NSA revives ‘Tailored Access Operations’ name for elite hacking unit
The National Security Agency has rebranded its elite hacking division, though the new name will be familiar to anyone who […]
A Primer on Cross-Border Speech Regulation and the EU’s Digital Services Act
Some U.S. politicians have recently characterized European platform and social media regulation laws as “censorship” of speech in the U.S.
Invoice Phishing Attacks Are Abusing the Shop App
Threat actors are abusing Shop, a legitimate app developed by Shopify, to launch phishing attacks, according to researchers at Gen
WolfSSL, GeoVision, VTK vulnerabilities
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three vulnerabilities in WolfSSF, fourteen in GeoVision, and one vulnerability in
Inside the Modern SOC: The 72-Minute Race
The Speed Gap: Where Strategy Meets Reality This marks the beginning of our series, Inside the Modern SOC: Trends and
Quishing Takes Advantage of Popular Marketing Tool
Quick response (QR) codes are two-dimensional barcodes that can store data. They are made up of colored (though usually black)
More Odd DNS Records: NIMLOC
Yesterday, I talked about NAPTR records and how they are related to RCS. But there is another “odd” record that
SHub Reaper | macOS Stealer Spoofs Apple, Google, and Microsoft in a Single Attack Chain
Infostealers targeting macOS have continued to proliferate over the last two years, with threat actors iterating on successful techniques across
“We Want Texans to Know Their Rights”: Q&A with Mayday Health on the Impact of Surveillance on Abortion Care
Last May, EFF reported that a sheriff’s office in Texas searched data from more than 83,000 automated license plate reader
Vibe-Coded Malware Caught in Active Directory Attack
A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an