Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor
New research from Broadcom's Symantec and Carbon Black Threat Hunter Team has discovered evidence of an Iranian hacking group embedding...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks
Ravie LakshmananMar 06, 2026Cyber Espionage / Threat Intelligence A China-linked advanced persistent threat (APT) actor has been targeting critical telecommunications...
Microsoft Reveals ClickFix Campaign Using Windows Terminal to Deploy Lumma Stealer
Ravie LakshmananMar 06, 2026Endpoint Security / Browser Security Microsoft on Thursday disclosed details of a new widespread ClickFix social engineering...
Hikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalog
Ravie LakshmananMar 06, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security...
Collaboration Critical As Geopolitical Pressures, AI Reshape Cybersecurity
I’ve been thinking a lot about collaboration and how important it is—at many different levels—to cybersecurity. And now a study by the World Economic Forum...
How SMBs use threat research and MDR to build a defensive edge
Corporate IT and security teams have the unenviable task of keeping relentless and increasingly sophisticated adversaries at bay. They’re often...
Phobos Ransomware admin faces up to 20 years after guilty plea
Phobos Ransomware admin faces up to 20 years after guilty plea Pierluigi Paganini March 05, 2026 Russian national Evgenii Ptitsyn...
Zero-Knowledge Proofs for Privacy-Preserving Context Validation
The privacy gap in modern ai context sharing Ever notice how every time you use an ai tool, you're...
The SOC Analyst Role Is Going Up (And It Was Never Going Away)
How autonomous triage turns security analysts from ticket processors into strategic operators The Security Operations Center has a math...
Your SOC Doesn’t Need More Tools. It Needs Fewer.
The average SOC manages 83 security tools from nearly 30 vendors. If that number surprises you, you’ve probably never...
Hackers Used New Exploit Kit to Compromise Thousands of iPhones
Image: cait00sith/Envato An iOS exploit framework has revealed how advanced mobile attack tools can move rapidly from surveillance operations to...
ShinyHunters Claims Woflow Breach: What It Means for SaaS Supply Chain Security
ShinyHunters’ alleged breach of Woflow (a third-party SaaS provider) highlights a broader shift in SaaS attacks that started last...
NDSS 2025 – L-HAWK: A Controllable Physical Adversarial Patch Against A Long-Distance Target
Session 14D: Autonomous Vehicles Authors, Creators & Presenters: Taifeng Liu (Xidian University), Yang Liu (Xidian University), Zhuo Ma (Xidian...
The Circus at CISA Continues
A few weeks ago, I wrote that CISA looked like it was on life support. A few days later,...
Russian APT targets Ukraine with BadPaw and MeowMeow malware
Russian APT targets Ukraine with BadPaw and MeowMeow malware Pierluigi Paganini March 05, 2026 Researchers uncovered a Russian campaign targeting...