Scattered Lapsus$ Hunters Extorts Victims, Demands Salesforce Negotiate
The so-called retirement of the Scattered Lapsus$ Hunters extortion group didn’t last long.The threat group – a combination of the...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
The Political Weaponization of Cybersecurity
Ideally, cybersecurity — and cybersecurity policy — should be somewhat apolitical. It should be based on principles of authentication, access...
⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More
Oct 06, 2025Ravie LakshmananCybersecurity / Hacking News The cyber world never hits pause, and staying alert matters more than ever....
5 Critical Questions For Adopting an AI Security Solution
In the era of rapidly advancing artificial intelligence (AI) and cloud technologies, organizations are increasingly implementing security measures to protect...
From Deception to Defense: Understanding and Combating Phishing
Phishing is a cyberattack where attackers attempt to trick victims into an activity that is against their best interests and...
Sometimes Your Startup Hasn’t Failed, You’re Just Too Early
The Illusion of Failure In the fast-moving world of technology and software product development, failure often gets blamed on execution....
Weekly Update 472
06 October 2025 This probably comes through pretty strongly in this week's video, but I love the vibe at CERN....
CVE-2025-61882: Frequently Asked Questions About Oracle E-Business Suite (EBS) Zero-Day and Associated Vulnerabilities
Following reports the Cl0p ransomware group has been extorting Oracle E-Business Suite customers, Oracle released an advisory for a zero-day...
Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks
Oct 06, 2025Ravie LakshmananVulnerability / Threat Intelligence Oracle has released an emergency update to address a critical security flaw in...
Keeping Your Cloud Environment Safe
Why Is Non-Human Identity Management Crucial for Cloud Safety? How can organizations effectively manage Non-Human Identities (NHIs) to maintain cloud...
Feeling Reassured by Your Secrets Security?
What Ensures Your Data Remains Protected at Every Stage? Non-Human Identities (NHIs) and Secrets Security Management form the backbone of...
The Emperor’s New Clothes: Why Compulsory CBTs and Phishing Tests Keep Failing
What looks like assurance is often theatre. And that costs more than time — it also increases risk. Over recent...
Ghost in the Cloud: Weaponizing AWS X-Ray for Command & Control
Ghost in the Cloud: Weaponizing AWS X-Ray for Command & Control Pierluigi Paganini October 05, 2025 Attackers can weaponize AWS...
USENIX 2025: PEPR ’25 – Career Advice For Privacy Engineers: From Resume To Interview To Finding The Next Job
Creator, Author And Presenters: Jason A. Novak, Google Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23...
CMMC Is Finalized. How Will It Impact State and Local Government?
Lohrmann on Cybersecurity What is Cybersecurity Maturity Model Certification from the Department of Defense and why should state and local...
