Russian APT 'Gamaredon' Upgrades Its Arsenal, Requiring New Defenses
The FSB state-sponsored operation has gotten a lot better at loading its malware and hiding its servers.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues
Former employee accuses company of prioritizing pending IPO over client security
EdTech Attackers Shift From Schools to Their Software Suppliers
Educational institutions, the edtech companies they rely on, and, more concerningly, the challenges they pose for schools are the focus of the latest Reporters' Notebook video seri…
OpenAI says 97.9 percent of its employees are now using agents
Codex, it's not just for developers, really
Order-tracking app Shop abused to push callback phishing attacks
Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive …
Local Police Collusion Hampers Crackdown on Asian Scam Centers
With tens of billions of dollars flowing into regional economies from cybercrime, scam centers continue to flourish, despite international and law-enforcement efforts.
N4N059: Twisted Pair Cabling
Copper twisted pair cabling serves as a fundamental component of Ethernet infrastructure and Ethan and Holly are here to break down how it works. They discuss the technical differe…
IPB203: The Death of NAT
Network Address Translation (NAT), a foundational element of IPv4, faces critical reassessment as IPv6 deployment shifts the landscape. Ed and Tom evaluate the evolving role of NAT…
Perseverance rover finds even more signs of extinct life on Mars
Scientists remain skeptical, plead for someone to bring the rocks home
Microsoft quietly extends free Windows 10 ESU support to October 2027
Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to continue receiving secu…
Researchers cast new doubt on Microsoft’s quantum computing advance
Microsoft’s controversial claim that its Majorana chip program will make possible a scalable quantum computer by 2029 has been thrown into new doubt by a scientific paper that ques…
AI and Liability
Earlier this month, a German court ruled that Google is liable for its AI search summaries. Rejecting defenses like “users can check for themselves,” and that they generally know “…
New macOS malware embeds fake errors to confuse AI analysis tools
A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt injection strings and fake debugging data within the e…
IBM unveils sub-1 nanometer chip with nearly 100 billion transistors
IBM is showing off a fingernail-size silicon chip that promises to deliver more power, more efficiently, in future computing, communications, and infrastructure deployments. Th…
PirloTV sports piracy network disrupted as 44 domains seized
A major sports piracy ring linked to the illegal PirloTV streaming platform has been disrupted in an action that targeted 44 domains. [...]
FOSS dev builds a BASIC compiler using LLVM
Not just any old BASIC, either: OS-9’s BASIC09
Bluekit phishing kit adopts browser-in-the-middle for login theft
The Bluekit phishing-as-a-service platform continues to evolve with nearly 70 new hostnames identified over the past week and by adding browser-in-the-middle capabilities for impro…
Recovery has to keep up with AI
SPONSORED POST: Why an AI-era recovery architecture looks different, with Eon's Gonen Stein
Apple passes RAMpocalypse costs on to consumers
Fondleslab and Mac prices rise by hundreds; phones safe ... for now
Windows 11 can now turn back the clock when updates go bad
Point-in-time restore offers a 72-hour escape hatch for stricken PCs
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the extension, named Adb…
The Four Elevations of Effective Fraud Prevention
Fraudsters don't attack just one transaction. They target accounts, platforms, and entire ecosystems. IPQS explains the four elevations of fraud prevention and why broader visibili…
Apple takes over Swift Package Index, vows to remove GitHub dependency
SPI co-creator Dave Verwer joins Apple, says 'We will be moving away from that model completely'
Amazon pours another $13B into India's AI and cloud infrastructure
Mumbai and Hyderabad datacenter expansion forms part of broader $48B five-year investment pledge
Runlayer Raises $30 Million in Series A Funding
The startup’s platform functions as a secure control layer, aiming to secure AI tools across enterprises. The post Runlayer Raises $30 Million in Series A Funding appeared first on…
European Commission lines up Amazon and Microsoft for cloud gatekeeper status
Preliminary position calls for designation under the Digital Markets Act
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old creds still working, trusted apps doing sketchy c…
Webinar: Why account takeovers remain one of the hardest threats to stop
Account takeover attacks continue to challenge security teams because attackers often operate through legitimate accounts and trusted services. This webinar explores how behavioral…
Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala. The post Cal Water Says No OT Systems Breached in Iranian Han…
Collabora releases CODE 26.04 as rivalry between FOSS cloudy office suites heats up
Now with Markdown support and smarter formula error handling – plus integrated AI, though it's off by default