Malware

SEGs and sandbox rules are designed to spot them, and employees are trained to distrust them, so attackers are taking an alternate approach.

Cloud malware can be used to conduct reconnaissance, launch employee-to-employee attacks, and steal files and emails from cloud platforms.

Today’s columnist, Carolyn Crandall of Attivo Networks, says preventing ransomware attackers from taking over Active Directory stops them from targeting the most valuable data.

GitHub on Thursday solicited the comments of the security research community on its new, apparently stricter policies for posting malware and proof-of-concept exploits.

A ransomware group caught targeting a recently patched SonicWall vulnerability leveraged that vulnerability before the patch became available, Mandiant reported Thursday.

The move was a surprising one after infiltrating such a high-value target, leaving some security experts skeptical that the group won't reemerge anew.