Secure Your CI/CD Pipeline with Secret Management Best Practices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CI/CD pipelines require a number of permissions to function, and they handle infrastructure and application secrets in most organizations. As a result, whoever manages to gain unauthorized access to your …

North Korean Hacker Group Targeted Medical & Energy Sector

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The North Korean Lazarus hacking group has been identified as the culprit behind a recent cyber espionage operation known as “No Pineapple!”. This designation highlights the group’s malicious activities and …

Hackers Compromised Over 1,200 Redis Database Servers Using State-of-the-Art Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new type of malware, designed to target vulnerable Redis servers on the internet, has been spreading rapidly since September 2021.  This is a quick-spreading malware, designed to operate stealthily, …

Beware That Hackers Using Legitimate Remote Monitoring For Malicious Purposes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A joint Cybersecurity Advisory (CSA) from the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) has been released to alert network defenders …

New GOOTLOADER Malware Uses Fileless Technique to Deploy Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The group behind the Windows Gootloader malware, known as UNC2565, has effectively modified the code to make it more intrusive and difficult to detect. Researchers at Mandiant noted UNC2565 started …

Sandworm APT Group Adds New Wiper to Its Hacking Toolkit

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

During the monitored timespan, APT groups aligned with Russia have been observed to be heavily involved in cyber operations aimed at Ukraine.  These operations have included deploying malicious software, such …