Sustained ‘Red Deer’ Phishing Attacks Impersonate Israel Post, Drop RATs
The "missed package" phishing messages, likely the work of a hacking-for-hire group, bounds into inboxes, bearing ASyncRAT.
June 2023
Add June’s New Sci-Fi, Fantasy, and Horror Books to Your Summer Reading List
If your idea of “beach reads” includes subjects like aliens, space battles, fantasy battles, time-travel, monsters, demons, vampires, magical circus…
Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace
No activity logging in the free subscription for Google's Web-based productivity suite exposes enterprises to insider and other threats, researchers…
Where SBOMs Stand Today
It's been two years since Executive Order 14028. By using SBOMs as a standard, organizations can manage software risks, protect…
Kremlin Accuses the NSA of Spying on Russian iPhone Users
Russia claimed Apple’s iPhones are spying on its citizens on Thursday and accused the U.S. of being behind it. Russia’s…
Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection
In an already fraught environment surrounding the popular Python programming language software package manager, hackers are coming up with new…
S3 Ep137: 16th century crypto skullduggery
Lots to learn, clearly explained in plain English... listen now! (Full transcript inside.)
A New Lunar Lander and Robot Snakes Are Just Some of the Best Spaceflight Images From May
Someone once said that May is a month of renewal, growth, and endless possibilities. That was certainly the case for…
Ask Fitis, the Bear: Real Crooks Sign Their Malware
Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece…
Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks
An analysis of the "evasive and tenacious" malware known as QBot has revealed that 25% of its command-and-control (C2) servers…