CISA Guidance on Using Cyber Decoys to Enhance Detection and Response
CISA has published guidance to help security teams deploy cyber decoys that improve detection of adversaries using legitimate credentials and living off the land tactics.
Category
Tooling
3 published analyses.
Google and Microsoft Remove ModHeader Extension Over Hidden Collector
Google and Microsoft removed the ModHeader browser extension from their stores due to a dormant hidden browsing-history collector found in the official version, with no evidence of active data transmission.
npm 12 Disables Install Scripts by Default to Enhance Security
GitHub released npm version 12 with install scripts disabled by default and deprecated granular access tokens used to bypass 2FA. These changes reduce the risk of supply chain attacks for developers and security teams.