Episodes

  • Threat Bulletin #265
    May 3 2024

    Developers targeted with Python backdoor during false job interviews.

    New UK law now in effect limits default passwords on smart devices.

    New malware emerges targeting small office and home routers.

    Show more Show less
    7 mins
  • Threat Bulletin #264
    Apr 26 2024

    MITRE breached using two Ivanti zero days.

    CrushFTP victim of targeted zero day exploitation.

    ArcaneDoor campaign targets vulnerable Cisco devices.

    Show more Show less
    6 mins
  • Threat Bulletin #263
    Apr 19 2024

    Large scale exploitation of Palo Alto CVE following PoC disclosures.

    Atlassian vulnerability leveraged to deploy Cerber ransomware.

    PuTTY flaw can be used to obtain private cryptographic keys.

    Show more Show less
    6 mins
  • Threat Bulletin #262
    Apr 12 2024

    Warnings issued regarding 10/10 CVSS score Rust vulnerability.

    Researchers speculate LLM wrote Powershell for malware strain.

    Change Healthcare hit by ransom demand again following AlphV exit scam.

    Show more Show less
    7 mins
  • Threat Bulletin #261
    Apr 5 2024

    Sophisticated supply chain attack attempted against multiple Linux distros.

    Linux false Sudo prompt flaw has persisted for over a decade.

    DinodasRAT now targeting Linux servers with new variant.

    Show more Show less
    6 mins
  • Threat Bulletin #260
    Mar 28 2024

    Huge darknet marketplace seized by German takedown effort.

    Muddywater group using legitimate RM tools for access.

    APT31 members sanctioned following US infrastructure attacks.

    Show more Show less
    5 mins
  • Threat Bulletin #259
    Mar 22 2024

    Fujitsu discover malware compromised systems.

    Russian actors may be targeting Ukrainian telecoms with new wiper malware.

    New DoS technique discovered able to create infinite feedback loop.

    Show more Show less
    5 mins
  • Threat Bulletin #258
    Mar 15 2024

    Russian groups accesses Microsoft source code in follow up from January attack.

    StopCrypt, the ransomware still targeting individuals over business has been upgraded.

    DarkGate leverage recent SmartScreen vulnerability in attacks.

    Show more Show less
    5 mins