supply chain compromise

Knowing how to define, screen and monitor your third parties is essential to minimizing risk

October 18, 2018

A new NAVEX Global survey found that more than a third of organizations still use paper-based records or disparate office productivity software to administer their third-party …

Securing the supply chain: Organizations need best practices in proactive security

July 24, 2018

CrowdStrike announced the results of its global supply chain survey, Securing the Supply Chain, produced by research firm Vanson Bourne. The study surveyed 1,300 senior IT …

Orangeworm hackers target healthcare corporations

April 24, 2018

A hacking group dubbed Orangeworm has been targeting, either directly or indirectly, international corporations operating within the healthcare sector, Symantec researchers …

MacOS Proton backdoor delivered via Trojanized media player app

October 20, 2017

A Trojanized version of Elmedia Player software for Mac was available for download for who knows how long from the developer’s official site, ESET researchers have …

Hackers behind CCleaner compromise were after Intel, Microsoft, Cisco

September 21, 2017

There is a new twist in the CCleaner hack saga: the attackers apparently didn’t set out to compromise as many machines as possible, but were after some very specific …

Hackers backdoored CCleaner, likely affecting millions of users

September 18, 2017

Legitimately signed but backdoored versions of the popular CCleaner utility were available for download from the developer’s Web site and servers for nearly a month, …

Android devices delivered to employees with pre-installed malware

March 13, 2017

A test of Android devices used in two unnamed companies revealed that 38 of them were infected with malware before being delivered to the employees. These were smartphones by …