Microsoft Patch Tuesday addresses 130 vulnerabilities, none actively exploited
Researchers are especially concerned about a high-severity defect in SQL Server and a critical vulnerability in SPNEGO, a foundational protocol.
Advertisement
Threats
Italian authorities arrest Chinese man over Microsoft Exchange Server hack, targeting of COVID-19 researchers
The arrest came at the request of the United States, which hailed the development as a sign that patience in pursuing cybercriminals in court is rewarded.
Treasury slaps sanctions on people, companies tied to North Korean IT worker schemes
A North Korean man was the focus of Tuesday’s announcement, which also included a Russian man, his companies and North Korean firms.
Oligo Security strives to fill application-layer gaps in MITRE ATT&CK framework
Application Attack Matrix is a community effort designed to help defenders and organizations better understand and define how attackers use and exploit weaknesses in applications.
Scattered Spider weaves web of social-engineered destruction
The cybercrime ring has infiltrated more than 100 businesses since 2022, including more than a dozen since it regrouped earlier this year.
Intel471’s Will Dixon goes behind the scenes on the DanaBot takedown
Will Dixon, Senior Intelligence Collection Manager for Intel471
Advertisement
China-linked attacker hit France’s critical infrastructure via trio of Ivanti zero-days last year
French authorities said government agencies and businesses spanning telecom, media, finance and transportation were impacted by the widely exploited Ivanti vulnerabilities.
Top FBI cyber official: Salt Typhoon ‘largely contained’ in telecom networks
Brett Leatherman told CyberScoop in an interview that while the group still poses a threat, the bureau is focused on resilience and victim support, and going on…
AT&T deploys new account lock feature to counter SIM swapping
The feature is available for both consumer and business accounts.
Scammers have a new tactic: impersonating DOGE
An email reviewed by Scoop News Group and analyzed by Proofpoint reveals the latest attempt by fraudsters to capitalize on confusion over the Elon Musk-created group.