Russian hacker admits helping Yanluowang ransomware infect companies
A Russian hacker accused of helping ransomware gangs break into businesses across the United States is set to plead guilty, according to recently filed federal ...
Read More...
The rising tide of cyber attacks against the UK water sector
Critical infrastructure is once again in the spotlight, as it is revealed that several UK water suppliers have reported cybersecurity incidents over the last tw...
Read More...
Spam text scammer fined £200000 for targeting people in debt after sending nearly one million messages
The UK Information Commissioner’s Office (ICO) has levied a fine of £200,000 against a sole trader who sent almost one million spam text messages to people acro...
Read More...
The human cost of the UK Government’s Afghan data leak
Can data leaks do real harm? Yes, they can. And so can a failure to respond appropriately.
Read More...
Best Practices
Largest-ever cloud DDoS attack pummels Azure with 364B packets per second
Aisuru botnet strikes again, bigger and badder
Azure was hit by the "largest-ever" cloud-based distributed denial of service (DDoS) attack, originating from the...
Read More...
SAP portal outage raises questions over vendors cloud readiness
Disruption left customers unable to track support cases, upgrades, or patching work
SAP has apologized for the recent outage of its SAP for Me portal, a cloud-b...
Read More...
Logitech leaks data after zero-day attack
PLUS: CISA still sitting on telecoms security report; DoorDash phished again; Lumma stealer returns; and more
INFOSEC IN BRIEF The US Senate passed a resolution...
Read More...
FBI flags scam targeting Chinese speakers with bogus surgery bills
Crooks spoof US insurers, threaten bogus extradition to pry loose personal data and cash
Chinese speakers in the US are being targeted as part of an aggressive ...
Read More...
New Threats and Vulnerabilities
Cl0p claims ransomware hit on NHS
Ransomware gangsters claim to have attacked the NHS, but clarity on the nature of the incident is yet to emerge
Read More...
Microsoft users warned over privilege elevation flaw
An elevation of privilege vulnerability in Windows Kernel tops the list of issues to address in the latest monthly Patch Tuesday update
Read More...
How Microsoft finally makes good on its syncable passkey promise - and whats coming next
The phased rollout of Microsoft's platform authenticator strategy began last week for Edge on Windows 10 and 11. Here's what it does for you.
Read More...
Major Cloudflare outage took down ChatGPT X and Spotify Tuesday - heres what happened
A major outage rippled across the web, knocking many of the internet's biggest sites offline.
Read More...
Ransomware resilience may be improving in the health sector
A Sophos report on ransomware highlights resilience improvements among healthcare organisations but warns that the wider threat is still live and growing.
Read More...
Patch Management
Leading AI companies accidentally leak their passwords and digital keys on GitHub – what you need to know
Many of the world's top artificial intelligence companies are making a simple but dangerous mistake. They are accidentally publishing their passwords and digita...
Read More...
LLM side-channel attack could allow snoops to guess what youre talking about
Encryption protects content, not context
Mischief-makers can guess the subjects being discussed with LLMs using a side-channel attack, according to Microsoft re...
Read More...
[R1] Stand-alone Security Patch Available for Tenable Security Center versions 651 and 660: SC-20250921
[R1] Stand-alone Security Patch Available for Tenable Security Center versions 6.5.1 and 6.6.0: SC-202509.2.1
Jason Schavel
Tue, 09/30/2025 - 12:32
...
Read More...