Page 9 - Guidepoint Security News Today

Unlike most open-source attacks where malicious packages are being executed upon installation, researchers at Checkmarx, told SC Media that the payload is hidden in multiple strategic locations and only executes when the victims use the actual functions of the packages, which makes the campaign hard to detect by many security scanners.

A new study looks at the the specific mindsets and psychological proclivities of cybercriminals, finding that online crime differs from offline crime in important ways that may shape the behavior of both malicious hackers and their victims.

While the actual cost of cybercrime losses and the number of supply chain incidents have yet to be finalized for 2022, the data highlights the increasing number of cybersecurity vulnerabilities in open source software as one of the primary drivers of the problem in recent years.

The last few years, big box stores have closed on Thanksgiving. Online shopping has also kept more shoppers at home on Black Friday.

Researchers at Proofpoint revealed more technical details about SocGholish, a malware variant they identified earlier this month, highlighting its noteworthy tactics that differ from traditional phishing campaigns.

The targeted zero-days are part of 68 security fixes for the company’s November patch Tuesday, with 11 flaws flagged as Critical, 55 as Important, and two OpenSSL vulnerabilities marked as High severity.

The vulnerability in OpenSSL that forced the project's leaders to issue a security patch on Tuesday isn't as bad as initially feared, with the hole's severity shifted from "critical" to "high." Still, experts say infosec leaders need to take it seriously. OpenSSL 3.07 fixes a buffer overrun vulnerability in version 3.0 that can be triggered

Research from GuidePoint Security shows eight new ransomware groups have emerged in the last quarter and that there has been at least one new ransomware group each month since January 2021.

With distributed workforces and rapidly evolving technologies layering complexity on the chief information officer role, additional training may be required.

McLean, Virginia (PRWEB) October 05, 2022 -- Northern Virginia Technology Council (NVTC), the trade association representing the National Capital Region’s