Threat intelligence firm GreyNoise is warning of a “notable surge” in scanning activity targeting Progress MOVEit Transfer systems starting May […]
MOVEit Transfer Faces Increased Threats as Scanning Surges and CVE Flaws Are Targeted Read More »
Cybersecurity researchers have detailed a new campaign dubbed OneClik that leverages Microsoft’s ClickOnce software deployment technology and bespoke Golang backdoors
OneClik Malware Targets Energy Sector Using Microsoft ClickOnce and Golang Backdoors Read More »
Since June 9, 2025, Internet users located in Russia and connecting to web services protected by Cloudflare have been throttled
Russian Internet users are unable to access the open Internet Read More »
Welcome to this week’s edition of the Threat Source newsletter. Happy summer, friends! I hope everyone is staying cool and/or
Getting a career in cybersecurity isn’t easy, but this can help Read More »
Cybersecurity researchers have disclosed a critical vulnerability in the Open VSX Registry (“open-vsx[.]org”) that, if successfully exploited, could have enabled
Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks Read More »
Hey there, I hope you’ve been doing well! 🫶 AppSec as Glue: Building Partnerships to Scale Security At BSidesSF 2025, a
Developing a new video conferencing application often begins with a peer-to-peer setup using WebRTC, facilitating direct data exchange between clients.
Orange Me2eets: We made an end-to-end encrypted video calling app and it was easy Read More »
Cybercriminals are bypassing the guardrails that are supposed to keep AI models from carrying out criminal activities, according to researchers.
Jailbroken AIs are helping cybercriminals to hone their craft Read More »
Cisco has released updates to address two maximum-severity security flaws in Identity Services Engine (ISE) and ISE Passive Identity Connector
