Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Making sure the checks get printed
My name is Pierre Cadieux, and I’ll be helping contribute to these newsletters. A little about me: I’ve been working in the cybersecurity industry in many roles over the past 20+ years, first focusing on endpoint...
Crypto thief who splurged on gold grills sentenced in London
Image: City of London Police Crypto thief who splurged on gold grills sentenced in London A 25-year-old man who helped steal nearly $260,000 in cryptocurrency through a SIM-swapping fraud scheme was sentenced to two and...
ASOS: Hackers tricked way into employee account before sending rogue push notification
Image: Nix Company via Unsplash ASOS: Hackers tricked way into employee account before sending rogue push notification British online fashion retailer ASOS said Thursday that hackers gained access to an employee’s...
International coalition seizes tools used by cyber firm behind Flax Typhoon
Image: Wesley Tingey via Unsplash International coalition seizes tools used by cyber firm behind Flax Typhoon Cybersecurity agencies in several countries partnered to take down tools used by state-backed hackers in...
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
OpenAI disclosed Thursday it shut down two influence operations from Russia and Iran that used ChatGPT and other AI tools to create fake journalist personas and covert think tanks that successfully planted stories and...
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
The Justice Department and FBI announced that they had seized two hacking tools connected to the Chinese government-linked group Flax Typhoon and a China-based company that the U.S. government has repeatedly taken...
Security Awareness Training Isn’t Dead, but It Needs a Rethink
All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable. Empirical evidence suggests that security awareness training isn’t working – successful...
OAuth grants pile up faster than you can review them. Here's how to keep up.
Every time an employee clicks "Allow" on an OAuth consent screen, they create a standing trust relationship between two apps. An AI note-taker gets access to their calendar. A task management tool gets access to Slack....
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Cisco Talos identified an advanced persistent threat (APT) spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and...
Major Yandex data center in Russia hit by Ukrainian drone strike
Yandex's main office in Moscow. Credit: WikiFido / Wikimedia Commons Major Yandex data center in Russia hit by Ukrainian drone strike A major data center operated by Russian technology giant Yandex was disrupted on...
Writing the Next Chapter
Dear Reader, One of my favorite assignments at Dark Reading, when I first joined the newly launched media site in 2006, was to interview and write human-profile stories about cybersecurity industry pioneers. Although I...
Quantum computers could break today’s encryption. Washington needs to prepare now.
The country is consumed right now with debating artificial intelligence and whether increasingly powerful AI systems could escape human control. Those are valid concerns, but lawmakers are overlooking another...