29 Apr

This month in security with Tony Anscombe – April 2025 edition

From the near-demise of MITRE’s CVE program to a report showing that AI outperforms elite red teamers in spearphishing, April 2025 was another whirlwind month

Author rabih
29 Apr

China is using AI to sharpen every link in its attack chain, FBI warns

RSAC The biggest threat to US critical infrastructure, according to FBI Deputy Assistant Director Cynthia Kaiser, can be summed up in one word: “China.” In

Author rabih
29 Apr

The one interview question that will protect you from North Korean fake workers

RSAC Concerned a new recruit might be a North Korean stooge out to steal intellectual property and then hit an org with malware? There is

Author rabih
29 Apr

Swiss boffins admit to secretly posting AI-penned posts to Reddit in the name of science

Researchers from the University of Zurich have admitted to secretly posting AI-generated material to popular Subreddit r/changemyview in the name of science. As the researchers

Author rabih
29 Apr

Open source text editor poisoned with malware to target Uyghur users

Researchers at Canada’s Citizen Lab have spotted a phishing campaign and supply chain attack directed at Uyghur people living outside China, and suggest it’s an

Author rabih
29 Apr

Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus

Former Disney employee Michael Scheuer was sentenced to 36 months in prison and fined almost $688,000 for screwing up a software application the entertainment giant

Author rabih
28 Apr

Cybersecurity CEO accused of running malware on hospital PC blabs about it on LinkedIn

An Oklahoma City cybersecurity professional accused of installing spyware on a hospital PC confirmed on LinkedIn key details of the drama. Jeffrey Bowie, whom court

Author rabih
28 Apr

How to survive as a CISO aka ‘chief scapegoat officer’

RSAC Chief security officers should negotiate personal liability insurance and a golden parachute when they start a new job – in case things go sideways

Author rabih
28 Apr

Admission impossible: NSA, CISA brass absent from RSA Conf

RSAC There’s a notable absence from this year’s RSA Conference that kicked off today in San Francisco: The NSA’s State of the Hack panel. The

Author rabih
28 Apr

The future of AI in cybersecurity in a word: Optimistic

Sponsored post AI is reshaping cybersecurity in real time, raising the stakes on both sides of the battlefield. For defenders, it brings speed, precision, and

Author rabih
28 Apr

From 112K to 4M folks’ data – HR biz attack goes from bad to mega bad

Houston-based VeriSource Services’ long-running probe into a February 2024 digital break-in shows the data of 4 million people – not just a few hundred thousand

Author rabih
28 Apr

From 112k to 4 million folks’ data – HR biz attack goes from bad to mega bad

Houston-based VeriSource Services’ long-running probe into a February 2024 digital break-in shows the data of 4 million people – not just a few hundred thousand

Author rabih
28 Apr

Back online after ‘catastrophic’ attack, 4chan says it’s too broke for good IT

Clearweb cesspit 4chan is back up and running, but says the damage caused by a cyberattack earlier this month was “catastrophic.” In a statement released

Author rabih
28 Apr

4chan back online after ‘catastrophic’ attack, says it’s too broke for good IT

Clearweb cesspit 4chan is back up and running, but says the damage caused by a cyberattack earlier this month was “catastrophic.” In a statement released

Author rabih
28 Apr

How safe and secure is your iPhone really?

Mobile Security Your iPhone isn’t necessarily as invulnerable to security threats as you may think. Here are the key dangers to watch out for and

Author rabih
28 Apr

Microsoft pitches pay-to-patch reboot reduction subscription for Windows Server 2025

Microsoft has announced that its preview of hotpatching for on-prem Windows Server 2025 will become a paid subscription service in July. Hotpatching allows software updates

Author rabih
28 Apr

Samsung admits Galaxy devices can leak passwords through clipboard wormhole

Infosec in brief Samsung has warned that some of its Galaxy devices store passwords in plaintext. The Korean giant’s security SNAFU was reported by a

Author rabih
25 Apr

Signalgate lessons learned: If creating a culture of security is the goal, America is screwed

Opinion Just when it seems they couldn’t be that careless, US officials tasked with defending the nation go and do something else that puts American

Author rabih
Load moreLoadingAll items loaded