New research reveals ransomware gang negotiation tactics based on analysis of 200+ extortion transcripts. Learn how these criminals operate and what strategies actually work when facing down a demand. Essential insights for any security team: substack.com/home/post/p-... #ransomware #cybersecurity

The “tough on crime” party handed threat actors a big win. By dismantling the Cyber Safety Review Board mid-investigation into the Chinese telecom hack, the Trump admin is weakening US cybersecurity & aiding adversaries. A catastrophic decision for national security. arstechnica.com/tech-policy/...

Govt now monitoring “negative sentiment” toward health insurance execs online after UHC’s CEO murder. Fusion centers flagging posts critical of corporate greed as “threats”—fueling fears of free speech suppression in the name of “security.” #CyberSecurity www.kenklippenstein.com/p/government...

Biden drops a sweeping cybersecurity EO 📜⚙️ Gov contractors must now prove secure dev practices & disclose updates. Will the next admin keep it? #CyberSecurity #DataPrivacy #DigitalTrust #Biden www.cnbc.com/2025/01/16/b...

TikTok ban incoming 🇺🇸➡️ Users flee… to a Chinese app?! 👀 “Red Note” (小红书) is now trending, as Americans say they’d rather hand data to Xi than trust Zuck, Elon, or the U.S. gov. Irony’s dead, but the data privacy debate is alive 🔥 #CyberSecurity #TikTokBan #DataOwnership

UN’s aviation agency hit by a “potential” breach—42,000 docs leaked, including PII, on hacking forums. Is global cybersecurity crumbling, or are threat actors just getting started? #CyberSecurity #DataBreach #UN www.bleepingcomputer.com/news/securit...

USPS under fire: IG report reveals criminal groups recruiting postal workers to steal mail, checks, and credit cards. With $1M stolen in one case and faulty cameras at facilities, is the system failing us? thehill.com/homenews/506... #CyberCrime #USPS #MailTheft

Struggling with inconsistent threat actor names? The IETF’s new draft proposes guidelines to standardize naming, reduce ambiguity, and enhance intelligence sharing. A must-read for #ThreatIntel pros. #CyberSecurity #MISP #Hackers #ThreatGroups www.misp-standard.org/rfc/threat-a...

Atos denies Space Bears ransomware attack claims, stating no breach of their systems occurred. The gang alleges otherwise, threatening a data leak next week. Who’s telling the truth? #CyberSecurity #Ransomware #SpaceBears #Infosec www.bleepingcomputer.com/news/securit...

🚨 Severe vulnerabilities in Microsoft Dynamics 365 and Power Apps Web API exposed sensitive data, including passwords and emails. These flaws, now patched, highlight the critical need for robust #CyberSecurity measures in APIs. #DataSecurity #Microsoft 🔗 thehackernews.com/2025/01/seve...

As we ring in the new year, it’s time to reflect on the most impactful cyber incidents of 2024. From massive data breaches to nation-state attacks, here’s a recap of the year’s biggest cybersecurity stories What lessons will you take into 2025? 🔗 www.bleepingcomputer.com/news/securit... #NYE

LockBit ransomware developer Rostislav Panev has been charged in the U.S. for creating tools behind BILLIONS in global damages 💻💰 Arrested in Israel, Panev allegedly developed malware to disable antivirus & exfiltrate data. #CyberSecurity #Ransomware #LockBit thehackernews.com/2024/12/lock...

🚨 Researchers uncover 4.5M fake stars on GitHub 🌟, often boosting malware disguised as pirated software & crypto bots. Fake stars surge in 2024, posing major risks to open-source trust & security. #CyberSecurity #GitHub #OpenSource #SupplyChainSecurity arxiv.org/abs/2412.13459

The Play ransomware gang claims responsibility for a cyberattack on Krispy Kreme 🍩💻, disrupting online orders & allegedly stealing sensitive data. The gang threatens to leak the data soon. #CyberSecurity #Ransomware #DataBreach #KrispyKreme www.bleepingcomputer.com/news/securit...

Hackers breached BeyondTrust’s Remote Support SaaS instances, exploiting an API key to reset account passwords. Two critical vulnerabilities discovered; patches applied for cloud users. Investigations ongoing. 🔒💻 #CyberSecurity #DataBreach #BeyondTrust #PAM www.bleepingcomputer.com/news/securit...

Iran-linked IOCONTROL malware is targeting SCADA & Linux-based IoT devices in the US and Israel, including fuel systems and IP cameras. Using MQTT for stealthy C2 comms, it can shut down critical services or steal data. 🔗 thehackernews.com/2024/12/iran... #CyberSecurity #Iran #Israel #Malware #IoT

Photobucket, once a nostalgic photo vault, now embroiled in controversy: a lawsuit alleges it auto-opted dormant users into terms allowing their biometric data—like face and iris scans—to be sold for AI training. Privacy breach or AI gold rush? 🔗 arstechnica.com/tech-policy/... #Privacy #AIEthics

Microsoft’s “AuthQuake” MFA flaw allowed unlimited brute-force attempts without alerting users. Attackers could bypass MFA in just an hour. A fix is in place now, but a reminder: MFA is best when configured with rate limits and alerts. 🔗 thehackernews.com/2024/12/micr... #CyberSecurity #MFA #Hack

Krispy Kreme’s sweet digital sales hit a sour note after a cyberattack disrupted online ordering and operations. While doughnuts still flow in-store, this shows even yummy treats aren’t immune to breaches. 🍩💻 🔗 www.bleepingcomputer.com/news/securit... #CyberSecurity #DataBreach #KrispyKreme #Donut

Law enforcement’s Operation PowerOFF dismantles 27 DDoS-for-hire platforms and leads to the arrest of admins. With 300 users identified, criminals are learning: renting chaos isn’t worth it. Let’s hope the lesson sticks. 🔗 www.bleepingcomputer.com/news/securit... #CyberSecurity #DDoS

A ransomware attack hit Artivion, a leading heart surgery device maker, encrypting systems and stealing sensitive data. With healthcare ransomware rising, critical patient safety and data security are on the line. 🔗 www.bleepingcomputer.com/news/securit... #CyberSecurity

CERT-UA warns of Russian-linked phishing targeting Ukraine’s defense forces. Fake NATO conference invites hide malware, steal Signal, Telegram, and even military system credentials. Stay vigilant, verify links, and secure your endpoints. 🔗 thehackernews.com/2024/12/cert... #CyberSecurity #Ukraine

Chinese hackers are abusing VSCode tunnels to maintain stealthy remote access during attacks. Signed EXEs, Azure traffic, and legit tools make detection tough. Monitor rogue VSCode launches & unexpected *.devtunnels.ms connections. 🔗 www.bleepingcomputer.com/news/securit... #CyberSecurity #APT

Microsoft 365 is having another rough day: Office web apps, Outlook, OneDrive, and more are down for some users. Microsoft blames token generation issues but promises a fix in ~2 hours. 🔗 www.bleepingcomputer.com/news/microso... #Microsoft365 #Outage

Black Basta ransomware steps up its game: • Email bombing victims to overwhelm inboxes • QR code phishing for credentials • Social engineering via fake IT support on Teams Hybrid attacks blend tech & tricks—stay alert and verify! 🔗 thehackernews.com/2024/12/blac... #CyberSecurity #Ransomware

Cybercrime gang turned Airbnbs into fraud hubs! Arrested in EU, they posed as bank staff and flaunted stolen wealth online. Victims left broke and traumatized. Reminder: Never trust unsolicited bank messages—verify through official channels 🔗 www.bleepingcomputer.com/news/securit... #CyberSecurity

🚨🔥 2024: The Year of Cyber Chaos! 🔥🚨 Salt Typhoon hacks telecoms, Europol breached, CrowdStrike outage hits 8.5M devices, Apple & AMD leaks, TfL cyberattack… the list goes on! What was YOUR biggest #CyberSecurity event of the year? 🌍💻 Drop your takes below! 🛡️👇 #Infosec #Hackers #News #Events

Prompt injection strikes again! Researchers reveal exploits in DeepSeek and Claude, enabling account takeovers, malicious commands, and terminal hijacks. GenAI’s attack surface keeps expanding—secure your integrations or brace for “ZombAIs.” 🔗 thehackernews.com/2024/12/rese... #CyberSecurity #AI

Tokyo University allegedly blocked Chinese grad applicants by embedding the keyword “Tiananmen Square” in their admissions page, exploiting China’s censorship. A shocking misuse of tech to enforce discrimination. 🔗 unseen-japan.com/tokyo-univer... #TechEthics #Discrimination #AcademicIntegrity

Romania annulled its presidential election after alleged Russian meddling on TikTok: 📱 25K fake accounts 💻 85K cyberattacks 🗳️ Coordinated disinfo Social media manipulation is rewriting the rules of democracy. 🔗 thehackernews.com/2024/12/roma... #CyberSecurity #TikTok #InfoSec

Microsoft’s new LLMail-Inject challenge lets you flex your skills in breaking (and defending) AI prompts. Test your ability to bypass defenses in a simulated email client. $10k prize pool and a chance to hack our future AI overlords! 🤖 ⚔️ 👑 #AI #CyberSecurity 🔗 msrc.microsoft.com/blog/2024/12...

Venmo’s new ‘Santa on Venmo’ ad campaign feels like a lesson in what not to do. Users are accidentally sending Santa money instead of requesting it—like employees wiring cash in CEO scams. Double-check before hitting send, whether it’s Santa or a “holiday rush” email. 🎅💸 #Infosec #SocialEngineering

Gamaredon hackers (aka BlueAlpha) are using Cloudflare Tunnels and DNS Fast-Flux to hide GammaDrop malware in phishing attacks. With tools to exfiltrate browser data, Signal/Telegram info, etc., this group targets Ukrainian & NATO entities. 🔗 thehackernews.com/2024/12/hack... #CyberSecurity #Threat

Critical vulnerabilities in popular open-source ML frameworks like PyTorch, MLflow, and H2O could lead to remote code execution and backdoored models. Developers, don’t blindly trust “safe” ML repositories! 🔗 thehackernews.com/2024/12/rese... #CyberSecurity #AI #MachineLearning

Mozilla’s rebrand promises to “Reclaim the Internet” with privacy-first tools and grassroots activism. With Big Tech eroding trust online, a unified front like this could be what we need. Here’s hoping the new flag isn’t just for show. 🔗 blog.mozilla.org/en/mozilla/m... #CyberSecurity #Mozilla

🚨 Bashe ransomware claims to have breached Certified Information Security (CIS)—the hub for CISSP, CISM, & ISO certifications. If true, security pros worldwide could be at risk. No links to promote them, but practitioners: check your accounts NOW. ⚠️ #CyberSecurity #Infosec #Ransomware #CISSP #CIS

Ransomware gang Brain Cipher claims to have breached Deloitte UK, alleging 1TB of stolen data and mocking “elementary” security flaws. The group says they still have access. Deloitte hasn’t confirmed—Dec 15 is the ransom deadline. www.digit.fyi/deloitte-cyb... #CyberSecurity #Ransomware #Deloitte

An AI chatbot startup, WotNot, exposed 346,000 sensitive files, including passports, medical records, and resumes, due to a misconfigured Google Cloud bucket. It took over two months to fix the issue after discovery. 🔗 www.bitdefender.com/en-us/blog/h... #DataBreach #CyberSecurity #AI

Chinese hackers conducted a 4-month-long attack on a major U.S. organization. With ties to state-sponsored ops, this breach highlights growing risks from nation-state cyber threats. 🔗 thehackernews.com/2024/12/rese... #CyberSecurity #ChinaHack #ThreatIntel #Politics #China #Tensions

Chinese hackers, dubbed “Salt Typhoon,” have stolen metadata from a “large number” of Americans, targeting telecom giants like Verizon and AT&T. Data reveals who, when, and where—intel with massive implications. The White House is taking action. 🔗 www.reuters.com/technology/c... #CyberSecurity

Tenable adds patch management to its lineup—finally linking Nessus with autonomous remediation. With attackers exploiting vulnerabilities in under a week, this move aims to cut the lag between discovery and action. Overdue, but much needed. 🔗 www.globenewswire.com/news-release... #CyberSecurity

Russian money laundering networks tied to narco traffickers, ransomware gangs, and Kremlin spies uncovered. Think “McMafia” meets “Narcos” with a dash of “Mr. Robot.” Operation Destabilise is exposing the dark web of cash, crypto, and crime. 🔗 therecord.media/russian-mone... #CyberCrime #Money

The FBI wants you to stop texting unless it’s encrypted. Maybe the NSA is tired of eavesdropping on your crush texting “lol” when it’s clearly not funny! 👀 Switch to Signal before your group chat leaks faster than election-year scandals! 📑 🔗 www.forbes.com/sites/zakdof... #CyberSecurity #Privacy

Think your phone is safe? Think again. iVerify’s spyware scanner already flagged 7 Pegasus infections, proving no one is off-limits—activists, gov officials, even business leaders. Spyware is everywhere. Time to secure your device. 🔗 www.wired.com/story/iverif... #CyberSecurity #Spyware #Pegasus

Enron is “back,” claiming “permissionless innovation”—because nothing screams security like the OG kings of fraud! A timely reminder: if they can rebrand, so can hackers. Tighten your defenses before the next “bold new vision” strikes 🔗 www.cbsnews.com/amp/news/enr... #CyberSecurity #Enron #Parody

📢 The CFPB proposes blocking data brokers from selling Americans’ sensitive info like Social Security & phone numbers under the FCRA. A bold move to protect privacy and close loopholes putting personal data at risk. 🔗 techcrunch.com/2024/12/03/u... #PrivacyProtection #DataSecurity

🌍 EU’s First Cybersecurity Report Is Here! 🌐 ENISA unveils the first-ever report on cybersecurity across the EU—highlighting rising threats, gaps in sector resilience, and increased citizen awareness. Take a look! 🔗 www.enisa.europa.eu/news/eus-fir... #CyberSecurity #EU #ENISA #DigitalSafety

🚨 Android Vulnerabilities Alert 🚨 Critical CVEs in Android OS (patch before 2024-12-05): • CVE-2024-43767: Remote Code Execution • CVE-2024-43764, CVE-2024-43769: Privilege Escalation Patch now to secure devices! 🔗 www.cisecurity.org/advisory/mul... #CyberSecurity #Android #Update

Storm-1811 exploits RMM tools like Microsoft Quick Assist in a help desk scam that ends with Black Basta ransomware. Their attack: email bombing ➡️ fake IT support ➡️ remote access ➡️ SSH backdoor. Monitor your endpoints, RMM tools, and Teams settings! redcanary.com/blog/threat-... #CyberSecurity

A South Korean CEO was arrested for shipping 240k satellites with hidden DDoS capabilities 😱—98k had it pre-installed, the rest got it via updates. Users unknowingly became part of attacks! Cybercrime takes a new orbit 🌍🚀 www.bleepingcomputer.com/news/securit... #CyberSecurity #DDoS #CyberCrime