Posted by Jasika Bawa, Andy Lim, and Xinghui Lu, Google Chrome Security Tech support scams are an increasingly prevalent form of cybercrime, characterized by deceptive tactics aimed at extorting money or gaining unauthorized access to sensitive data. In a tech… Read More "Using AI to stop tech support scams in Chrome"
Digital Forensics & Incident Response (DFIR) Summit & Training, virtual and Utah, US: 24-31 July Denver Cybersecurity Conference, Virtual and Colorado, US: 25 July BSidesABQ, New Mexico, US: 25-26 July DFIR Summit & Training 2025, Virtual and Utah, US: 24-31… Read More "The CSO guide to top security conferences"
Posted by Chrome Root Program, Chrome Security Team Note: Google Chrome communicated its removal of default trust of Chunghwa Telecom and Netlock in the public forum on May 30, 2025. The Chrome Root Program Policy states that Certification Authority (CA)… Read More "Google Online Security Blog: Sustaining Digital Certificate Security"
Schritt-für-Schritt zur passwortlosen Umgebung Accenture hat beispielsweise die letzten fünf Jahre damit verbracht, sich von Passwörtern zu verabschieden und sich für Microsoft Hello for Business entschieden. Zunächst entwickelte das Team eine Adoptionskarte, in der die grundlegenden Schritte zur Identifizierung passwortloser… Read More "Passwortlose Authentifizierung wird für CISOs immer wichtiger"
In a new report, application security provider OX urged the US Cybersecurity and Infrastructure Security Agency (CISA) to add more context to its Known Exploited Vulnerabilities (KEV) catalog. After analyzing 10 common vulnerabilities (CVEs) in CISA’s KEV list across over… Read More "CISA Urged to Enrich KEV Catalog with More Contextual Data"
A new malware campaign is distributing a novel Rust-based information stealer dubbed EDDIESTEALER using the popular ClickFix social engineering tactic initiated via fake CAPTCHA verification pages. “This campaign leverages deceptive CAPTCHA verification pages that trick users into executing a malicious… Read More "New EDDIESTEALER Malware Bypasses Chrome’s App-Bound Encryption to Steal Browser Data"
Russische Hacker ändern ihre Taktik von Passwort-Spraying zu Phishing, aber ihre Ziele innerhalb der NATO bleiben gleich. PX Media – Shutterstock.com Seit über einem Jahr hat es eine neue Cyberspionage-Gruppe, die mit der russischen Regierung in Verbindung stehen soll, auf… Read More "Void Blizzard nimmt NATO-Organisationen ins Visier"
New ransomware payment reporting rules have come into effect in Australia from today (May 30), applying to all organizations with an annual turnover of AUS $3m ($1.93M). The provisions, outlined in Australia’s Cyber Security Act 2024, also apply to private… Read More "Mandatory Ransomware Payment Disclosure Begins in Australia"
Several cybersecurity researchers who have tracked Trickbot extensively tell WIRED they were unaware of the announcement. An anonymous account on the social media platform X recently claimed that Kovalev used the Stern handle and published alleged details about him. WIRED… Read More "Cops in Germany Claim They’ve ID’d the Mysterious Trickbot Ransomware Kingpin"
Breaking Out of the Security Mosh Pit When Jason Elrod, CISO of MultiCare Health System, describes legacy healthcare IT environments, he doesn’t mince words: “Healthcare loves to walk backwards into the future. And this is how we got here, because… Read More "A Healthcare CISO’s Journey to Enabling Modern Care"
