2025-05-09
Schneier on Security
Friday Squid Blogging: Japanese Divers Video Giant Squid
Bishop Fox Security
Before You Red Team: Fix These 5 Common Mistakes
Dark Reading
Commvault: Vulnerability Patch Works as Intended
Dark Reading
How Security Has Changed the Hacker Marketplace
Searchlight Cyber
DragonForce Claims Responsibility for Series of Attacks on UK Retailers
2025-05-08
Talos Intelligence
The IT help desk kindly requests you read this newsletter
Talos Intelligence
Spam campaign targeting Brazil abuses Remote Monitoring and Management tools
Malwarebytes
Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
Malwarebytes
Tired of Google sponsored ads? So are we! That’s why we’re introducing the option to block them on iOS
Google Safety & Security
Read our new report on how we use AI to fight scams on Search.
Datadog HQ
This Month in Datadog - April 2025
Amazon Security
AWS expands Spain’s ENS High certification across 174 services
White Knight Labs
Protected: Harnessing the Power of Cobalt Strike Profiles for EDR Evasion – Part 2
Dark Reading
Email-Based Attacks Top Cyber-Insurance Claims
Dark Reading
Life Without CVEs? It's Time to Act
Ars Technica Security
DOGE software engineer’s computer infected by info-stealing malware
Offensive Security
CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
Meta Security
Accelerating GPU indexes in Faiss with NVIDIA cuVS
Google Security Blog
Using AI to stop tech support scams in Chrome
Searchlight Cyber
Early Analysis of the LockBit Data Leak
Searchlight Cyber
Emerging Threats from AI on the Dark Web
TrustedSec
I Got 99 Problems But a Log Ain’t One
Palo Alto Networks
Palo Alto Networks: Champion in Two Canalys Global Leadership Matrices
2025-05-07
Microsoft Security
Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2
Schneier on Security
Chinese AI Submersible
Okta Security
A Guide to DORA Compliance with Okta
watchTowr Labs
SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends)
Datadog HQ
Monitor Cisco Meraki with Datadog
Amazon Security
Introducing the AWS User Guide to Governance, Risk and Compliance for Responsible AI Adoption within Financial Services Industries
Dark Reading
AI Agents Fail in Novel Ways, Put Businesses at Risk
Dark Reading
Meta Wins Lawsuit Against Spyware Vendor NSO Group
Dark Reading
Play Ransomware Group Used Windows Zero-Day
Ars Technica Security
WhatsApp provides no cryptographic management for group messages
Ars Technica Security
We have reached the “severed fingers and abductions” stage of the crypto revolution
Ars Technica Security
Jury orders NSO to pay $167 million for hacking WhatsApp users
Krebs on Security
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
Zero Day Initiative
CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
2025-05-06
SpiderLabs
Lights Out and Stalled Factories: Using M.A.T.R.I.X to Learn About Modbus Vulnerabilities
Rapid7
Key Takeaways from the Take Command Summit 2025: From Zero to Hero: Building the Perfect Defense
Talos Intelligence
Proactive threat hunting with Talos IR
Malwarebytes
“Your privacy is a promise we don’t break”: Dating app Raw exposes sensitive user data
Hunt and Hackett
Building Stronger Defences Through Expert Partnerships
Google Safety & Security
The latest AI news we announced in April
Google Safety & Security
6 ways Google Play helps keep you safe
Schneier on Security
Fake Student Fraud in Community Colleges
Elastic Security Labs
Bit ByBit - emulation of the DPRK's largest cryptocurrency heist
Datadog HQ
Datadog acquires Eppo
Amazon Security
Introducing the AWS Zero Trust Accelerator for Government
Project Black
Network Segmentation Testing Guide
The Citizen Lab
Job Opportunity: Digital Communications Specialist
Dark Reading
Addressing the Top Cyber-Risks in Higher Education
ReversingLabs
MIT researchers tame AI code with new controls
Ars Technica Security
Man pleads guilty to using malicious AI software to hack Disney employee
Claroty
CVE-2025-4041
Palo Alto Networks
InterSECt — The Fast Lane to a Secure Future Starts Here
2025-05-05
Cloudflare
Scaling with safety: Cloudflare's approach to global service health metrics and software releases
Microsoft Security
Microsoft partners with Global Anti-Scam Alliance to fight cybercrime
Malwarebytes
A week in security (April 27 – May 3)
Github Security Blog
Welcome to Maintainer Month: Events, exclusive discounts, and a new security challenge
Troy Hunt
Passkeys for Normal People
Schneier on Security
Another Move in the Deepfake Creation/Detection Arms Race
CrankySec
We're all DEVO
Dark Reading
AI Domination: RSAC 2025 Social Media Roundup
Dark Reading
Phony Hacktivist Pleads Guilty to Disney Data Leak
Dark Reading
How to Prevent AI Agents From Becoming the Bad Guys
Ars Technica Security
Signal clone used by Trump official stops operations after report it was hacked
Ars Technica Security
Hundreds of e-commerce sites hacked in supply-chain attack
Palo Alto Networks
Enhancing UK Government Operations with Emerging Technology