Information Security

Rogue Ransomware Negotiators Turned Extortionists in Cyber Attacks Introduction Imagine this: Your company is under siege by ransomware. Operations are frozen, the board is tense, and you’ve brought in a professional ransomware negotiator—someone who promises to bring calm to the chaos. But what if that expert, instead of resolving the crisis, deepens it—stealing data, demanding…

Read article

Interview with ISC2 CISO on Cybersecurity and Online Safety Introduction: A Context of Urgency and Responsibility Imagine waking up to find your company’s name trending—not for its innovation or growth, but because a major cyber incident has compromised sensitive data. That scenario isn’t just the stuff of headlines—it’s a daily concern for CISOs and CEOs…

Read article

SleepyDuck VSX Malware Uses Ethereum to Evade Shutdown Introduction Imagine waking up to find your organization’s critical systems compromised—again. But this time, the attacker used Visual Studio Code, a trusted development tool, to slip past defenses. That’s the disturbing reality revealed by a recent report on SleepyDuck, a stealthy malware using a malicious VSX extension…

Read article

Cybercriminals Target Logistics via Remote Monitoring Tools Introduction Imagine your delivery network grinding to a halt because someone halfway across the globe hijacked a remote monitoring tool meant to optimize your operations. That’s not just a fictional scenario—it’s an emerging reality in the logistics sector. According to recent reports, cybercriminals are increasingly using remote access…

Read article

**Laxman Prakash Named SVP and CISO at The Standard** *What This Leadership Move Signals for Cybersecurity Executives* **Introduction** What happens when a company elevates cybersecurity to a top leadership priority? For The Standard, it means promoting seasoned IT executive Laxman Prakash to Senior Vice President of IT Infrastructure and Chief Information Security Officer (CISO). This…

Read article

**Lazarus Web3 Hack, Intel AMD Breach, Dark Web Leak: What You Need to Know** Cyberthreats are escalating fast—and the Lazarus Group is leading the front lines. In recent weeks, the notorious North Korean APT group struck multiple targets, including Web3 companies, and exploited leaked Intel and AMD firmware to launch sophisticated attacks. According to the…

Read article

**Open VSX Registry Addresses Token Leak and Malicious Extensions** **Introduction** Imagine waking up to discover that authentication tokens for your organization’s code distribution tools have been leaked—potentially granting attackers the keys to inject malicious code into your developers’ workspace. That’s the scenario faced by the Open VSX Registry, a popular open-source marketplace for Visual Studio…

Read article

**Cyber Attack Readiness Questions Every Business Must Ask** **Introduction** Imagine this: One morning, your team logs in to find all systems locked, critical files encrypted, and a ransom note demanding payment in cryptocurrency. It’s not a far-fetched TV drama—cyber attacks like ransomware are now a daily risk for businesses of every size and sector. In…

Read article

**BankBot-YNRK and DeliveryRAT Android Trojans Steal Data** **Introduction** Imagine this: an employee checks an incoming SMS about a package delivery on their phone—only it’s not from a delivery company. Within seconds, malicious software silently steals banking credentials and remote access is established—all without the user suspecting a thing. That’s exactly the threat posed by the…

Read article

**Chargeback Gurus Earns ISO 27001 Certification for Security** **Introduction** What does it really mean for a service provider to protect your company’s sensitive data—and how do you know they’re doing it well? Data breaches cost businesses an average of $4.45 million per incident, according to IBM’s 2023 Cost of a Data Breach Report. That’s not…

Read article