Cybersecurity

Gh0st RAT-based GodRAT attacks financial organizations

Summary In September 2024, we detected malicious activity targeting financial (trading and brokerage) firms through the distribution of malicious .scr (screen saver) files disguised as...

Increased Elasticsearch Recognizance Scans, (Tue, Aug 19th)

I noticed an increase in scans that appear to try to identify Elasticsearch instances. Elasticsearch is not a new target. Its ability to easily...

Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme – Krebs on Security

Cybercriminal groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage...

Poisoned Calendar invites, ChatGPT, and Bromide • Graham Cluley

A poisoned Google Calendar invite that can hijack your smart home, a man is hospitalised after...

MalwareTech – Darknet Diaries

Full Transcript MalwareTech was an anonymous security researcher, until he accidentally stopped WannaCry, one of the largest ransomware attacks in history....

Check your risk blind spot

Does your business truly understand its dependencies, and how to mitigate the...

That 16 Billion Password Story (AKA “Data Troll”)

Spoiler: I have data from the story in the title of this...

August Patch Tuesday includes blasts from the (recent) past – Sophos News

Microsoft on Tuesday announced 109 patches affecting 16 product families. Eighteen of the addressed issues are considered by Microsoft to be of Critical severity,...

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

Aug 13, 2025Ravie LakshmananVulnerability / Software Security Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could...

Rubrik & Sophos Enhance Cyber Resilience for Microsoft 365 – Sophos News

Cybersecurity attacks are rising sharply in 2025, and Microsoft has been one among many prominent targets. Research shows that 70 percent of M365 tenants...

Efimer Trojan delivered via email and hacked WordPress websites

Introduction In June, we encountered a mass mailing campaign impersonating lawyers from a major company. These emails falsely claimed the recipient’s domain name infringed on...

Mass Internet Scanning from ASN 43350 [Guest Diary]

During the last three months I've had a DShield sensor online and collecting data from a deployment in AWS. This week I did some...

Recent articles