
Lessons from the latest breach reports.
Verizon and Mandiant call for layered defenses against evolving threats. Cisco Talos describes ToyMaker and Cactus threat actors. Researchers discover a major Linux security flaw which allows rootkits...
24 Apr 202522min

States struggle with cyber shift.
The White House’s shift of cybersecurity responsibilities to the states is met with skepticism. Baltimore City Public Schools suffer a ransomware attack. Russian state-backed hackers target Dutch crit...
23 Apr 202528min

Proton66’s malware highway.
The Russian Proton66 is tied to cybercriminal bulletproof hosting services. A new Rust-based botnet hijacks vulnerable routers. CISA budget cuts limit the use of popular analysis tools. A pair of heal...
22 Apr 202536min

When fake fixes hide real attacks.
Adversary nations are using ClickFix in cyber espionage campaigns. Japan’s Financial Services Agency issues an urgent warning after hundreds of millions in unauthorized trades. The critical Erlang/OTP...
21 Apr 202525min
![Rich Hale: Understanding the data. [CTO] [Career Notes]](https://cdn.podme.com/podcast-images/4167F8687CF502B28ECD9F1E12F343C2_small.jpg)
Rich Hale: Understanding the data. [CTO] [Career Notes]
Please enjoy this encore episode of Career Notes. Chief Technology Officer of ActiveNav Rich Hale takes us through his career aspirations of board game designer (one he has yet to realize), through hi...
20 Apr 20257min
![Crafting malware with modern metals. [Research Saturday]](https://cdn.podme.com/podcast-images/DB8EE6964AE8708674555BE3DE3127EE_small.jpg)
Crafting malware with modern metals. [Research Saturday]
This week, we are joined by Nick Cerne, Security Consultant from Bishop Fox, to discuss "Rust for Malware Development." In pursuit of simulating real adversarial tactics, this blog explores the use of...
19 Apr 202517min

SSH-attered trust.
A critical vulnerability in Erlang/OTP SSH allows unauthenticated remote code execution. There’s a bipartisan effort to renew a key cybersecurity info sharing law. A newly discovered Linux kernel vuln...
18 Apr 202527min

Microsoft squashes windows server bug.
Microsoft issues emergency updates for Windows Server. Apple releases emergency security updates to patch two zero-days. CISA averts a CVE program disruption. Researchers uncover Windows versions of t...
17 Apr 202530min




















