Paul Wagenseil

Unfortunately, it's difficult to buy a full zero-trust solution. Instead, you'll likely build a zero-trust security model by implementing various components. Here’s how to evaluate vendors of those components.

Security Affairs reports that the Open Web Application Security Project Foundation had data from its earliest members exposed as a result of an old Wiki web server misconfiguration.

BleepingComputer reports that the U.S. was noted by the Federal Trade Commission to have incurred more than $1.1 billion in losses from impersonation scams last year, a threefold increase from 2020.

CyberScoop reports that Chinese advanced persistent threat group Storm-0558's compromise of email accounts belonging to Commerce Secretary Gina Raimondo and other high-level officials was blamed by the Cyber Safety Review Board on Microsoft's inadequate enterprise security and risk management efforts.

Russian paramilitary troop Wagner Group-linked disinformation campaigns have continued unabated months after the death of the group's leader Yevgeniy Prigozhin, according to The Record, a news site by cybersecurity firm Recorded Future.

A “cascade of security failures” allowed China’s top cyberespionage operatives to steal high-level U.S. government emails last year.

BleepingComputer reports that more than 2,000 WordPress websites were discovered by MalwareHunterTeam to have been injected with crypto drainers to facilitate automated fund exfiltration a month after nearly a thousand hacked sites were found by Sucuri to have been used to enable brute-force attacks against other sites.

Why aren't we simply making a better VPN?

The line between standard and privileged users is blurring as the standard user often has access to sensitive data and can perform high-risk actions as part of their daily activities, making them ripe targets for cyber threats. Here's what to know and what to do.

BleepingComputer reports that widely used password management service LastPass is having its customers subjected to a new attack campaign involving the sophisticated CryptoChameleon phishing kit aimed at exfiltrating cryptocurrency assets.