#Web Security

Access to heart monitors disabled by the attack allegedly kept staff from spotting blood & oxygen deprivation that led to the baby's death.

The group uses millions of password combos at the rate of nearly 2,700 login attempts per minute with new techniques that push the ATO envelope.

Certificate misconfigurations of the EAP protocol in Eduroam (and likely other networks globally) threaten Android and Windows users.

The NSA and CISA issued recommendations on choosing and hardening VPNs to prevent nation-state APTs from weaponizing flaws & CVEs to break into protected networks.

Dave Stewart, Approov CEO, lays out six best practices for orgs to avoid costly account takeovers.

The BloodyStealer trojan helps cyberattackers go after in-game goods and credits.

A 'nearly impossible to analyze' version of the malware sports a bootkit and 'steal-everything' capabilities.

UPDATE: Indicators of compromise are now available. The unredacted RCE exploit released on Monday allows unauthenticated, remote attackers to upload files to the vCenter Server analytics service.

Ekaterina Kilyusheva, head of the Information Security Analytics Research Group at Positive Technologies, offers a blueprint for locking up the fortress.

Income level, education and being part of a disadvantaged population all contribute to cybercrime outcomes, a survey suggests.