Security Information and Event Management (SIEM) systems act as the primary tools for detecting suspicious activity in enterprise networks, helping organizations identify and respond to potential attacks in real time. However, the new Picus Blue Report 2025, based on over… Read More "Insights from 160 Million Attack Simulations"
A team of researchers from George Mason University has developed a new method of using the well-known Rowhammer attack against physical computer memory to insert backdoors into full-precision AI models. Their “OneFlip” technique requires flipping only a single bit inside… Read More "Rowhammer attack can backdoor AI models with one devastating bit flip"
On March 5th, 2025, the US DOJ unsealed an indictment against employees of the Chinese contractor I‑SOON for their involvement in multiple global espionage operations. Those include attacks that we previously documented and attributed to the FishMonger APT group –… Read More "Operation FishMedley targeting governments, NGOs, and think tanks"
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a request for comment on an updated version of a government guideline listing the minimum elements required for a software bill of materials (SBOM). An SBOM is a machine-readable document… Read More "CISA Seeks Biden Era’s SBOM Minimum Requirements Guideline Change"
Since early this year, RIA-Novosti has published roughly one story per week on UVB-76, suggesting its coded messages are related to missile strikes on Iran, the war in Ukraine, and negotiations with Trump. RT, which had once pooh-poohed the idea… Read More "The Mysterious Shortwave Radio Station Stoking US-Russia Nuclear Fears"
Aug 25, 2025Ravie LakshmananMalware / Cyber Attack The advanced persistent threat (APT) actor known as Transparent Tribe has been observed targeting both Windows and BOSS (Bharat Operating System Solutions) Linux systems with malicious Desktop shortcut files in attacks targeting Indian… Read More "Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing"
Warnung und Schutz als Aufgaben des BSI “Als Cybersicherheitsbehörde Deutschlands ist es unser Anspruch, die Bürgerinnen und Bürger nicht nur für die Gefahren im Netz zu sensibilisieren, sondern sie aktiv zu schützen”, sagt BSI-Präsidentin Claudia Plattner. Susanne Dehmel, Mitglied der… Read More "BSI-E-Mail-Checker soll vor Hackern schützen"
In July 2024, ESET Research noticed suspicious activity on the system of a trade group in the United States that operates in the financial sector. While helping the affected entity remediate the compromise, we made an unexpected discovery in the… Read More "You will always remember this as the day you finally caught FamousSparrow"
BSI-Präsidentin Claudia Plattner: “Je mehr vertrauenswürdige Produkte verfügbar sind, desto souveräner können wir entscheiden – und desto sicherer wird die digitale Zukunft.” ECB Eine sichere Verwendung digitaler Produkte zu ermöglichen, sieht die Präsidentin des Bundesamtes für Sicherheit in der Informationstechnik… Read More "BSI-Doppelstrategie für digitale Souveränität | CSO Online"
ESET researchers take a look back at the significant changes in the ransomware ecosystem in 2024 and focus on the newly emerged and currently dominating ransomware-as-a-service (RaaS) gang, RansomHub. We share previously unpublished insights into RansomHub’s affiliate structure and uncover… Read More "Shifting the sands of RansomHub’s EDRKillShifter"
