Yet another spinoff of the infamous DDoS botnet is exploiting a known vulnerability in active attacks, while its threat actors are promoting it on Telegram for other attackers to use as well, in a DDoS-as-a-service model.

The threat actor is using a sophisticated network of VPNs and proxies to centrally manage command-and-control servers from Pyongyang.

Managing third-party risk in the SaaS era demands a proactive, data-driven approach beyond checkbox compliance.

Quantum computing will bring new security risks. Both professionals and legislators need to use this time to prepare.