A quick Patch Tuesday retrospective, and then a look at what the threat groups are up to.
A look back at Patch Tuesday. BlackCat uses malicious Google ads. Social engineering in the third quarter of 2023. Are small businesses in denial about ransomware? Molerats have some new tools. Israel...
15 Nov 202330min
The cyber underworld is getting a bit faster and a lot looser, and the gangs may be drawing some unwelcome attention.
CISA and the FBI issue an update on Royal Ransomware. A look at Smash-and-grab ransomware attacks as well as Cloud vulnerabilities. A pre-Black Friday look at card skimmers. Fences, and their place in...
14 Nov 202328min
Ransomware and DDoS hit diverse sectors. The DDoS is a nuisance, the ransomware more serious.
Australian ports are recovering from a cyberattack. SysAid is hit by Cl0p user Lace Tempest. Ransomware targets China's largest bank. LockBit doxes Boeing as Boeing hangs tough on paying ransom. Docke...
13 Nov 202327min
Grace Cassy: Actions speak louder than words. [Associate Fellow] [Career Notes]
Grace Cassy, and Associate Fellow from Ten Eleven Ventures sits down to share her career path, getting her to where she is now. Grace spent 10 years in the UK Diplomatic Service, working on global sec...
12 Nov 20238min
Shields Ready for attacks against critical infrastructure. These may be indiscriminate, and they may be opportunistic.
CISA, FEMA, and Shields Ready. Ransomware operators exploit 3rd-party tools. A Bittrex bankruptcy phishing campaign. Spammers abuse Google Forms quizzes. Imperial Kitten in action against Israeli targ...
9 Nov 202333min
No major threats showed up in yesterday’s US elections, so now we can start thinking about the risk during the holidays.
CISA claims "No credible threats" to yesterday's US elections. Criminals seek to profit from the .ai top level domain. A Singapore resort sustains a cyberattack. A look ahead at holiday cyber threats....
8 Nov 202327min
Cybercriminals at the service of the state, and an array of new underworld tools.
Data brokers offer information on active US military personnel. Current BlueNoroff activity. A new Gootloader variant is active in the wild. Atlassian vulnerabilities actively exploited. The prevalenc...
7 Nov 202328min
Precautions, preparations, and resilience against cybercrime and hacktivism.
A precautionary shutdown at a major US mortgage lender. Call centers as targets. A push to decouple data and identity. The cyber front in the Hamas-Israeli war. Hacktivism and state-sponsored cyberatt...
6 Nov 202330min
