ConnectWise, a self-hosted, remote desktop software application that is widely used by Managed Service Providers (MSPs), is warning about an unusually sophisticated phishing attack that can let attackers take remote control over user systems when recipients…

Though there have been fewer than expected publicly reported attacks involving the vulnerability, nearly three-quarters of organizations remain exposed to it.

A vulnerability discovered in GitHub Actions could allow an attacker to poison a developer's pipeline, highlighting the risk that insecure software pipelines pose.

The threat actor behind an August intrusion used data from that incident to access customer data stored with a third-party cloud service provider, and affiliate GoTo reports breach of development environment.

“Uh-oh, this viruses-and-worms scene could turn out quite troublesome.” If only we’d been wrong…

Latest episode – listen now (or read if you prefer)…

Seems that the developer account that the crooks breached last time gave indirect access to customer data this time round.

An attacker could masquerade as an authenticated user without presenting credentials

Amazon Security Lake will allow organizations to create a purpose-built, standards-based data lake to aggregate and store security data.