2025-05-08
Talos Intelligence
The IT help desk kindly requests you read this newsletter
Talos Intelligence
Spam campaign targeting Brazil abuses Remote Monitoring and Management tools
Malwarebytes
Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
Malwarebytes
Tired of Google sponsored ads? So are we! That’s why we’re introducing the option to block them on iOS
White Knight Labs
Protected: Harnessing the Power of Cobalt Strike Profiles for EDR Evasion – Part 2
Amazon Security
AWS expands Spain’s ENS High certification across 174 services
Google Safety & Security
Read our new report on how we use AI to fight scams on Search.
Ars Technica Security
DOGE software engineer’s computer infected by info-stealing malware
Meta Security
Accelerating GPU indexes in Faiss with NVIDIA cuVS
Dark Reading
Email-Based Attacks Top Cyber-Insurance Claims
Dark Reading
Life Without CVEs? It's Time to Act
Google Security Blog
Using AI to stop tech support scams in Chrome
Searchlight Cyber
Early Analysis of the LockBit Data Leak
Searchlight Cyber
Emerging Threats from AI on the Dark Web
Palo Alto Networks
Palo Alto Networks: Champion in Two Canalys Global Leadership Matrices
TrustedSec
I Got 99 Problems But a Log Ain’t One
2025-05-07
Microsoft Security
Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2
Okta Security
A Guide to DORA Compliance with Okta
Schneier on Security
Chinese AI Submersible
Amazon Security
Introducing the AWS User Guide to Governance, Risk and Compliance for Responsible AI Adoption within Financial Services Industries
Datadog HQ
Monitor Cisco Meraki with Datadog
Ars Technica Security
WhatsApp provides no cryptographic management for group messages
Ars Technica Security
We have reached the “severed fingers and abductions” stage of the crypto revolution
Ars Technica Security
Jury orders NSO to pay $167 million for hacking WhatsApp users
watchTowr Labs
SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends)
Dark Reading
AI Agents Fail in Novel Ways, Put Businesses at Risk
Dark Reading
Meta Wins Lawsuit Against Spyware Vendor NSO Group
Dark Reading
Play Ransomware Group Used Windows Zero-Day
Krebs on Security
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
Zero Day Initiative
CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
2025-05-06
SpiderLabs
Lights Out and Stalled Factories: Using M.A.T.R.I.X to Learn About Modbus Vulnerabilities
Rapid7
Key Takeaways from the Take Command Summit 2025: From Zero to Hero: Building the Perfect Defense
Talos Intelligence
Proactive threat hunting with Talos IR
Malwarebytes
“Your privacy is a promise we don’t break”: Dating app Raw exposes sensitive user data
Schneier on Security
Fake Student Fraud in Community Colleges
Elastic Security Labs
Bit ByBit - emulation of the DPRK's largest cryptocurrency heist
Amazon Security
Introducing the AWS Zero Trust Accelerator for Government
Hunt and Hackett
Building Stronger Defences Through Expert Partnerships
Project Black
Network Segmentation Testing Guide
Google Safety & Security
The latest AI news we announced in April
Google Safety & Security
6 ways Google Play helps keep you safe
Claroty
CVE-2025-4041
Datadog HQ
Datadog acquires Eppo
The Citizen Lab
Job Opportunity: Digital Communications Specialist
Ars Technica Security
Man pleads guilty to using malicious AI software to hack Disney employee
ReversingLabs
MIT researchers tame AI code with new controls
Dark Reading
Addressing the Top Cyber-Risks in Higher Education
Palo Alto Networks
InterSECt — The Fast Lane to a Secure Future Starts Here
2025-05-05
Github Security Blog
Welcome to Maintainer Month: Events, exclusive discounts, and a new security challenge
Cloudflare
Scaling with safety: Cloudflare's approach to global service health metrics and software releases
Microsoft Security
Microsoft partners with Global Anti-Scam Alliance to fight cybercrime
Malwarebytes
A week in security (April 27 – May 3)
Schneier on Security
Another Move in the Deepfake Creation/Detection Arms Race
CrankySec
We're all DEVO
Troy Hunt
Passkeys for Normal People
Ars Technica Security
Signal clone used by Trump official stops operations after report it was hacked
Ars Technica Security
Hundreds of e-commerce sites hacked in supply-chain attack
Dark Reading
AI Domination: RSAC 2025 Social Media Roundup
Dark Reading
Phony Hacktivist Pleads Guilty to Disney Data Leak
Dark Reading
How to Prevent AI Agents From Becoming the Bad Guys
Palo Alto Networks
Enhancing UK Government Operations with Emerging Technology
2025-05-03
2025-05-02
Kevin Beaumont
DragonForce Ransomware Cartel attacks on UK high street retailers: walking in the front door
Schneier on Security
Friday Squid Blogging: Pyjama Squid
Schneier on Security
Privacy for Agentic AI
Schneier on Security
NCSC Guidance on “Advanced Cryptography”
Black Lantern Security
ASP.NET Cryptography for Pentesters
Troy Hunt
Weekly Update 450
Troy Hunt
The Have I Been Pwned Alpine Grand Tour
Ars Technica Security
Microsoft’s new “passwordless by default” is great but comes at a cost
Dark Reading
UK Retailers Reeling From Likely Ransomware Attacks
Dark Reading
What NY's New Security Rules Mean for Finance Firms
Dark Reading
Cut CISA and Everyone Pays for It
Searchlight Cyber
Scattered Spider Linked to Marks & Spencer Cyberattack