Aug 21, 2025 Today, I came across some troubling news in the cybersecurity world. The release of face-morphing detection guidelines by NIST has raised concerns about the potential threats posed by this technique to various sectors. The availability of face-morphing software online makes it easier for attackers to bypass facial
Aug 20, 2025 I recently came across some alarming news regarding cybersecurity threats in various industries. One email discussed the significance of Zero Trust and AI in cybersecurity, emphasizing the importance of companies like Zscaler in protecting against AI-powered attacks and monitoring employee activities to prevent data leakage. A case
Aug 19, 2025 Email1 Subject: Exciting News: Academics Discover Groundbreaking 5G Attack Sender: risky-biz@ghost.io In a recent development, a team of academics has uncovered a groundbreaking 5G attack that bypasses the need for a malicious base station. The attack, detailed in a new software toolkit named Sni5Gect, allows for the
Aug 18, 2025 Today, I learned about the concerning cybersecurity threats and vulnerabilities that have been recently disclosed. With Microsoft releasing 111 security updates, it’s crucial to address the zero-day flaw in Kerberos that could lead to domain compromise if exploited. Additionally, critical vulnerabilities in Windows Graphics and GDI+ require
Aug 17, 2025 The email provides a curated list of the best infosec-related long reads for the week, including a twisted story of two men torturing someone for crypto passwords, insights into Russia’s cyber sector supporting the Ukraine war, a brain-reading implant with password protection, debunking the theory that social
Aug 16, 2025 Today’s breaking news reveals a critical vulnerability in the HTTP/2 protocol known as MadeYouReset, discovered by Deepness Lab researchers. This vulnerability allows for extensive DDoS attacks, posing a significant threat to servers by exhausting memory and crashing systems. What’s alarming is that MadeYouReset bypasses previous patches like
Aug 15, 2025 I recently came across some alarming news in the cybersecurity world. Drug cartels are now being identified as Advanced Persistent Threats (APTs), with federal government agencies facing cyber intrusions. The breach of the judiciary’s electronic case filing system has exposed sensitive court data, raising concerns about potential
Aug 14, 2025 I just heard some concerning news about cyber threats targeting Open VSX, a database of Visual Studio Code extensions managed by the Eclipse Foundation. Malicious VS Code extensions are being uploaded by crypto-thieves, installing ScreenConnect clients on users’ PCs to access and empty wallets of blockchain and
Aug 13, 2025 Recently, the US Justice Department took action against the Russian ransomware gang BlackSuit and Royal, seizing servers and $1 million in Bitcoin. This move was part of a global effort involving multiple countries’ law enforcement agencies to combat cyber threats. The gang had targeted critical infrastructure in
Aug 12, 2025 Today’s news highlights several critical cybersecurity issues that demand immediate attention. Google has rewarded a bug bounty hunter with $250,000 for discovering a sandbox escape vulnerability in the Chrome browser, emphasizing the importance of addressing such vulnerabilities promptly. Additionally, WinRAR has patched an actively exploited zero-day vulnerability,