HybridPetya: The Petya/NotPetya copycat comes with a twist
HybridPetya is the fourth publicly known real or proof-of-concept bootkit with UEFI Secure Boot bypass functionality 16 Sep 2025 ESET...
with
Google unveils payments protocol for AI agents with major financial firms
Firms collaborating with Google on this include American Express, Coinbase, Etsy, Intuit, JCB, Mastercard, PayPal, Salesforce, ServiceNow, UnionPay International, etc....
RaccoonO365 Phishing Network Dismantled as Microsoft, Cloudflare Take Down 338 Domains
Microsoft's Digital Crimes Unit said it teamed up with Cloudflare to coordinate the seizure of 338 domains used by RaccoonO365,...
DigiCert Acquires Valimail to Add Email Authentication Service
DigiCert acquires Valimail to strengthen email authentication with DMARC and content protection, to fight phishing and AI-driven threats. The post...
Improve Your Cyber Resilience with Data Security Platformization
Improve Your Cyber Resilience with Data Security Platformization madhav Tue, 09/16/2025 - 05:14 Data Security Lynne Murray | Director of...
Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn
Sextortion-based hacking, which hijacks a victim's webcam or blackmails them with nudes they're tricked or coerced into sharing, has long...
Weekly Update 469
13 September 2025 So I had this idea around training a text-to-speech engine with my voice, then using that to...
Akira Ransomware exploits year-old SonicWall flaw with multiple vectors
Akira Ransomware exploits year-old SonicWall flaw with multiple vectors Pierluigi Paganini September 11, 2025 Researchers warn that Akira ransomware group...
Why Traditional Threat Feeds Miss the Mark: The Role of Procedural Intelligence
Threat intelligence feeds come with a simple promise: Improve operational security by teaching security practitioners what Tactics, Techniques, and Procedures...
The AI Fix #67: Will Smith’s AI crowd scandal, and gullible agents fall for scams
In episode 67 of The AI Fix, Graham talks to an AI with a fax machine, Bill Gates says there’s...
SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers
Threat actors affiliated with the Akira ransomware group have continued to target SonicWall devices for initial access. Cybersecurity firm Rapid7...
How npm Security Collapsed Thanks To a 2FA Exploit
Billions (No, that’s not a typo, Billions with a capital B) of files were potentially compromised. If you thought Node...
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft's Direct Send feature to form a "highly...
Troubling Tech Career Trends: From ‘Quiet Cracking’ to AI Anxiety
A few weeks ago, I wrote about my experiences at the 2025 Black Hat Conference, with some special emphasis on...
Troubling Tech Career Trends: From ‘Quiet Cracking’ to AI Anxiety
A few weeks ago, I wrote about my experiences at the 2025 Black Hat Conference, with some special emphasis on...
