Collaborate Disseminate
Skills gained later fed Beijing’s cyber operations, according to SentinelLabs expert A security researcher specializing in tracking China threats claims two of Salt Typhoon’s members were former attendees of a training scheme run by Cisco.… Continue reading Researcher claims Salt Typhoon spies attended Cisco training scheme
Flare warns devs are unwittingly publishing production-level secrets Docker Hub has quietly become a treasure trove of live cloud keys and credentials, with more than 10,000 public container images exposing sensitive secrets from over 100 companies, in… Continue reading 10K Docker images spray live cloud creds across the internet
Workers frustrated with security-first changes to workflows and teething issues Exclusive Seven months after a landmark cyberattack, the UK’s Legal Aid Agency (LAA) says it’s returning to pre-breach operations, although law firms are still wrestling w… Continue reading Users report chaos as Legal Aid Agency stumbles back online after cyberattack
More than half of internet-exposed instances already compromised Attackers are actively exploiting a zero-day bug in Gogs, a popular self-hosted Git service, and the open source project doesn’t yet have a fix.… Continue reading 700+ self-hosted Gits battered in 0-day attacks with no fix imminent
The digital intrusion allegedly caused thousands of pounds of meat to spoil and triggered an ammonia leak in the facility A Ukrainian woman accused of hacking US public drinking water systems and a meat processing facility on behalf of Kremlin-backed c… Continue reading US extradites Ukrainian woman accused of hacking meat processing plant for Russia
Devs and users should know better, Microsoft tells watchTowr Updated Security researchers have revealed a .NET security flaw thought to affect a host of enterprise-grade products that they say Microsoft refuses to fix.… Continue reading Microsoft won’t fix .NET RCE bug affecting slew of enterprise apps, researchers say
Why should Keith Richards’ fingers inform your approach to risk? Partner Content For years, celebrities have insured their body parts for vast sums of money. Mariah Carey allegedly insured her voice and legs for $70 million during a tour, according to… Continue reading Protecting value at risk – the role of a risk operations center
1,500 military digital defenders spent the past week cleaning up a series of cyberattacks on fictional island feature Andravia and Harbadus – two nations so often at odds with one another – were once again embroiled in conflict over the past seven day… Continue reading Crisis in Icebergen: How NATO crafts stories to sharpen cyber skills
Plus critical critical Notepad++, Ivanti, and Fortinet updates, and one of these patches an under-attack security hole Updated Happy December Patch Tuesday to all who celebrate. This month’s patch party includes one Microsoft flaw under exploitation, … Continue reading Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday
Identity management vendors like Okta see an opening to calm CISOs worried about agents running amok The fear of AI agents running amok has thus far halted the wide deployment of these digital workhorses, Okta’s president of Auth0, Shiv Ramji, told The… Continue reading How to answer the door when the AI agents come knocking