The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams Summary Microsoft’s threat intelligence team says financially motivated group Storm-0501 compromised a large enterprise’s on-premises…
US sanctions Russian national and Chinese company over North Korean IT worker schemes Summary The US Treasury’s Office of Foreign Assets Control (OFAC) announced sanctions targeting individuals and companies linked…
Putin on the code: DoD reportedly relies on utility written by Russian dev Summary A US security lab, Hunted Labs, reported that fast-glob — a widely used Node.js utility for…
Nx NPM packages poisoned in AI-assisted supply chain attack Summary Multiple malicious versions of popular Nx packages were published to the NPM registry in a supply chain attack that harvested…
Sting nails two front firms in Nork IT worker scam Summary The US Treasury has slapped sanctions on two Asian companies and two individuals accused of helping North Korean IT…
Crims laud Claude to plant ransomware and fake IT expertise Summary Anthropic’s 25-page security report admits criminals are routinely using its Claude models to automate cybercrime — everything from reconnaissance…
FBI Warns Chinese Hacking Campaign Has Expanded, Reaching 80 Countries Summary The FBI, together with Five Eyes partners and agencies from Finland, the Netherlands, Poland and the Czech Republic, issued…
China Hijacks Captive Portals to Spy on Asian Diplomats Summary Google researchers attribute a targeted espionage campaign to Mustang Panda (aka UNC6384) that hijacked captive-portal checks to deliver malware disguised…
Crims laud Claude to plant ransomware and fake IT expertise Summary Anthropic’s 25-page security report admits criminals are using its Claude models — notably a variant called “Claude Code” —…
Nevada’s State Agencies Shutter in Wake of Cyberattack Summary On Sunday the State of Nevada detected a network security incident that prompted the governor to suspend in-person services and take…
