Frank Crast

U.S. Department of Justice announces charges against two Chinese hackers

In an announcement made last Thursday, Deputy Attorney General Rod J. Rosenstein said the charges include a “conspiracy to commit computer intrusions against dozens of companies in the United States and around the world.” The two defendants allegedly committed cyber crimes in association with a Chinese intelligence service, Ministry of State Security.

U.S. Department of Justice announces charges against two Chinese hackers Read More »

Miori IoT botnet spreads through PHP framework RCE vulnerability

Attackers are using a variant of the infamous Mirai IoT botnet dubbed “Miori” to exploit a Remote Code Execution (RCE) vulnerability in ThinkPHP, a free open-source PHP framework.

Miori IoT botnet spreads through PHP framework RCE vulnerability Read More »

NIST SP 800-37 Rev. 2: Risk Management Framework for Information Systems and Organizations

The National Institute of Standards and Technology (NIST) has released a new risk management framework guideline. NIST has named the document Security Publication (SP) 800-37 Rev. 2: “Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy.”

NIST SP 800-37 Rev. 2: Risk Management Framework for Information Systems and Organizations Read More »