Ryan Naraine
Editor at Large at SecurityWeek
Publisher at Security Conversations
🎧 Three Buddy Problem: https://t.co/ZGEyqy2h7g. ✍🏼 Writing: @securityweek 🗣️ Conference: @labscon_io
Articles
-
2 weeks ago |
securityweek.com | Ryan Naraine
Security researchers at Wiz on Monday raised an alarm catching a malicious hacker hijacking misconfigured DevOps infrastructure for cryptocurrency mining in what appears to be the first documented abuse of HashiCorp Nomad servers in the wild.
-
2 weeks ago |
securityweek.com | Ryan Naraine
Mobile chipmaker Qualcomm on Monday warned that professional hackers are already exploiting three newly patched Adreno GPU bugs and the company is pressing phone makers to push available fixes without delay.
-
2 weeks ago |
securityweek.com | Ryan Naraine
Threat intelligence firm GreyNoise on Wednesday lifted the lid on a stealth malware campaign that has quietly converted thousands of internet-facing ASUS home and small-office routers into backdoor nodes since at least mid-March.
-
2 weeks ago |
securityweek.com | Ryan Naraine
The Czech government delivered a pointed warning to China on Wednesday, publicly attributing a years-long intrusion in the foreign ministry’s networks to APT31, a cyber-espionage hacking unit linked to Beijing’s Ministry of State Security.
-
2 weeks ago |
securityweek.com | Ryan Naraine
Microsoft on Tuesday published technical documentation on a new Russia-linked espionage outfit it calls “Void Blizzard,” warning that the group has spent the past year quietly looting e-mail, files and even Teams chats from government and defense contractors across Europe and North America.
Try JournoFinder For Free
Search and contact over 1M+ journalist profiles, browse 100M+ articles, and unlock powerful PR tools.
Start Your 7-Day Free Trial →Coverage map
X (formerly Twitter)
- Followers
- 27K
- Tweets
- 31K
- DMs Open
- No
RT @sergeybratus: Papers and slides from the 11th LangSec IEEE Security & Privacy workshop are now posted on the LangSec website: https://t…
A stray artifact in a TLS certificate led security researchers to an unnerving discovery: hundreds of control-room dashboards for US water utilities were sitting a click away from the public internet, and dozens of them offered full, no-password control over pumps, valves and
Fun pod with @mikko and @craiu https://t.co/59unta7fTE