When you build a mobile app, two kinds of risks hide inside it. One lives in the code, and the risks are hard-coded secrets, weak encryption, and forgotten debug settings. The other only appears when the app is running. The risks involved in this scenario are broken logins, unsafe network calls, or...
Cybersecurity researchers have shed light on a new campaign that has likely targeted the Russian automobile and e-commerce sectors with a previously undocumented .NET malware dubbed CAPI Backdoor.
According to Seqrite Labs, the attack chain involves distributing phishing emails containing a ZIP arch...
Plus: A secret FBI anti-ransomware task force gets exposed, the mystery of the CIA’s Kryptos sculpture is finally solved, North Koreans busted hiding malware in the Ethereum blockchain, and more.
Europol’s SIMCARTEL operation shut down a SIM-box network behind 3,200 frauds and €4.5M losses, using 40,000 SIMs for scams and extortion. Europol’s “SIMCARTEL” operation dismantled an illegal SIM-box network tied to over 3,200 fraud cases and €4.5M in losses. The service used 1,200 SIM-boxes with 4...
The threat actors behind a malware family known as Winos 4.0 (aka ValleyRAT) have expanded their targeting footprint from China and Taiwan to target Japan and Malaysia with another remote access trojan (RAT) tracked as HoldingHands RAT (aka Gh0stBins).
"The campaign relied on phishing emails with PD...
La Fédération française de tir a été victime d'une intrusion dans son système d'information, potentiellement concernant les 274 000 licenciés. Les données personnelles compromises incluent le numéro de licence, l'état civil, l'adresse postale et les numéros de téléphone. La fédération a lancé des in...
How a simple “Send a copy to yourself” feature led to 149,700 spam emails and what you can do to prevent it
The Emergency Call
It started like many server emergencies do – with a panicked message about massive server performance issues. A client’s website was grinding to a halt, CPU usage was throug...
A Chinese-sponsored cyber attack was so damaging that it was briefly proposed that an entire data hub be destroyed, according to British news magazine The Spectator. It observed that the attack accessing confidential UK government data was just one manifestation of a continuin...
As one of the most common information security frameworks in the world, ISO 27001 is used by tens of thousands of organizations worldwide. That means it has to fit a lot of different groups with a lot of different needs. It also means that there’s a lot of information pertaining to ISO 27001 within...
Nation-state threat actors and cybercriminals are increasingly abusing cryptocurrency blockchains to host malicious payloads with a technique known as “EtherHiding,” which makes their attacks harder to detect and take down.
“Google Threat Intelligence Group (GTIG) has obser...
Good video.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Blog moderation policy.
How Does Managing Non-Human Identities Contribute to Secure Cloud Migrations? A new breed of identities has emerged: Non-Human Identities (NHIs). With organizations increasingly migrate to the cloud, ensuring the security of these machine identities becomes paramount. But what exactly are NHIs, and...
Are You Fully Optimizing Non-Human Identities in Cybersecurity? Ensuring the security and efficiency of Non-Human Identities (NHIs) is crucial. These machine identities play a pivotal role in any organization’s cybersecurity strategy, yet managing them effectively often presents significant challeng...
Authorities arrested seven people allegedly involved in the operation and seized 1,200 SIM boxes containing 40,000 active SIM cards.
The post Europol dismantles cybercrime network linked to $5.8M in financial losses appeared first on CyberScoop.
How Secure Are Your Machine Identities? Managing Non-Human Identities (NHIs) is crucial to ensuring robust cybersecurity. These machine identities, akin to digital tourists carrying encrypted passports, demand meticulous oversight, especially for organizations operating predominantly in the cloud. W...
ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...]
Morpheus automates investigations, correlates across 800+ integrations, and turns your stack into an autonomous SOC, without ripping and replacing anything.
The post 5 SOC Problems Morpheus Solves (That Legacy Tools Can’t) appeared first on D3 Security.
The post 5 SOC Problems Morpheus Solves (That...
Envoy Air, a regional airline carrier owned by American Airlines, confirms that data was compromised from its Oracle E-Business Suite application after the Clop extortion gang listed American Airlines on its data leak site. [...]
Panelists: Ashok Prjapathi (NASA), Martin Strohmeier (Armasuisse), Stephen Schwab (USC ISI), Dan Wallach (DARPA):
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the o...
Recently, AWS released Amazon Bedrock API keys to make calls to the Amazon Bedrock API. In this post, we provide practical security guidance on effectively implementing, monitoring, and managing this new option for accessing Amazon Bedrock to help you build a comprehensive strategy for securing thes...