Tags → #stories

A recent paper by Eysa Lee and Anna Lysyanskaya from Brown University presents a new multi-holder anonymous credential scheme aimed at enhancing digital identity security in response to the eIDAS 2.0 regulation.

Researchers at Zhejiang University of Technology have developed LMDetect, a framework aimed at improving the detection of lateral movement in advanced persistent threat attacks by utilizing a graph-based analysis of host authentication log data.

StrelaStealer is a newly discovered infostealer malware that targets login credentials from popular email clients and is primarily distributed through malspam campaigns containing ZIP files.

Cross-chain bridges facilitate interoperability between blockchains but have faced significant vulnerabilities, leading to losses of approximately $3.2 billion since May 2021, prompting the development of a new monitoring tool called Cross-Chain Watcher to enhance security.

The hacktivist group NoName057, active since March 2022, has conducted politically motivated DDoS attacks targeting organizations with perceived anti-Russian sentiments, including recent collaborations with other pro-Russian groups against South Korean government websites.

Recent discussions on cybersecurity have highlighted pretexting, a deceptive tactic used in social engineering attacks to manipulate individuals into revealing sensitive information.

Purple team activities combine offensive and defensive cybersecurity tactics to enhance an organization's security framework through collaboration between red and blue teams.

A recent study investigates the use of Quantitative Information Flow (QIF) to enhance cybersecurity by minimizing information leakage through various modeling approaches and proposed solutions.

Proofpoint researchers have reported a notable increase in the use of the ClickFix social engineering technique, which deceives users into executing malicious PowerShell commands through misleading dialogue boxes.

QuickBooks has become a target for scammers using fraudulent websites and malicious software to deceive users, often leveraging Google ads to promote their schemes.