Blog | ReversingLabs | The Week in Security (4)

November 10, 2022

The Week in Security: Former Uber CSO convicted over hack cover-up, supply chain attack targets media

This week: Former Uber CSO is convicted for his attempted cover-up of a 2016 hack of the company. Also: A software supply chain attack has pushed out malware to at least 250 media sites.

November 3, 2022

The Week in Security: OpenSSL danger downgraded but still real, GitHub exposed

This week: an expected OpenSSL vulnerability may not be as disastrous as was predicted, but is still very real. Also: Unauthorized hackers accessed 130 GitHub repositories as a result of a Dropbox breach.

October 27, 2022

The Week in Security: Pro-China cyber operation Dragonbridge targets U.S. elections

This week: Pro-China operation Dragonbridge targets the U.S. political system. Also: Two flaws in Cisco AnyConnect are being actively exploited.

October 20, 2022

The Week in Security: Attacks on critical infrastructure and the software supply chain take off

This week: Critical infrastructure sectors such as education and aviation are being targeted by cybercriminals. Also: software supply chain attacks have increased by 742% in the past 3 years.

October 13, 2022

The Week in Security: Google takes next step on supply chain risk, UK issues software security guidance

This week: Google Cloud announces new solution to tackle software supply chain risk, multiple vulnerabilities in Adobe products could lead to arbitrary code execution, and more.

October 6, 2022

The Week in Security: CISA alerts on open source tool, SBOMs are just the 'first step'

This week: APT groups targeted a defense industrial base sector organization, why SBOMs are a great “first step,” and more.

September 29, 2022

The Week in Security: Bill tasks CISA Director with responsibility for open source software security

This week: A new bill tasks the CISA Director with tackling open source software security, a leaked LockBit builder is being used by a new ransomware gang, and more.

September 22, 2022

The Week in Security: Is Lapsus$ back in action?

This week: The famous hacking group Lapsus$ appears to be back in action. Also: Russian cyber spies are targeting Ukraine by posing as internet providers.

September 15, 2022

The Week in Cybersecurity: U.S. mandates federal agencies use secure third-party software tools

This week: A new OMB memo mandates federal use of secure third-party software tools. Plus: Twitter whistleblower Zatko details lacking security practices.

September 8, 2022

The Week in Cybersecurity: Vice Society ransomware group targets back-to-school

This week: Vice Society ransomware group targets America’s education sector, the U.S. government’s new position on software supply chain security, and more.

September 1, 2022

The Week in Cybersecurity: Cyber espionage operation fueled for months by targeted phishing attacks

This week: a China-linked cyber espionage campaign targets critical entities in Australia and the South China Sea, password manager LastPass gets hacked (again), and more.

August 25, 2022

The Week in Cybersecurity: French hospital hit with ransomware attack

This week: cybercriminals are continuing to target medical facilities, Twitter’s alleged lack of cybersecurity measures, and more.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Partners

Alliances

Resources

Company

Events

Press

The Week in Security (4)

The Week in Security: Former Uber CSO convicted over hack cover-up, supply chain attack targets media

The Week in Security: OpenSSL danger downgraded but still real, GitHub exposed

The Week in Security: Pro-China cyber operation Dragonbridge targets U.S. elections

The Week in Security: Attacks on critical infrastructure and the software supply chain take off

The Week in Security: Google takes next step on supply chain risk, UK issues software security guidance

The Week in Security: CISA alerts on open source tool, SBOMs are just the 'first step'

The Week in Security: Bill tasks CISA Director with responsibility for open source software security

The Week in Security: Is Lapsus$ back in action?

The Week in Cybersecurity: U.S. mandates federal agencies use secure third-party software tools

The Week in Cybersecurity: Vice Society ransomware group targets back-to-school

The Week in Cybersecurity: Cyber espionage operation fueled for months by targeted phishing attacks

The Week in Cybersecurity: French hospital hit with ransomware attack

Topics

Special Reports

The State of Software Supply Chain Security 2024

Upcoming Webinars

ConversingLabs

The Week in Security (4)

Topics

Follow us

Subscribe

Special Reports