A critical infrastructure entity within Ukraine was targeted by a previously unseen data wiper malware named PathWiper, according to new findings from Cisco Talos. "The attack was instrumented via a legitimate endpoint administration framework, indicating that the attackers likely had access to the administrative console, that was then used to issue malicious commands and deploy PathWiper across

[Read the rest of this article...]

1. Person contagious with measles visited Boston public spaces  The Boston Globe
2. Boston Public Health Commission says person with measles visited Boston - Boston News, Weather, Sports  WHDH
3. Unvaccinated visitor infected with measles triggers contact tracing in Boston  MassLive
4. Person with measles visited Boston hotel, museum, airport, health officials warn  NBC Boston
5. Health officials warn public of possible measles exposure at popular Boston locations  CBS News

[Read the rest of this article...]

Cybersecurity researchers have flagged several popular Google Chrome extensions that have been found to transmit data in HTTP and hard-code secrets in their code, exposing users to privacy and security risks. "Several widely used extensions [...] unintentionally transmit sensitive data over simple HTTP," Yuanjing Guo, a security researcher in the Symantec's Security Technology and Response

[Read the rest of this article...]

The threat actor known as Bitter has been assessed to be a state-backed hacking group that's tasked with gathering intelligence that aligns with the interests of the Indian government. That's according to new findings jointly published by Proofpoint and Threatray in an exhaustive two-part analysis. "Their diverse toolset shows consistent coding patterns across malware families, particularly in

[Read the rest of this article...]

Security teams face growing demands with more tools, more data, and higher expectations than ever. Boards approve large security budgets, yet still ask the same question: what is the business getting in return? CISOs respond with reports on controls and vulnerability counts – but executives want to understand risk in terms of financial exposure, operational impact, and avoiding loss. The

[Read the rest of this article...]