Up first this week is a warning for the few of us still brave enough to host our own email servers. If you’re running Zimbra, it’s time to update, because CVE-2024-45519 is now being exploited in the ...

Security researchers have uncovered a sophisticated supply chain attack campaign stemming from the compromise of an unnamed ISP. Volexity said the China-aligned StormBamboo (aka Evasive Panda, ...

Researchers have found that a China-linked advanced persistent threat (APT) group compromised an Internet service provider (ISP) to exploit software vendor update mechanisms using DNS poisoning. The ...

In brief: Last year, Volexity detected and responded to an incident involving systems infected with malware linked to the Chinese hacking group StormBamboo. Initially, suspicions pointed to a ...

There has been a long history of attacks on the Domain Name System ranging from brute-force denial-of-service attacks to targeted attacks requiring specialized software. In July 2008 a new DNS ...

To download this white paper you’ll need an Infosecurity Magazine account. Log in or sign up below. Get up-to-the-minute news and opinions, plus access to a wide assortment of Information Security ...

APT28 exploits SOHO routers for global DNS hijacking and adversary-in-the-middle attacks, enabling credential theft and ...

NS1, a domain name system (DNS) and traffic management provider, is taking on “DNS cache poisoning” attacks with new DNS Security Extensions (DNSSEC) capabilities built into its platform. DNS ...

Online scam artists are manipulating the Internet’s directory service and taking advantage of a hole in some Symantec products to trick Internet users into installing adware and other annoying ...

One of China’s largest ISPs (Internet service providers) has fallen victim to a dangerous vulnerability in the Internet’s addressing system, according to security vendor Websense. The flaw, which has ...