The Week in Cybersecurity: SolarWinds attackers tap Google Drive, malware spreads via Play Store apps
Cozy Bear APT group is using Dropbox and Google drive to cover up attacks, malware is spreading via Google Play Store apps, and more.
Paul Roberts
Director of Content and Editorial at RL. Paul is a reporter, editor and industry analyst with 20 years’ experience covering the cybersecurity space. He is the founder and editor in chief at The Security Ledger, a cybersecurity news website. His writing about cyber security has appeared in publications including Forbes, The Christian Science Monitor, MIT Technology Review, The Economist Intelligence Unit, CIO Magazine, ZDNet and Fortune Small Business. He has appeared on NPR’s Marketplace Tech Report, KPCC AirTalk, Fox News Tech Take, Al Jazeera and The Oprah Show.
Posts from Paul Roberts
The Week in Cybersecurity: SolarWinds attackers tap Google Drive, malware spreads via Play Store apps
CISA: Log4j threat will linger for years—so be prepared
A survey of the post-Log4j landscape found few successful hacks linked to it. The bad news? Log4Shell will linger for years — so you need to prepare.
The Week in Cybersecurity: NPM removes malicious modules, Microsoft backtracks on macros
Fallout from another supply chain attack involving malicious npm modules. Also: Microsoft backtracks on a pledge to disable Office macros.
The Week in Cybersecurity: NATO creates cyber rapid response
International relations intersects with cybersecurity, learn how to leverage YARA rules, plus new developments on AstraLocker 2.0.
ConversingLabs highlights: RSA Conference spotlights software supply chain, critical infrastructure risk
The RSA Conference brings some of the brightest minds in information security together in one place.
MITRE’s System of Trust: A standard for software supply chain security
MITRE’s System of Trust framework is aiming to standardize how software supply chain security is assessed. MITRE's Robert Martin explains.
What’s hot at #RSAC? Our picks for the big security show
It's two years in, and COVID is still threatening to steal RSA Conference's mojo. But for those willing to brave Moscone in San Francisco (and those attending virtually), you won’t be disappointed. Here are our picks for must-see talks.
Software supply chain risk demands our attention
Software supply chain attacks are a top concern. But tools for monitoring and stopping them lags. Meet ReversingLabs' new platform: secure.software.
Update: NPM dependency confusion hacks target German firms
Research by ReversingLabs suggests that dependency confusion attacks on npm repositories have been used to compromise German firms - exposing an apparent red team exercise.