The supply chain attack on the 3CX voice-calling app has been traced back to a company employee installing a legitimate, but malware -laden program, onto their personal computer. The findings come ...

All customers that use 3CX’s phone system ‘will and should engage in a new risk assessment of this vendor based on what’s happened,’ Sophos’ Christopher Budd tells CRN. Following the supply chain ...

The disclosure appears to confirm an earlier attribution by CrowdStrike to a group working on behalf of North Korea’s government. Mandiant has attributed the 3CX supply chain compromise with “high ...