Critical Start News Today

Security pros say as more workers use SaaS apps to get work done, organizations have to put a stronger focus on securing all that SaaS data.

Microsoft says the group leverages social-engineering techniques and has developed its own malware.

Security pros say the industry can expect to see this bug exploited soon, so patch, monitor and conduct other measures, like browser isolation and sandboxing.

Microsoft Graph API has become popular with hackers because running criminal ops on widely used cloud services raises less suspicion.

The targeted operation utilized CVE-2017-8570 as the initial vector and employed a notable custom loader for Cobalt Strike, yet attribution to any known threat actor remains elusive.

Some of today's passwords take significantly longer to crack, thanks to new hashing algorithms that bolster security.

Security pros say there’s a high potential that attackers could launch arbitrary code execution.

MCRR combines threat, vulnerability, and risk monitoring and management so organizations can have a strategic, data-driven, risk-based approach.

Security pros say while the target was an unclassified network, the research it manages on emerging technologies could be of interest to adversaries.

But just how the government differentiates its platform from similar private-sector options remains to be seen.