
Pentagon hits fast-forward on software certs.
The Defense Department is launching a new fast-track software approval process. A popular employee monitoring tool exposes over 21 million real-time screenshots. The U.S. opens a criminal antitrust in...
25 Huhti 202526min

Lessons from the latest breach reports.
Verizon and Mandiant call for layered defenses against evolving threats. Cisco Talos describes ToyMaker and Cactus threat actors. Researchers discover a major Linux security flaw which allows rootkits...
24 Huhti 202522min

States struggle with cyber shift.
The White House’s shift of cybersecurity responsibilities to the states is met with skepticism. Baltimore City Public Schools suffer a ransomware attack. Russian state-backed hackers target Dutch crit...
23 Huhti 202528min

Proton66’s malware highway.
The Russian Proton66 is tied to cybercriminal bulletproof hosting services. A new Rust-based botnet hijacks vulnerable routers. CISA budget cuts limit the use of popular analysis tools. A pair of heal...
22 Huhti 202536min

When fake fixes hide real attacks.
Adversary nations are using ClickFix in cyber espionage campaigns. Japan’s Financial Services Agency issues an urgent warning after hundreds of millions in unauthorized trades. The critical Erlang/OTP...
21 Huhti 202525min
![Rich Hale: Understanding the data. [CTO] [Career Notes]](https://cdn.podme.com/podcast-images/4167F8687CF502B28ECD9F1E12F343C2_small.jpg)
Rich Hale: Understanding the data. [CTO] [Career Notes]
Please enjoy this encore episode of Career Notes. Chief Technology Officer of ActiveNav Rich Hale takes us through his career aspirations of board game designer (one he has yet to realize), through hi...
20 Huhti 20257min
![Crafting malware with modern metals. [Research Saturday]](https://cdn.podme.com/podcast-images/DB8EE6964AE8708674555BE3DE3127EE_small.jpg)
Crafting malware with modern metals. [Research Saturday]
This week, we are joined by Nick Cerne, Security Consultant from Bishop Fox, to discuss "Rust for Malware Development." In pursuit of simulating real adversarial tactics, this blog explores the use of...
19 Huhti 202517min

SSH-attered trust.
A critical vulnerability in Erlang/OTP SSH allows unauthenticated remote code execution. There’s a bipartisan effort to renew a key cybersecurity info sharing law. A newly discovered Linux kernel vuln...
18 Huhti 202527min




















