Microsoft says that: -99.6% of all employees and their devices are now using phishing-resistant multi-factor authentication (MFA) -35k+ engineers are now working "full time on security" [big doubt!!!]
Microsoft Security Blog
Latest progress update on Microsoft’s Secure Future Initiative | Microsoft Security Blog
Read more about the key updates and milestones of Microsoft's Secure Future Initiative in the November 2025 SFI progress report.
Yo Mandiant... if exploitation starts in August and the vendor patches this in October... that's what the infosec genZ kids call a "zero-day" image
Looks like the need to fire staff to cover AI costs has hit the Windows team RIP Windows Insider image
Bank of England has confirmed the Jaguar Land Rover ransomware attack impacted the UK's GDP growth, as the government first claimed back in August
Monetary Policy Report - November 2025
Our quarterly report sets out the economic analysis and inflation projections that the Monetary Policy Committee uses to make its interest rate dec...
 image
While AI companies are allowed to slurp everything they want, Quad9 warns that legal fees are drowning DNS resolvers, which are now being targeted by copyright owners to enforce blocks on piracy sites
Quad9
Quad9 | A public and free DNS service for a better security and privacy
A public and free DNS service for a better security and privacy
-Myanmar blows up KK Park scam compound -Yanluowang ransomware IAB pleads guilty -US CBO hacked by foreign APT -Singapore to punish scammers with cane beatings -Chrome will remove XSLT support for security reasons -Hungary opposition party hacked, blamed on Russians -WaPo breach linked to Oracle zero-day -Tinder to rummage through your photos -Akamai reports disruptions in Russia -ICC, Austria replace MSFT software Podcast:
Risky Bulletin: Myanmar scam compound goes boom! - Risky Business Media
Myanmar starts demolishing the KK Park scam compound, the US Congressional Budget Office gets hacked by a foreign APT, Chrome will remove [Read More]
 Newsletter:
Risky.Biz
Risky Bulletin: Yanluowang ransomware IAB pleads guilty
In other news: US CBO hacked by foreign APT; Singapore to punish scammers with cane beatings; Chrome will remove XSLT support for security reasons.
 image
Two weeks ago, there were weird reports online of explosions at KK Park, Myanmar's largest scam compound, and people fleeing the streets. I thought some internal military groups were fighting for control, but it appears the junta is demolishing the park outright https://www.irrawaddy.com/news/myanmars-crisis-the-world/myanmar-junta-dynamites-scam-hub-in-pr-move-as-global-pressure-grows.html image
Singapore passes law to punish scammers and money mules with cane beatings :))
The Straits Times
Law passed for scammers, mules to be caned after victims in Singapore lose almost $4b since 2020
Scammers face between six and 24 strokes of the cane, while mules face a discretionary 12 strokes. Read more at straitstimes.com. Read more at stra...
Australia sanctions North Korean hackers (one person and four entities) -Park Jin Hyok (WannaCry dude) -Kimsuky -Lazarus Group -Andariel -Chosun Expo Presser: https://www.foreignminister.gov.au/minister/penny-wong/media-release/sanctions-cyber-criminals-funding-north-korean-weapons-mass-destruction Sanction details: https://www.dfat.gov.au/news/news/one-person-and-four-entities-listed-under-autonomous-sanctions-regulations-2011-democratic-peoples-republic-korea
Singaporean authorities have sentenced three Chinese nationals to 2 years and 4 months prison for hacking-related charges The three hacked into online gambling sites to cheat on games and steal personal data
Singapore Police Force
Three Men Sentenced For Offences In Relation To Illegal Cyber Activities
On 5 November 2025, three Chinese nationals, Yan Peijian (β€œYan”), 39, Huang Qinzheng (β€œHuang”), 37, and Liu Yuqi (β€œLiu”), 33, were conv...