"A cross-party group of lawmakers will urge the European Parliament to ditch internal use of Microsoft’s ubiquitous software in favor of a European alternative, according to a letter obtained by POLITICO."
Get us off Microsoft! Lawmakers press EU Parliament to change in-house IT. – POLITICO
watchTowr Labs has found thousands of secret tokens and credentials shared publicly on code formatting and beautification sites, such as JSONFormatter and CodeBeautify
watchTowr Labs
Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)
Welcome to watchTowr vs the Internet, part 68. That feeling you’re experiencing? Dread. You should be used to it by now. As is fast becoming an...
The Tor Project replaces the Tor relay encryption with a new algorithm named the Counter Galois Onion
Counter Galois Onion: Improved encryption for Tor circuit traffic | Tor Project
Tor is upgrading its relay encryption algorithm for improved security. In upcoming releases, Arti and Tor will both support a new encryption algori...
Some recent security conference videos: Troopers - Hexacon - Bsides Canberra - NYMJCSC - VirusBulletin -
A secretive unit inside Iran's IRGC cyber branch is responsible for using hacked data for assassination operations
Nariman Gharib Blog
Department 40 Exposed: Inside the IRGC Unit Connecting Cyber Ops to Assassinations
A massive leak of internal documents has blown the cover off one of Iran's most active hacking groups. For years, the cybersecurity community track...
افشای هویت مدیران «اداره ۴۰» اطلاعات سپاه؛بزرگترین بانک اطلاعاتی جاسوسی تهران
Shai-Hulud Returns: Over 300 NPM packages infected via fake Bun runtime within hours
Shai-Hulud Returns: Over 1K NPM Packages and 27K+ Github Repos infected via Fake Bun Runtime Within Hours
Over 1,000 NPM packages were infected using the same method as the previous attack, infecting with a fake Bun runtime. The attacker leveraged the `...
The Fairfax County Police Department is looking for help in identifying suspects part of a group that installed malware on ATMs to carry out jackpotting attacks
Fairfax County Police Department News
Detectives Ask for the Public’s Help Identifying ATM Jackpotting Suspects
Fair Oaks Police District –Detectives from our Financial Crimes Unit are actively investigating a series of ATM thefts after Apple Federal Credit...
AI company Factory has detected multiple threat actors abusing its free tiers to automate cyberattacks, including "at least one state‑linked actor."
Factory.ai
The Droid Wars: Breaking up an AI‑orchestrated cyber fraud campaign | Factory.ai
Over the course of several days in October we detected and disrupted a highly automated cyber operation that had attemp...
Security firm DoubleVerify has found SkyWalk, a network of iOS games that serve ads inside invisible windows. The malicious code was traced back to the UniSkyWalking iOS mobile framework
FRAUD ALERT: Fake Gaming Apps May Be Gaming Your Ads
Read DV
 image
The DomainTools security team has analyzed the recent leak of APT35 internal documents and how the documents map out to past campaigns and infrastructure, as well as how they reveal more of the internal structure of Iran's cyber apparatus
DomainTools Investigations | DTI
Threat Intelligence Report: APT35 Internal Leak of Hacking Campaigns Against Lebanon, Kuwait, Turkey, Saudi Arabia, Korea, and Domestic Iranian Targets - DomainTools Investigations | DTI
Unmasking APT35 (Charming Kitten). New report analyzes leaked internal documents, revealing their operational profile, Exchange attack chains (Prox...
 image