The collaboration validates specific connections, such as confirming that CrowdStrike’s Vanguard Panda and Microsoft’s Volt Typhoon both represent the same China-nexus threat group. Similarly, Secret Blizzard and Venomous Bear have been identified as aliases for a known Russian state-affiliated actor.… Read More "One hacker, many names: Industry collaboration aims to fix cyber threat label chaos"
The atmospheric scientist makes a compelling case for a head-to-heart-to-hands connection as a catalyst for climate action 17 Feb 2025 Most people acknowledge that climate change is real and human-driven, yet many still struggle to see how it directly affects… Read More "Katharine Hayhoe: The most important climate equation"
The US Cybersecurity and Infrastructure Security Agency (CISA) could lose nearly 1000 employees and face a $495m budget cut under President Donald Trump’s fiscal year 2026 proposal, drastically scaling back the agency’s workforce and scope of operations. The plan, released… Read More "Trump Budget Plan to Cut Nearly 1000 Jobs at Cyber Agency CISA"
If you’re a security analyst, you know the work never stops. Even after your team completes an extensive vendor risk assessment and remediation, you still need to write a report to share your findings with key stakeholders. And this work… Read More "Report Writing Solved: Generating Actionable Assessment Reports"
In the wake of high-profile attacks on UK retailers Marks & Spencer and Co-op, Scattered Spider has been all over the media, with coverage spilling over into the mainstream news due to the severity of the disruption caused — currently… Read More "Understanding Help Desk Scams and How to Defend Your Organization"
Cloud workloads running these tools are especially at risk. Once compromised, attackers siphon off significant computing power, resulting in unexpected cloud bills and slower application performance. Some affected Nomad clusters managed hundreds of clients, proving that even large, well-funded enterprises… Read More "The high cost of misconfigured DevOps: Global cryptojacking hits enterprises"
Some employment scams take an unexpected turn as cybercriminals shift from “hiring” to “firing” staff 18 Feb 2025 • , 5 min. read Most of us are in a job or looking for one. Or both. That’s largely why employment… Read More "No, you’re not fired – but beware of job termination scams"
Vendor email compromise (VEC) attacks are becoming increasingly effective, with engagement rates “worrisomely high,” according to new research by Abnormal AI. The study, published during Infosecurity Europe 2025, found that VEC messages eclipsed that of business email compromise (BEC) in… Read More "VEC Attacks Alarmingly Effective at Driving Engagement"
Organizations today move fast, but slow vendor approvals can grind everything to a halt. As companies increasingly rely on third-party vendors, slow vendor approvals create a serious security bottleneck. This slowdown costs organizations valuable time and resources—and leaves them open… Read More "Security Bottleneck? Here’s How to Accelerate Vendor Approvals"
Jun 03, 2025Ravie LakshmananMobile Security / Malware A growing number of malicious campaigns have leveraged a recently discovered Android banking trojan called Crocodilus to target users in Europe and South America. The malware, according to a new report published by… Read More "Android Trojan Crocodilus Now Active in 8 Countries, Targeting Banks and Crypto Wallets"
