cybersecurity
Accenture's $10 billion cybersecurity business is expanding with a new operational technology security partner.
npm’s attempts to make package publishing safer haven’t stemmed the relentless supply chain attacks: Are they on the right track?
Google Mandiant researchers tracked activity linked to the PeopleSoft vuln over 13 days.
IT managers should heed Oracle mitigations ASAP as Mandiant CTO says bug is exploited in the wild.
"The malware now generates a uniquely encrypted payload for each infection, making hash-based IOCs useful only for a specific package version"
"We're just seeing them all over the place."
Control systems – and the entire software supply chain – needs work too, but even air-gapping isn't sufficient mitigation, Congress told.
Webworm group has expanded outside of Europe to target EU countries and South Africa.
"Code produced with public money should be open and reusable by default, with limited, justified exceptions."