Cybersecurity

South Korea's financial sector has been targeted by what has been described as a sophisticated supply chain attack that led to the deployment of Qilin ransomware. "This operation combined the capabilities of a major Ransomware-as-a-Service (RaaS) group,...
I’m pleased to share three significant updates that advance cybersecurity for organizations that rely on Microsoft technologies. These milestones expand the reach of Sophos’ world-class threat intelligence and managed detection and response (MDR) capabilities into the...

Kaspersky online shopping threat report 2025

The global e‑commerce market is accelerating faster than ever before, driven by expanding online retail, and rising consumer adoption worldwide. According to McKinsey Global...

YARA-X 1.10.0 Release: Fix Warnings

YARA-X's 1.10.0 release brings a new command: fix warnings. If you have a rule that would generate a warning with a help section (explaining how...

Wind farm worker sentenced after turning turbines into a secret crypto mine

A technical manager at a Dutch wind farm operator has been sentenced to 120 hours of community service after it was discovered he had...

Jeremiah – Darknet Diaries

Full Transcript Jeremiah Roe is a seasoned penetration tester. In this episode he tells us about a time when he had...

PlushDaemon compromises network devices for adversary-in-the-middle attacks

ESET researchers provide insights into how PlushDaemon performs adversary-in-the-middle attacks using a previously undocumented network implant that we have named...

Weekly Update 478

This week, it was an absolute privilege to be at Europol in The Hague, speaking about cyber offenders and at the InterCOP conference and...

November Patch Tuesday does its chores – Sophos News

Microsoft on Tuesday announced 63 patches affecting 13 product families. Four of the addressed issues are considered by Microsoft to be of Critical severity,...

Fortinet Exploited, China’s AI Hacks, PhaaS Empire Falls & More

Nov 17, 2025Ravie LakshmananCybersecurity / Hacking News This week showed just how fast things can go wrong when no one's watching. Some attacks were silent...

The BetterBank DeFi protocol exploited for reward minting

Executive summary From August 26 to 27, 2025, BetterBank, a decentralized finance (DeFi) protocol operating on the PulseChain network, fell victim to a sophisticated exploit...

Microsoft Office Russian Dolls – SANS Internet Storm Center

You probably know what are the Russian or Matryoshka dolls. It's a set of wooden dolls of decreasing size placed one inside another. I found an interesting...

REvil – Darknet Diaries

Full Transcript REvil is the name of a ransomware service as well as a group of criminals inflicting ransomware onto the...

Why shadow AI could be your biggest security blind spot

From unintentional data leakage to buggy code, here’s why you should care...

Recent articles

Weekly Update 477