Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign
Oct 17, 2025Ravie LakshmananMalware / Cybercrime Microsoft on Thursday disclosed that it revoked more than 200 certificates used by a...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Operation Zero Disco: Threat actors targets Cisco SNMP flaw to drop Linux rootkits
Operation Zero Disco: Threat actors targets Cisco SNMP flaw to drop Linux rootkits Pierluigi Paganini October 16, 2025 Hackers exploit...
How Votiro Turns Threat Prevention Into Intelligence
October 16, 2025 Most organizations view file sanitization as the final step, a gatekeeper that prevents malware from entering the...
SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025
Vaguely magical and quadranty thing (Gemini) It’s not every day you get to reflect on a journey that started as an...
Satisfying Regulatory Requirements with PAM
How Do Non-Human Identities Impact Your Organization’s Cybersecurity Strategy? If you’ve ever pondered the complexities of managing machine identities, you’re...
Foster Innovation with Strong NHI Security Measures
Are Your Machine Identities Truly Secure? The notion of securing Non-Human Identities (NHIs) often takes center stage. Where machine identities...
Choosing the Best NHIs Options for Your Needs
What Are Non-Human Identities (NHIs) and Why Are They Crucial for Modern Cybersecurity? Have you ever wondered how machine identities...
Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing
Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing | Trend Micro (US) Content has been added...
Sky-High Hack: How $600 Unlocked Global Secrets Streaming from Space
Right now, satellites are broadcasting your most private data in plaintext.A groundbreaking academic study just exposed a catastrophic security failure:...
NDSS 2025 – Workshop on Binary Analysis Research (BAR) 2025, Session II: Applying Binary Analysis
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS...
Qantas, DraftKings, and Other Recent Breaches
Mid-October Check-In Here we are in mid-October, and 2025 shows no signs of slowing down on the cyber front. In...
From Generic Code to Specialist AI: How MCP Will Reshape the Developer Experience
One of the challenges with using AI and LLMs to generate code today is that they mostly produce generic code....
F5 BIG-IP Breach: 44 CVEs That Need Your Attention Now
Partnering with an EDR vendor after a nation-state has already stolen your source code isn’t innovation — it’s a gamble....
U.S. CISA adds Adobe Experience Manager Forms flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Adobe Experience Manager Forms flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 16, 2025 U.S. Cybersecurity...
China-linked APT Jewelbug targets Russian IT provider in rare cross-nation cyberattack
China-linked APT Jewelbug targets Russian IT provider in rare cross-nation cyberattack Pierluigi Paganini October 16, 2025 China-linked APT Jewelbug targeted...
