Oregon Man Accused of Operating One of Most Powerful Attack ‘Botnets’ Ever Seen Summary A 22-year-old from Eugene, Oregon, Ethan Foltz, has been charged with operating Rapper Bot, a botnet…
DPRK, China Suspected in South Korean Embassy Attacks Summary Researchers at Trellix have linked a targeted spear-phishing campaign, ongoing since March, to state-backed actors resembling North Korea’s Kimsuky group —…
Oregon Man Accused of Operating One of Most Powerful Attack ‘Botnets’ Ever Seen Summary A 22-year-old man from Eugene, Oregon, identified as Ethan Foltz, has been charged with running Rapper…
Defending Against Cloud Threats Across Multicloud Environments Key Points • Threat group Storm-0501 exploited compromised credentials and overprivileged accounts to move laterally across hybrid and multicloud environments, targeting government, manufacturing,…
New Quantum-Safe Alliance Aims to Accelerate PQC Implementation Summary The new Quantum-Safe 360 Alliance — formed by IBM Consulting, Keyfactor, Quantinuum and Thales — aims to speed up enterprise adoption…
Workday Breach Likely Linked to ShinyHunters Salesforce Attacks Summary Human‑resources platform Workday disclosed that attackers used a socially engineered campaign to compromise a third‑party CRM system. Workday says the incident…
How Evolving RATs Are Redefining Enterprise Security Threats Summary This commentary by Aditya K. Sood explains how modern remote access trojans (RATs) have shifted from noisy, signature-detectable tools to stealthy,…
Internet-wide Vulnerability Enables Giant DDoS Attacks Summary Researchers at Tel Aviv University have disclosed “MadeYouReset”, a new HTTP/2 technique that revives Rapid Reset–style distributed denial-of-service (DDoS) attacks by abusing server-initiated…
DripDropper’ Hackers Patch Their Own Exploit Summary An attacker campaign is exploiting a nearly two‑year‑old remote code execution flaw in Apache ActiveMQ (CVE-2023-46604) to compromise Linux servers, deploy a novel…
Noodlophile Stealer Hides Behind Bogus Copyright Complaints Summary Researchers at Morphisec have detailed an evolution in the Noodlophile infostealer campaign that now uses bogus copyright-complaint emails as a spear-phishing lure…
