Notable developments across the security industry: law enforcement action, policy, events and vendor news.
66 reports
In the ever-evolving landscape of cybersecurity, staying ahead of threats is a constant challenge. This blog post will delve into the key trends in Cyber Threat Intelligence (CTI) and wider…
APT35, also known as Phosphorus, Charming Kitten, and Ajax Security Team, is an Iranian threat actor that has been active since at least 2014. The group has targeted organisations across multiple…
The cyber threat landscape is continually evolving, with threat actors leveraging advanced technologies to carry out sophisticated attacks. One such development is the emergence of FraudGPT, a new…
The issue lies in the "display name" of an email's "From" header in Outlook. It appears that this display name can be manipulated to misrepresent the actual sender of the email, making phishing…
The Centre for Cyber Security Belgium (CERT.be) has issued an advisory warning of an actively exploited zero-day vulnerability (CVE-2023-38606) affecting all Apple products. This vulnerability,…
In a significant development in the cybersecurity landscape, the banking sector has recently been the target of two distinct open-source software (OSS) supply chain attacks. These attacks,…
In the ever-evolving field of Cyber Threat Intelligence (CTI), understanding the motivations behind cyber-attacks is paramount for effective threat mitigation and response. While financial gain is…
The Terrestrial Trunked Radio (TETRA), a communication system extensively utilized by government agencies, law enforcement, and emergency services organizations across Europe, the United Kingdom,…
A recent operation against phishing SMS campaigns in the UK, shared via a tweet by Jake from JCyberSec_ ( @JCyberSec_ ) and a LinkedIn post by the Dedicated Card and Payment Crime Unit (DCPCU),…
On July 24, 2023, the Norwegian government announced that its ICT platform, used by 12 of its ministries, had been compromised in a cyberattack. The attack was carried out by exploiting a zero-day…
A recent oss-security list post from Tavis Ormandy has brought attention to a use-after-free vulnerability, CVE-2023-20593, in AMD Zen2 processors. [..]
In the digital age, the fight against child abuse has taken on new dimensions. One of the most innovative approaches to this issue is the "Stop Child Abuse - Trace an Object" campaign, a unique…
