Russian state threat group shifts focus to US, UK targets
A subgroup of Seashell Blizzard exploited public vulnerabilities in internet-facing systems, Microsoft researchers said.
Advertisement
Cybersecurity
Microsoft fixes 63 vulnerabilities, including 2 zero-days
The company’s monthly Patch Tuesday update comes with more than two-thirds of the patches closing high-severity flaws.
Thai authorities detain four Europeans in ransomware crackdown
The multi-national law enforcement operation targeted the 8base ransomware gang.
CISA election, disinformation officials placed on administrative leave, sources say
The moves happened Thursday and Friday last week, per a source.
Google’s John Hultquist on how APTs are using generative AI
John Hultquist, Chief Analyst for Google Threat Intelligence Group
Advertisement
Hugging Face platform continues to be plagued by vulnerable ‘pickles’
A widely used python module for machine-learning developers can be loaded with malware and bypass detection measures.
Ransomware payments dropped 35% in 2024
Chainalysis says a combination of law enforcement actions and better defenses led to less money going out to ransomware actors.
Infosec pros: We need CVSS, warts and all
The Common Vulnerability Scoring System has a lot of critics, but experts say it’s still the best unified way to share the severity of cybersecurity flaws.
Android security update includes patch for actively exploited vulnerability
The monthly update closes 47 security vulnerabilities in total.
Here’s all the ways an abandoned cloud instance can cause security issues
Research released Tuesday by watchTowr shows how easy an old storage bucket can be repurposed by malicious attackers.
Advertisement