2025-05-08
Malwarebytes
Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
Malwarebytes
Tired of Google sponsored ads? So are we! That’s why we’re introducing the option to block them on iOS
Talos Intelligence
The IT help desk kindly requests you read this newsletter
Talos Intelligence
Spam campaign targeting Brazil abuses Remote Monitoring and Management tools
Google Safety & Security
Read our new report on how we use AI to fight scams on Search.
Amazon Security
AWS expands Spain’s ENS High certification across 174 services
White Knight Labs
Protected: Harnessing the Power of Cobalt Strike Profiles for EDR Evasion – Part 2
Meta Security
Accelerating GPU indexes in Faiss with NVIDIA cuVS
Ars Technica Security
DOGE software engineer’s computer infected by info-stealing malware
Dark Reading
Email-Based Attacks Top Cyber-Insurance Claims
Dark Reading
Life Without CVEs? It's Time to Act
Google Security Blog
Using AI to stop tech support scams in Chrome
Searchlight Cyber
Early Analysis of the LockBit Data Leak
Searchlight Cyber
Emerging Threats from AI on the Dark Web
Palo Alto Networks
Palo Alto Networks: Champion in Two Canalys Global Leadership Matrices
TrustedSec
I Got 99 Problems But a Log Ain’t One
2025-05-07
Schneier on Security
Chinese AI Submersible
Okta Security
A Guide to DORA Compliance with Okta
Microsoft Security
Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2
Datadog HQ
Monitor Cisco Meraki with Datadog
Amazon Security
Introducing the AWS User Guide to Governance, Risk and Compliance for Responsible AI Adoption within Financial Services Industries
Ars Technica Security
WhatsApp provides no cryptographic management for group messages
Ars Technica Security
We have reached the “severed fingers and abductions” stage of the crypto revolution
Ars Technica Security
Jury orders NSO to pay $167 million for hacking WhatsApp users
Dark Reading
AI Agents Fail in Novel Ways, Put Businesses at Risk
Dark Reading
Meta Wins Lawsuit Against Spyware Vendor NSO Group
Dark Reading
Play Ransomware Group Used Windows Zero-Day
Zero Day Initiative
CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
Krebs on Security
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
watchTowr Labs
SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends)
2025-05-06
Rapid7
Key Takeaways from the Take Command Summit 2025: From Zero to Hero: Building the Perfect Defense
Schneier on Security
Fake Student Fraud in Community Colleges
Malwarebytes
“Your privacy is a promise we don’t break”: Dating app Raw exposes sensitive user data
Project Black
Network Segmentation Testing Guide
Talos Intelligence
Proactive threat hunting with Talos IR
Hunt and Hackett
Building Stronger Defences Through Expert Partnerships
Google Safety & Security
The latest AI news we announced in April
Google Safety & Security
6 ways Google Play helps keep you safe
Datadog HQ
Datadog acquires Eppo
SpiderLabs
Lights Out and Stalled Factories: Using M.A.T.R.I.X to Learn About Modbus Vulnerabilities
Elastic Security Labs
Bit ByBit - emulation of the DPRK's largest cryptocurrency heist
Amazon Security
Introducing the AWS Zero Trust Accelerator for Government
Claroty
CVE-2025-4041
The Citizen Lab
Job Opportunity: Digital Communications Specialist
Ars Technica Security
Man pleads guilty to using malicious AI software to hack Disney employee
Dark Reading
Addressing the Top Cyber-Risks in Higher Education
Palo Alto Networks
InterSECt — The Fast Lane to a Secure Future Starts Here
ReversingLabs
MIT researchers tame AI code with new controls
2025-05-05
Schneier on Security
Another Move in the Deepfake Creation/Detection Arms Race
Malwarebytes
A week in security (April 27 – May 3)
Microsoft Security
Microsoft partners with Global Anti-Scam Alliance to fight cybercrime
Cloudflare
Scaling with safety: Cloudflare's approach to global service health metrics and software releases
Troy Hunt
Passkeys for Normal People
CrankySec
We're all DEVO
Github Security Blog
Welcome to Maintainer Month: Events, exclusive discounts, and a new security challenge
Ars Technica Security
Signal clone used by Trump official stops operations after report it was hacked
Ars Technica Security
Hundreds of e-commerce sites hacked in supply-chain attack
Dark Reading
AI Domination: RSAC 2025 Social Media Roundup
Dark Reading
Phony Hacktivist Pleads Guilty to Disney Data Leak
Dark Reading
How to Prevent AI Agents From Becoming the Bad Guys
Palo Alto Networks
Enhancing UK Government Operations with Emerging Technology
2025-05-03
2025-05-02
Schneier on Security
Friday Squid Blogging: Pyjama Squid
Schneier on Security
Privacy for Agentic AI
Kevin Beaumont
DragonForce Ransomware Cartel attacks on UK high street retailers: walking in the front door
Troy Hunt
Weekly Update 450
Black Lantern Security
ASP.NET Cryptography for Pentesters
Ars Technica Security
Microsoft’s new “passwordless by default” is great but comes at a cost
Dark Reading
UK Retailers Reeling From Likely Ransomware Attacks
Dark Reading
What NY's New Security Rules Mean for Finance Firms
Dark Reading
Cut CISA and Everyone Pays for It