[SecurityWeek] Singapore’s GovTech Announces New Vulnerability Rewards Programme

There are a lot of “tells” that the ransomware group doesn’t understand how negotiators work, despite threatening to dox data if victims call for help. Source: Read More (Threatpost)

GitHub has published documentation on seven vulnerabilities in the Node.js packages and warned that exploitation could expose users to code execution attacks. read more Source: Read More (SecurityWeek RSS Feed)

Cybersecurity researchers have disclosed details about a new malware family that relies on the Common Log File System (CLFS) to hide a second-stage payload in registry transaction files in an attempt to evade detection mechanisms. FireEye’s Mandiant Advanced Practices team, which made the discovery, dubbed the malware PRIVATELOG, and its installer, STASHLOG. Specifics about the […]