Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group Summary Amazon’s threat intelligence team disrupted a watering hole campaign in August that it attributes to APT29 (aka…
Nick Andersen appointed to CISA leadership role Summary The Cybersecurity and Infrastructure Security Agency (CISA) announced that Nicholas (Nick) Andersen has started as executive assistant director for cybersecurity. Andersen previously…
Traffic to government domains often crosses national borders, or flows through risky bottlenecks Summary New research by PhD student Rashna Kumar, conducted under an Internet Society Pulse Research Fellowship, maps…
In the rush to adopt hot new tech, security is often forgotten. AI is no exception Summary Cisco Talos used Shodan to scan the internet and found more than 1,100…
Europe Putin the blame on Russia after GPS jamming disrupts president’s plane Summary A chartered plane carrying European Commission president Ursula von der Leyen lost access to GPS signals while…
Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk Summary Security firm Armis discovered ten vulnerabilities — collectively called Frostbyte10 — in Copeland E2 and E3 controllers…
Stolen OAuth tokens expose Palo Alto customer data Summary Palo Alto Networks (PAN) has informed customers that attackers used OAuth credentials stolen from Salesloft’s Drift breach to access its Salesforce…
Zscaler latest victim of Salesloft Drift attacks, customer data exposed Key Points • Zscaler says limited access to some Salesforce data occurred after attackers stole OAuth tokens from Salesloft’s Drift…
Microsoft rewarded for security failures with another US government contract Summary The General Services Administration (GSA) has signed a OneGov agreement with Microsoft that could save the federal government up…
Summary Cloudflare has confirmed that its Salesforce instance was accessed after the widespread Salesloft Drift compromise that has exposed customer data across hundreds of organisations. In a detailed post‑mortem, Cloudflare…
