Chinese Hackers Use Velociraptor IR Tool in Ransomware Attacks Summary Researchers from Cisco Talos observed China-based threat group Storm-2603 (also tracked as Gold Salem) abusing the open-source DFIR tool Velociraptor…
Deepfake Awareness High at Orgs, But Cyber Defences Badly Lag Summary Organisations are increasingly encountering AI-augmented deepfake attacks — from AI-crafted phishing emails to audio and video impersonations — yet…
Microsoft Drops Terrifyingly Large October Patch Update Summary Microsoft’s October Patch Tuesday is enormous: 175 CVEs were patched, including multiple zero-days that are already being exploited and several flaws Microsoft…
China’s Flax Typhoon Turns Geo-Mapping Server into a Backdoor Summary Researchers at Reliaquest uncovered a sustained compromise by a Chinese APT group tracked as Flax Typhoon that turned a public-facing…
Financial, Other Industries Urged to Prepare for Quantum Computers Summary Experts and industry bodies, led by FS-ISAC, warn that financial institutions, government agencies and other organisations holding long-lived sensitive data…
Critical infrastructure CISOs Can’t Ignore ‘Back-Office Clutter’ Data Summary Critical infrastructure organisations have long hardened OT and ICS — the obvious crown jewels. But Joe Pearce argues the biggest, quietly…
1Password Addresses Critical AI Browser Agent Security Gap Summary 1Password has introduced Secure Agentic Autofill, an integration with Browserbase designed to let AI-powered browser agents authenticate without exposing user credentials.…
The Fight Against Ransomware Heats Up on the Factory Floor Summary Ransomware actors continue to prioritise manufacturing, exploiting the sector’s large attack surface, legacy operational technology (OT) and tight tolerance…
Feds Shutter ShinyHunters Salesforce Extortion Site Summary The FBI, working with French law enforcement, seized the BreachForums domain that had been repurposed as an extortion portal by the group calling…
LevelBlue Announces Plans to Acquire XDR Provider Cybereason Summary LevelBlue, the managed security service provider spun out of AT&T, has announced plans to acquire XDR vendor Cybereason. The purchase is…
