Cynthia B Brumfield

SEC Launches Probe into Progress Software's MOVEit Vulnerability, Issues Subpoena

BianLian takes credit for Air Canada hack, Play group stole data from St. Louis transit agency, Simpson Manufacturing disrupted by cyber incident, Space Force bans generative AI, much more

Zero-Day Vulnerability in HTTP/2 Protocol Caused Unprecedented Surge in DDoS Attacks

Google to require passkeys for default sign-in, EU commissioner gives Musk 24 hours to answer for Hamas war misinformation, Utah latest state to sue TikTok, Microsoft patches 100+ flaws, much more

Hacktivists Create Digital Chaos Following Hamas' Attacks on Israel

Israel cyber police froze Hamas cryptocurrency accounts, Mandiant spotted fake anti-Israeli accounts, Vietnamese actors tried to plant Predator spyware on lawmakers, journalists, experts, much more

Hacker Claims Sale of Millions of 23andMe’s Customers' Genetic Profiles

DC elections board probes RansomedVC claims, UK ICO raps Snap over AI chatbot privacy, THORSwap halted illicit funds transfer, Stars Arena drained of $3m, Huobi hacker earns $400k bounty, much more

Best Infosec-Related Long Reads for the Week, 10/7/23

How Intellexa sold spyware to Egypt, How phone phreakers created Apple, How one writer lost $31,000 in a pool-related BEC scam, The best password manager, PCLOB's view on Sec. 702 Metacurity is pleased to offer our free and paid subscribers this weekly digest of the best long-form

Best Infosec-Related Long Reads for the Week, 10/7/23

How Intellexa sold spyware to Egypt, How phone phreakers created Apple, How one writer lost $31,000 in a pool-related BEC scam, The best password manager, PCLOB's view on Sec. 702

MGM Resorts Suffers $100 Million Blow from Ransomware Attack

Blackbaud to pay $49.5m in ransomware attack settlement, Pro-Russian group DDoS'ed Oz Home Affairs website, 4chan miscreants use Bing AI to post racist images, Feds reveal top 10 misconfigs, much more

Belgium Fears China Is Spying Via Alibaba's Logistics Software at Liège Airport

Sony data breach exposed employee data, Apple patches another zero-day, Scattered Spider reportedly behind Clorox attack, Big info-stealing on Python platforms, Atlassian fixes zero-day, much more

NATO Is Addressing Document Thefts Claimed by SiegedSec Hacktivists

EU considers export curbs on some technologies, ShellTorch flaws could lead to unauthorized access and RCE, Senators probe TikTok staff transfers, Court bars CISA's election misinfo outreach, more

Arm Warns of Ongoing Attacks Targeting Flaw in Mali Line of GPUs

Hackers stole ETSI database, Progress Software blasts PoC release, Thai police bust crypto scammers, Ransomware gangs target JetBrains flaw, Exim releases patches, BunnyLoader MaaS emerges, more

Critical Zero Day in Exim Mail Transfer Agent Enables Takeover of Exposed Servers

ShinyHunters gang member pleads guilty, Killnet claims DDoS against royal family website, POC published for SharePoint bypass, FBI warns of multiple ransomware gang strains, much more

Best Infosec-Related Long Reads for the Week, 9/30/23

Cops dredge Google data to solve crimes, Huawei gives gifts to Greek officials, What happens to HaveIBeenPwned if Troy Hunt dies?, TikTok allows doxing of anonymous users, Beware sketchy HDMI adapters Metacurity is pleased to offer our free and paid subscribers this weekly digest of the best long-form infosec-related pieces