Resources
Ransomware Group Behind Major Indonesian Attack: Many Masks, Little Sophistication
August 14, 2024 | The ransomware group Brain Cipher gained attention after a major attack on Indonesian government services.
CVE and NVD – A Weak and Fractured Source of Vulnerability Truth – Security Week
April 3, 2024 | The CVE List and National Vulnerability Database (NVD) are criticized for not being comprehe
Sophos Reveals Ransomware Attacks Are Now Targeting Backups – Hackread
April 3, 2024 | A Sophos report reveals ransomware attackers are increasingly targeting backups, making it h
US House Forbids Staff Members from Using AI Chatbot Microsoft Copilot – SC Magazine
April 1, 2024 | The US House of Representatives has banned staff members from using Microsoft's AI chatbot C
Dangerous Google Chrome Zero-Day Allows Sandbox Escape – Dark Reading
May 14, 2024 | Google released an emergency update for Chrome, addressing a zero-day vulnerability (CVE-2024
Strategic Cyber Defense: Balancing Threat-Centric and Risk-Centric Approaches – CPO Magazine
May 15, 2024 | In cybersecurity, distinguishing between vulnerabilities, threats, and risks is crucial.
AHA, H-ISAC Warn Hospitals About Black Basta Following Ascension Cyberattack – Healthcare IT News
May 13, 2024 | Following a major cyberattack on Ascension health system, the AHA and H-ISAC issued alerts ab
Securing Secrets: The State Department's Cyber Hunt – The CyberWire Daily
April 4, 2024 | The State Department is investigating an alleged cyber breach while the FCC considers regula
Malicious Latrodectus Downloader Picks Up Where QBot Left Off – Dark Reading
April 4, 2024 | Researchers have discovered a new malware downloader named "Latrodectus," used by initial ac
Google Rushes to Patch Second Actively Exploited Chrome Zero-Day in a Week – Secure World Magazine
May 15, 2024 | Google released an emergency update for Chrome (CVE-2024-4761), an out-of-bounds write flaw i
CISA Unveils Critical Infrastructure Reporting Rule – Security Boulevard
April 5, 2024 | CISA announced a new rule under the Cyber Incident Reporting for Critical Infrastructure Act