credible external security threat.”… Read More "Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat"

The latest incarnation of a family of ransomware which has been hitting organizations since 2022 has evolved to exploit Microsoft-signed malicious drivers to prevent endpoint defenses from detecting and disrupting its attacks. Detailed by cybersecurity researchers at Symantec, GodDamn ransomware… Read More "New Ransomware Exploits Malicious Driver to Remove Security Protection"

Vendor due diligence questionnaires are a type of security questionnaire for third-party vendors or service providers that are an essential part of any third-party risk management program (TPRM) program. By using a vendor due diligence questionnaire,  security teams can evaluate… Read More "Vendor Due Diligence Questionnaire (Free Template)"

Ravie LakshmananJul 10, 2026Software Supply Chain / Malware Unknown threat actors compromised the Injective Labs SDK project’s GitHub repository and leveraged it to publish a malicious package on the npm registry to steal cryptocurrency wallet private keys and mnemonic seed… Read More "Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages"

The US Cybersecurity and Infrastructure Security Agency (CISA) has detailed its response to internal CISA Amazon AWS GovCloud Keys and other information being made available in a public repository.  The reaction came after KrebsOnSecurity detailed in May how a security researcher with GitGuardian… Read More "CISA Details Incident Response to Exposed AWS GovCloud Keys"

A security questionnaire is a crucial part of an organization’s vendor risk assessment process. Client organizations use security questionnaires to gather insights into the security posture of their third-party vendors, such as their information security policies and practices.  Ensuring that… Read More "How to Answer a Security Questionnaire: A 4-Step Guide"

Researchers at Ledger’s Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem crypto wallet card, can reset the card’s password to anything the attacker picks. No old password. No backup card. Once it… Read More "Laser Attack Resets Tangem Wallet Passwords on Cards That Can’t Be Patched"

“Today’s vote on the interim regulation was a setback, but the political battle over the permanent ‘Chat Control 2.0’ is just getting started. The resistance we saw in Parliament today was so strong that finding a majority for permanent, suspicionless… Read More "EU extends mass scanning of messages without a warrant"

A new multi-purpose backdoor recently discovered by Microsoft marks a dangerous shift toward unified cyber-attack frameworks. The backdoor, tracked as GigaWiper, is linked to a malware implant with extensive operational capabilities, allowing cyber threat actors to conduct both quiet espionage… Read More "New ‘GigaWiper’ Malware Combines Espionage & Destructive Capabilities"