Craig Anderson

The U.S. government has revealed charges against Guan Tianfeng, a Chinese national linked to extensive cyberattacks on over 81,000 Sophos firewall devices worldwide in 2020. Guan, associated with Sichuan Silence Information Technology Company, is accused of computer and wire fraud conspiracy, and developing a zero-day vulnerability (CVE-2020-12271), which allowed unauthorized access to, and data exfiltration from, Sophos firewalls. The SQL

The news broke recently that Krispy Kreme had disclosed a significant cybersecurity incident to U.S. federal regulators, shaking the company’s operations and impacting its online sales. The unauthorized network activity was detected on November 29, 2024, prompting immediate action from Krispy Kreme. While the incident has disrupted online ordering in certain regions of the United States, in-store purchases and distribution

As the holiday season approached, law enforcement agencies from across the globe joined forces to launch an extensive effort aimed at dismantling 27 Distributed Denial-of-Service (DDoS) platforms that cybercriminals typically exploit during this period to wreak havoc and inflict financial harm on businesses and individuals. This collaborative operation, aptly named ‘PowerOFF,’ was spearheaded by Europol and saw contributions from agencies

A significant decline in reported cyber-attacks among the United Kingdom’s largest financial institutions reflects the positive impact of recent regulatory enhancements designed to bolster cybersecurity defenses. Based on data obtained through a Freedom of Information request by Hack the Box, incidence notifications to the Financial Conduct Authority (FCA) have dropped by 53% in the period from January 1 to October

As technology advances at an unprecedented rate, the integrity of live video streams and recordings from Scottish Parliamentary proceedings is increasingly under threat due to deepfake technologies. The Scottish Centre for Crime and Justice Research (SCCJR) and the University of Edinburgh recently conducted a study highlighting the various vulnerabilities associated with Scottish Parliament TV, the platform that provides livestreaming and

A significant vulnerability in Cleo-managed file transfer software has prompted urgent warnings from cybersecurity agencies. Users must ensure their systems are not exposed to the internet following reports of massive exploitation by threat actors. On December 3, 2024, Huntress, a cybersecurity company, identified that threat actors have been leveraging this vulnerability, which is affecting fully patched systems of Cleo’s LexiCom,

Throughout the past year, utility companies have faced a substantial rise in ransomware attacks that threaten their critical infrastructure. It is  revealed a concerning 42% increase in such incidents, highlighting a growing vulnerability within these essential services. Cybercriminals are increasingly targeting utility firms that manage both Information Technology (IT) and Operational Technology (OT) systems, creating a significant challenge due to