2025-05-08
Malwarebytes
Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
Malwarebytes
Tired of Google sponsored ads? So are we! That’s why we’re introducing the option to block them on iOS
Amazon Security
AWS expands Spain’s ENS High certification across 174 services
Talos Intelligence
The IT help desk kindly requests you read this newsletter
Talos Intelligence
Spam campaign targeting Brazil abuses Remote Monitoring and Management tools
White Knight Labs
Protected: Harnessing the Power of Cobalt Strike Profiles for EDR Evasion – Part 2
Dark Reading
Email-Based Attacks Top Cyber-Insurance Claims
Dark Reading
Life Without CVEs? It's Time to Act
Ars Technica Security
DOGE software engineer’s computer infected by info-stealing malware
Google Safety & Security
Read our new report on how we use AI to fight scams on Search.
Meta Security
Accelerating GPU indexes in Faiss with NVIDIA cuVS
Google Security Blog
Using AI to stop tech support scams in Chrome
Searchlight Cyber
Early Analysis of the LockBit Data Leak
Searchlight Cyber
Emerging Threats from AI on the Dark Web
TrustedSec
I Got 99 Problems But a Log Ain’t One
Palo Alto Networks
Palo Alto Networks: Champion in Two Canalys Global Leadership Matrices
2025-05-07
Microsoft Security
Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2
Schneier on Security
Chinese AI Submersible
Amazon Security
Introducing the AWS User Guide to Governance, Risk and Compliance for Responsible AI Adoption within Financial Services Industries
Okta Security
A Guide to DORA Compliance with Okta
Datadog HQ
Monitor Cisco Meraki with Datadog
Dark Reading
AI Agents Fail in Novel Ways, Put Businesses at Risk
Dark Reading
Meta Wins Lawsuit Against Spyware Vendor NSO Group
Dark Reading
Play Ransomware Group Used Windows Zero-Day
watchTowr Labs
SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends)
Ars Technica Security
WhatsApp provides no cryptographic management for group messages
Ars Technica Security
We have reached the “severed fingers and abductions” stage of the crypto revolution
Ars Technica Security
Jury orders NSO to pay $167 million for hacking WhatsApp users
Krebs on Security
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
Zero Day Initiative
CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
2025-05-06
Malwarebytes
“Your privacy is a promise we don’t break”: Dating app Raw exposes sensitive user data
Schneier on Security
Fake Student Fraud in Community Colleges
SpiderLabs
Lights Out and Stalled Factories: Using M.A.T.R.I.X to Learn About Modbus Vulnerabilities
Amazon Security
Introducing the AWS Zero Trust Accelerator for Government
Talos Intelligence
Proactive threat hunting with Talos IR
Project Black
Network Segmentation Testing Guide
Rapid7
Key Takeaways from the Take Command Summit 2025: From Zero to Hero: Building the Perfect Defense
Hunt and Hackett
Building Stronger Defences Through Expert Partnerships
The Citizen Lab
Job Opportunity: Digital Communications Specialist
Datadog HQ
Datadog acquires Eppo
Dark Reading
Addressing the Top Cyber-Risks in Higher Education
Ars Technica Security
Man pleads guilty to using malicious AI software to hack Disney employee
Elastic Security Labs
Bit ByBit - emulation of the DPRK's largest cryptocurrency heist
Google Safety & Security
The latest AI news we announced in April
Google Safety & Security
6 ways Google Play helps keep you safe
Claroty
CVE-2025-4041
ReversingLabs
MIT researchers tame AI code with new controls
Palo Alto Networks
InterSECt — The Fast Lane to a Secure Future Starts Here
2025-05-05
Microsoft Security
Microsoft partners with Global Anti-Scam Alliance to fight cybercrime
Malwarebytes
A week in security (April 27 – May 3)
Github Security Blog
Welcome to Maintainer Month: Events, exclusive discounts, and a new security challenge
Schneier on Security
Another Move in the Deepfake Creation/Detection Arms Race
CrankySec
We're all DEVO
Troy Hunt
Passkeys for Normal People
Cloudflare
Scaling with safety: Cloudflare's approach to global service health metrics and software releases
Dark Reading
AI Domination: RSAC 2025 Social Media Roundup
Dark Reading
Phony Hacktivist Pleads Guilty to Disney Data Leak
Dark Reading
How to Prevent AI Agents From Becoming the Bad Guys
Ars Technica Security
Signal clone used by Trump official stops operations after report it was hacked
Ars Technica Security
Hundreds of e-commerce sites hacked in supply-chain attack
Palo Alto Networks
Enhancing UK Government Operations with Emerging Technology
2025-05-03
2025-05-02
Kevin Beaumont
DragonForce Ransomware Cartel attacks on UK high street retailers: walking in the front door
Schneier on Security
Friday Squid Blogging: Pyjama Squid
Schneier on Security
Privacy for Agentic AI
Troy Hunt
Weekly Update 450
Dark Reading
UK Retailers Reeling From Likely Ransomware Attacks
Dark Reading
What NY's New Security Rules Mean for Finance Firms
Dark Reading
Cut CISA and Everyone Pays for It
Ars Technica Security
Microsoft’s new “passwordless by default” is great but comes at a cost
Black Lantern Security
ASP.NET Cryptography for Pentesters