Malware

GitHub on Thursday solicited the comments of the security research community on its new, apparently stricter policies for posting malware and proof-of-concept exploits.

A ransomware group caught targeting a recently patched SonicWall vulnerability leveraged that vulnerability before the patch became available, Mandiant reported Thursday.

The move was a surprising one after infiltrating such a high-value target, leaving some security experts skeptical that the group won't reemerge anew.

More than 60 stakeholders contributed to a ransomware framework released Thursday morning, which advocates for nearly 50 interlocking government and private sector strategies to tackle the criminal scourge.

Email security solutions featuring machine learning or computer vision should be able to identify the fake logo and sniff out the attack.

Companies are often pilloried in the wake of data breaches for lacking transparency or leaving their users in the dark about potential impact. This incident demonstrates the flip side of that coin, how information or communications from a company following a breach can be weaponized by bad actors.

Demers said the department would evaluate the Exchange operation to try to generalize future standards, and that such infiltration of private systems would not be a "tool of first resort."