Threat hunters have discovered a set of previously unreported domains, some going back to May 2020, that are associated with […]
45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage Read More »
This week on the Lock and Code podcast… In the late 2010s, a group of sheriffs out of Pasco County,
This “insidious” police tech claims to predict crime (Lock and Code S06E18) Read More »
Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account.
GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies Read More »
Cybersecurity researchers have detailed a new sophisticated malware campaign that leverages paid ads on search engines like Google to deliver
GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms Read More »
We’re making it easier to run your Node.js applications on Cloudflare Workers by adding support for the node:http client and
Bringing Node.js HTTP servers to Cloudflare Workers Read More »
Once again, phishers are targeting PayPal users by abusing existing legitimate infrastructure. Only this time they’re not abusing PayPal’s platform,
iCloud Calendar infrastructure abused in PayPal phishing campaign Read More »
Cybersecurity never slows down. Every week brings new threats, new vulnerabilities, and new lessons for defenders. For security and IT
Over the past two and a half years (January 2023 through June 2025), Cisco Talos Incident Response (Talos IR) has
Stopping ransomware before it starts: Lessons from Cisco Talos Incident Response Read More »
When Attackers Get Hired: Today’s New Identity Crisis What if the star engineer you just hired isn’t actually an employee,
You Didn’t Get Phished — You Onboarded the Attacker Read More »
