Attorney Generals go after Bitcoin ATMs for supporting Fraud
On 08SEP2025, the District of Columbia's Attorney General filed a lawsuit against Athena, a "Bitcoin ATM machine" provider with 4100+...
Blog
Finding the Real Cause
This blog post was originally published on NEOX Networks; click here to read it. It’s 9:02 a.m. on a Monday.You’ve...
FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups
FBI Warns of Salesforce attacks by UNC6040 and UNC6395 groups Pierluigi Paganini September 13, 2025 The U.S. FBI issued a...
HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya
HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya Pierluigi Paganini September 13, 2025 HybridPetya ransomware bypasses UEFI Secure Boot to...
FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks
The U.S. Federal Bureau of Investigation (FBI) has issued a flash alert to release indicators of compromise (IoCs) associated with...
Weekly Update 469
13 September 2025 So I had this idea around training a text-to-speech engine with my voice, then using that to...
Safer Conversational AI for Cybersecurity: The BIX Approach
Here’s a scenario security teams increasingly face. A user—or an attacker pretending to be one—types something like: This is how...
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass
ESET Research has discovered HybridPetya, on the VirusTotal sample sharing platform. It is a copycat of the infamous Petya/NotPetya malware,...
Cisco fixes high-severity IOS XR flaws enabling image bypass and DoS
Cisco fixes high-severity IOS XR flaws enabling image bypass and DoS Pierluigi Paganini September 12, 2025 Cisco addressed multiple high-severity...
CISA Lays Out Roadmap for CVE Program’s ‘Quality Era’
Five months after the future of the CVE program was thrown in doubt, CISA this week released a roadmap that...
Randall Munroe’s XKCD ‘Dual Roomba’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Dual...
Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks
Sep 12, 2025Ravie LakshmananVulnerability / Mobile Security Samsung has released its monthly security updates for Android, including a fix for...
Apple Warns French Users of Fourth Spyware Campaign in 2025, CERT-FR Confirms
Sep 12, 2025Ravie Lakshmanan Apple has notified users in France of a spyware campaign targeting their devices, according to the...
Cybersecurity Snapshot: Security Lags Cloud and AI Adoption, Tenable Report Finds, as CISA Lays Out Vision for CVE Program’s Future
Check out Tenable’s report detailing challenges and best practices for cloud and AI security. Plus, CISA rolled out a roadmap...
M365 Copilot customers get access to sales, service and finance AI assistants
Microsoft’s Copilots for sales, service and finance will be included in Microsoft 365 Copilot subscriptions at no extra cost, Microsoft said...