The credential-phishing attack leverages social engineering and brand impersonation techniques to lead users to a spoofed MetaMask verification page.

from Dark Reading https://ift.tt/M84ALZI
via IFTTT

False positives and staff shortages are inspiring a massive managed detection and response (MDR) services migration, research finds.

from Dark Reading https://ift.tt/dNzOFQj
via IFTTT

A voicemail-themed phishing campaign is hitting specific industry verticals across the country, bent on scavenging credentials that can be used for a range of nefarious purposes.

from Dark Reading https://ift.tt/2lnYRiF
via IFTTT

Addition of WhiteHat Security provides Synopsys with SaaS capabilities and dynamic application security testing (DAST) technology.

from Dark Reading https://ift.tt/X17CTKF
via IFTTT

In addition, Aqua Security unveiled a new open source tool, Chain-Bench, for auditing the software supply chain to ensure compliance with the new CIS guidelines.

from Dark Reading https://ift.tt/EqXj3Qf
via IFTTT

Open service generates free report detailing potential gaps in compliance, configuration, and security for a user’s multiple domain names.

from Dark Reading https://ift.tt/T6ytwnj
via IFTTT

Researchers have spotted the threat group, also known as Fancy Bear and Sofacy, using the Windows MSDT vulnerability to distribute information stealers to users in Ukraine.

from Dark Reading https://ift.tt/w6M12tu
via IFTTT

Don’t sleep on Magecart attacks, which security teams could miss by relying solely on automated crawlers and sandboxes, experts warn.

from Dark Reading https://ift.tt/lgxiW08
via IFTTT

Treat identity management as a first-priority problem, not something to figure out later while you get your business up and running in the cloud.

from Dark Reading https://ift.tt/AoYyur5
via IFTTT

partnership lets users access one-click ScreenMeet sessions from the Tanium platform.

from Dark Reading https://ift.tt/uOXAp8P
via IFTTT