Aug 19, 2025 Email1 Subject: Exciting News: Academics Discover Groundbreaking 5G Attack Sender: risky-biz@ghost.io In a recent development, a team of academics has uncovered a groundbreaking 5G attack that bypasses the need for a malicious base station. The attack, detailed in a new software toolkit named Sni5Gect, allows for the
Aug 18, 2025 Today, I learned about the concerning cybersecurity threats and vulnerabilities that have been recently disclosed. With Microsoft releasing 111 security updates, it’s crucial to address the zero-day flaw in Kerberos that could lead to domain compromise if exploited. Additionally, critical vulnerabilities in Windows Graphics and GDI+ require
Aug 17, 2025 The email provides a curated list of the best infosec-related long reads for the week, including a twisted story of two men torturing someone for crypto passwords, insights into Russia’s cyber sector supporting the Ukraine war, a brain-reading implant with password protection, debunking the theory that social
Aug 16, 2025 Today’s breaking news reveals a critical vulnerability in the HTTP/2 protocol known as MadeYouReset, discovered by Deepness Lab researchers. This vulnerability allows for extensive DDoS attacks, posing a significant threat to servers by exhausting memory and crashing systems. What’s alarming is that MadeYouReset bypasses previous patches like
Aug 15, 2025 I recently came across some alarming news in the cybersecurity world. Drug cartels are now being identified as Advanced Persistent Threats (APTs), with federal government agencies facing cyber intrusions. The breach of the judiciary’s electronic case filing system has exposed sensitive court data, raising concerns about potential
Aug 14, 2025 I just heard some concerning news about cyber threats targeting Open VSX, a database of Visual Studio Code extensions managed by the Eclipse Foundation. Malicious VS Code extensions are being uploaded by crypto-thieves, installing ScreenConnect clients on users’ PCs to access and empty wallets of blockchain and
Aug 13, 2025 Recently, the US Justice Department took action against the Russian ransomware gang BlackSuit and Royal, seizing servers and $1 million in Bitcoin. This move was part of a global effort involving multiple countries’ law enforcement agencies to combat cyber threats. The gang had targeted critical infrastructure in
Aug 12, 2025 Today’s news highlights several critical cybersecurity issues that demand immediate attention. Google has rewarded a bug bounty hunter with $250,000 for discovering a sandbox escape vulnerability in the Chrome browser, emphasizing the importance of addressing such vulnerabilities promptly. Additionally, WinRAR has patched an actively exploited zero-day vulnerability,
Aug 10, 2025 Recently, I came across a troubling report revealing the Huione Group’s involvement in laundering billions through scams and crypto heists, sparking concerns about potential espionage on the UK financial system by China. The detailed findings exposed the extensive money laundering operations of Huione International Pay, underscoring the
Aug 09, 2025 Today, I came across some urgent news regarding cybersecurity threats that require immediate attention. The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive to federal agencies to patch a new attack vector in Microsoft Exchange email servers. This vulnerability in hybrid environments allows attackers