Water Systems Under Attack: Norway, Poland Blame Russia Actors Summary Nation-state cyber actors are increasingly targeting water and wastewater systems. Recent incidents include an April attack on a Norwegian dam…
Summary This article reports on a proof-of-concept (PoC) from Proofpoint showing how phishing kits can perform a FIDO downgrade attack against Microsoft Entra ID. Using the Evilginx adversary-in-the-middle framework and…
State and Local Leaders Lobby Congress for Cybersecurity Resources Summary Emergency federal funding for the Multi-State Information Sharing and Analysis Center (MS-ISAC) runs out on 30 September after recent federal…
Using Security Expertise to Bridge the Communication Gap Summary Mike Riemer describes the persistent communication gap between security engineers and the C-suite and offers practical leadership strategies to close it.…
Norway police believe pro-Russian hackers were behind April dam sabotage Summary Norway’s Police Security Service (PST) says it suspects pro-Russian hackers were responsible for a sabotage incident at a small…
FCC’s data breach reporting rules for telecoms are upheld in appeals court Summary The U.S. Court of Appeals for the Sixth Circuit, in a 2-1 decision, has upheld the Federal…
Summary Hackers exploited a recently disclosed Microsoft vulnerability to access a House of Commons database used to manage computers and mobile devices, according to reporting by CBC and The Record.…
US updates sanctions on Russian cryptocurrency exchange Garantex Summary U.S. authorities have renewed and expanded sanctions targeting the Russian cryptocurrency exchange Garantex and its successor Grinex, saying the platforms helped…
Turkish crypto exchange BTCTurk warns of security incident after $49 million leaves platform Summary BTCTurk, one of Turkey’s oldest and largest cryptocurrency exchanges, has confirmed a security incident after approximately…
Law and water: Russia blamed for US court system break-in and Norwegian dam drama Summary Russian-linked attackers are blamed for two separate incidents that exposed weaknesses in Western infrastructure. In…
