Tracecat, an open-source automation platform for security teams, is now in alpha.

GitHub

GitHub - TracecatHQ/tracecat: All-in-one AI automation platform (workflows, agents, cases, tables) for security, IT, and infra teams.

All-in-one AI automation platform (workflows, agents, cases, tables) for security, IT, and infra teams. - TracecatHQ/tracecat

...and now you know why all the Russian internet troll farms defend cryptocurrencies like it was their own child "Today, the Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned thirteen entities and two individuals for operating in the financial services and technology sectors of the Russian Federation economy including persons developing or offering services in virtual assets that enable the evasion of U.S. sanctions." https://home.treasury.gov/news/press-releases/jy2204

There's been an interesting trend in the cRypTo-BrO community where companies and startups push back on any claims that their work pollutes the environment by claiming "factual errors" in any accusations, but never explaining what they are. Learning from the oil industry and climate change deniers, I see

ZenHammer: Rowhammer Attacks on AMD Zen-based Platforms

ZenHammer: Rowhammer Attacks on AMD Zen-based Platforms – Computer Security Group

Newsletter:

Risky.Biz

Risky Biz News: NIST NVD stopped enriching CVEs a month ago

In other news: LockBit member sentenced to prison; CIA runs anti-China info-op; new GhostRace side-channel attack.

Podcast:

Risky Biz News: NIST stopped curating the CVE database a month ago - Risky Business Media

A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird.You c [Read More]

-NIST NVD stopped enriching CVEs a month ago -LockBit member sentenced to prison -CIA runs anti-China info-op -New GhostRace side-channel attack -Google enables real-time Safe Browsing for Chrome -LockBit member sent to prison -Russia sends cryptominer to prison -Malware coder sent to jail in Belarus -FTC fines tech support companies $26mil -Bitcoin Fog admin convicted -Nigeria detains Binance execs

China repatriates hundreds of scam factory survivors More than 1,000 victims of human trafficking have been freed from scam factories in Myanmar

dw.com

China repatriates hundreds of scam factory survivors

More than 1,000 victims of human trafficking have been freed from scam factories in Myanmar. The three-day operation comes after DW published an in...

Mastodon users... please stop pinning 5-6-7-8 super old posts on your profile. It makes your account look inactive. Allow at least some new posts to be visible or people will think you've abandoned your profile and haven't posted in a while.

Shogun is the first TV series that has me looking at future episode air times since Game of Thrones. Such a good show

Phrack CFP:

Phrack

Introduction

Click to read the article on phrack

Looks like there's a new edition coming this summer, after 3 years

US charges an Iranian national who worked for Mahak Rayan Afraz, a cyber contractor for the IRGC:

 

In 2021, Meta's security team linked the company to an APT known as Tortoiseshell:

Meta Newsroom

Taking Action Against Hackers in Iran

We’re sharing actions we took against a group of hackers — removing their ability to abuse our platform, distribute malware and hack people’s...