Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
Security Awareness Training Isn’t Dead, but It Needs a Rethink
All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable. Empirical evidence suggests that security awareness training isn’t working – successful...
Cisco Patches a Dozen Critical Vulnerabilities
Cisco on Wednesday announced patches for 35 vulnerabilities across its products, including over a dozen critical-severity bugs. A fresh Meraki security hardening release fixes multiple bugs grouped together under seven...
OAuth grants pile up faster than you can review them. Here's how to keep up.
Every time an employee clicks "Allow" on an OAuth consent screen, they create a standing trust relationship between two apps. An AI note-taker gets access to their calendar. A task management tool gets access to Slack....
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. If remote code...
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. The operator uses mostly throwaway...
Low-cost Android phones ship with residential proxy malware
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad...
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
“AI-analysis evasion” encapsulates the real-world techniques malware authors are developing in attempt to obstruct or defeat any layers of automated AI analysis. This technique is cheap to add but inconsistently...
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Cisco Talos identified an advanced persistent threat (APT) spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and...
Major Yandex data center in Russia hit by Ukrainian drone strike
Yandex's main office in Moscow. Credit: WikiFido / Wikimedia Commons Major Yandex data center in Russia hit by Ukrainian drone strike A major data center operated by Russian technology giant Yandex was disrupted on...
Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms
Credit: European Union in Ukraine / Flickr Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms Russian-aligned hackers have targeted Ukrainian transportation, manufacturing and...
Thousands of cheap Android phones shipped with ad-fraud malware
Image: Yianni Mathioudakis via Unsplash Thousands of cheap Android phones shipped with ad-fraud malware Researchers have found malware preinstalled on thousands of cheap Android phones that can generate fraudulent ad...
Writing the Next Chapter
Dear Reader, One of my favorite assignments at Dark Reading, when I first joined the newly launched media site in 2006, was to interview and write human-profile stories about cybersecurity industry pioneers. Although I...