Allie Bohan on how to handle the non-technical side of a ransomware attack
FTI Consulting’s Allie Bohan
Advertisement
Threats
Nation-state groups hit hundreds of organizations with Microsoft Windows zero-day
Trend Micro researchers discovered and reported the eight-year-old defect to Microsoft six months ago. The company hasn’t made any commitments to patch or remediate the issue.
Six additional countries identified as suspected Paragon spyware customers
Researchers found suspected Graphite deployments in Australia, Canada, Cyprus, Denmark, Israel and Singapore.
Who is sending those scammy text messages about unpaid tolls?
The latest smishing scam follows a familiar process as ones the industry has seen over the past decade.
Lazarus Group deceives developers with 6 new malicious npm packages
Socket researchers said the malware-ridden packages were collectively downloaded over 330 times. GitHub removed all of the malicious packages Wednesday.
Microsoft patches 57 vulnerabilities, including 6 zero-days
More than three-quarters of the vulnerabilities covered in the vendor’s monthly Patch Tuesday update are high-severity flaws.
Advertisement
Apple discloses zero-day vulnerability, releases emergency patches
Apple released emergency software patches Tuesday that address a newly identified zero-day vulnerability in the company’s WebKit web browser engine. Tracked as CVE-2025-24201, an attacker can potentially…
X suffered a DDoS attack. Its CEO and security researchers can’t agree on who did it.
X’s wave of outages resembled a DDoS attack and Dark Storm Team, a prolific threat group specializing in such attacks, claimed responsibility.
Ransomware poseurs are trying to extort businesses through physical letters
The FBI is warning business leaders about the scam perpetrated by an unidentified threat group.
Silk Typhoon shifted to specifically targeting IT management companies
The Chinese state-backed espionage group started targeting third-party IT services in late 2024, Microsoft researchers said.