Cybersecurity

The future of MFA is clear – but is it here yet? – Sophos News

Over the years the industry has tied itself in knots in its attempts at augmenting (or upgrading) the password, using all sorts of confusing...

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

Mar 24, 2025Ravie LakshmananVulnerability / Cloud Security A set of five critical security shortcomings have been disclosed in the Ingress NGINX Controller for Kubernetes that...

Kaspersky industrial threat report for Q4 2024

Statistics across all threats In Q4 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.1 pp from the previous...

Some new Data Feeds, and a little “incident”.

Our API (https://isc.sans.edu/api) continues to be quite popular. One query we see a lot is lookups for individual IP addresses. Running many queries as...

Arrests in Tap-to-Pay Scheme Powered by Phishing – Krebs on Security

Authorities in at least two U.S. states last week independently announced arrests of Chinese nationals accused of perpetrating a novel form of tap-to-pay fraud...

BlackLock Ransomware: What You Need To Know

What is the BlackLock ransomware?BlackLock is a relatively new ransomware group. First seen in March 2024, the ransomware operation initially operated under the name...

Kill List – Darknet Diaries

Full Transcript The dark web is full of mystery. Some of it’s just made up though. Chris Monteiro wanted to see...

No, you’re not fired – but beware of job termination scams

Some employment scams take an unexpected turn as cybercriminals shift from “hiring”...

Weekly Update 443

What an awesome response to the new brand! I'm so, so happy with all the feedback, and I've gotta be honest, I was nervous...

Little fires everywhere for March Patch Tuesday – Sophos News

Microsoft on Tuesday released 57 patches affecting 10 product families. Six of the addressed issues are considered by Microsoft to be of Critical severity,...

Malicious PyPI Packages Stole Cloud Tokens—Over 14,100 Downloads Before Removal

Mar 15, 2025Ravie Lakshmanan Malware / Supply Chain Security Cybersecurity researchers have warned of a malicious campaign targeting users of the Python Package Index (PyPI)...

Head Mare and Twelve: Joint attacks on Russian entities

Introduction In September 2024, a series of attacks targeted Russian companies, revealing indicators of compromise and tactics associated with two hacktivist groups: Head Mare and...

Recent articles