The Python team at PyPI are changing procedures to detect when domain resurrection attacks are occurring in the eco system. These take over abandoned domains and use this to add malware to well known tools. blog.pypi.org/posts/2025-0...

Interesting run down on how a threat actor is compromising domains on Snap Publisher in order to distribute malware. blog.popey.com/2026/01/malw...

Interesting deep dive into the VoidLink Linux malware by Sysdig www.sysdig.com/blog/voidlin...

Interesting report from Socket Security on 5 malicious Google Chrome extensions that hijack sessions to major ERP platforms. Fortunately on about 2k users were affected before they were removed. socket.dev/blog/5-malic...

New open source tool from Splunk researcher Michael Haag called ADTrapper. This performs analysis on Microsoft AD logs looking for traces of exploits in progress. github.com/MHaggis/ADTr...

The next #AI updates to Apple Siri will be coming from Google Gemini. Another sign that OpenAI is loosing ground in the assistant race. blog.google/company-news...

Time to check the list of VScode packages that have been removed by Microsoft from the Marketplace due to security issues and make sure they are not on your deployment. github.com/microsoft/vs...

That time again to check all the new security advisories released on Palo Alto Networks gear and get patching. security.paloaltonetworks.com

That time again to check all the new security advisories released on Juniper gear and get patching. supportportal.juniper.net/s/global-sea...

Interesting deep dive into the Ransomware strain CrazyHunter created by apparently Chinese groups and deployed in Taiwanese organizations. www.trellix.com/blogs/resear...

Nice outline on just why sorting plastic for recycling centers is so hard and only 10% is currently recycled by NIST. www.nist.gov/how-do-you-m...

Outline of the currently available Verifiable Digital Credentials from NIST. Good introduction to the current state of the options and how to evaluate them. www.nist.gov/blogs/cybers...

The new California DROP (Delete Request and Opt-out Platform) law has gone live. State residents can register to have over 500 data brokers remove them from sale collections. privacy.ca.gov/drop/

CES conference announcement that #AI is coming for every new TV model from Samsung. techxplore.com/news/2026-01...

Rumor has it that Discord is getting ready to go public with their IPO and move to full monetization of the platform. www.gamesindustry.biz/discord-repo...

A new study by the Dutch government finds that most teen hackers do leave their criminal choices behind by their twenties. www.tweedekamer.nl/kamerstukken...

Good news that Australian authorities have convicted and sentenced to 7 years the man responsible for deploying evil twin WiFi networks for phishing credentials in the Perth, Melbourne and Adelaide airports. www.afp.gov.au/news-centre/...

Unfortunately, #AI slop has come not just to search but to Wikipedia. At least the team seems to be on top of the influx of bad information and working on a solution.

Looks like ads and sponsored content are coming this year to ChatGPT. www.tomshardware.com/tech-industr...

The latest move in advertising surveillance dystopia are facial recognition billboards at mass transit sites in Canada. Fortunately the privacy commissioner is already investigating their use. therecord.media/canada-priva...

New regulations in South Korea apply fines to companies that have repeated data breaches or delay reporting of security incidents. www.koreatimes.co.kr/southkorea/2...

The new Baseline Security Mode is rolling out on Microsoft products through March of this year. This dashboard makes applying recommended minimum security settings apply for enterprise administrators. mc.merill.net/message/MC11...

Interesting end of year report from Cloudflare shows what the mix of traffic is and trends on their hosted domains. radar.cloudflare.com/year-in-revi...

Good news that Ukrainian authorities, in cooperation with Czech Republic, Latvia & Lithuania, have taken down fraud call center operators in three cities. There were over 400 victims with losses over €10M. www.eurojust.europa.eu/news/fraudul...

Researchers at KU Leuven found that brand new embedded devices are shipping with browsers 3 years old and thus vulnerable on day one. All 5 eReaders and 24 of 35 smart TVs. And firmware updates don’t always include the browser. nieuws.kuleuven.be/nl/2025/vero...

The US state of New York has passed a law requiring #AI companies with $500M or more in revenue to publish their safety protocols and report safety incidents within 72 hours. iapp.org/news/a/hochu...

New Draft document from NIST with advice on applying the standard Cyber security frameworks to the new #AI technologies now available. Comments are accepted until January 30. www.nist.gov/news-events/...

Interesting report from Proofpoint on how phishing for Microsoft 365 OAuth device codes are being used by both criminal and state espionage actors. www.proofpoint.com/us/blog/thre...

New open source tool from Nebulock that creates an Agent Threat Hunting Framework to use AI tools in the automation for threat hunting processes. nebulock.io/blog/agentic...

Report on the Google Wiz division zero day hacking event that found 11 exploits and awarded $320k in bounties for the event. www.wiz.io/blog/wiz-zer...

Nice outline of how all the various Chinese APT groups are organized and operating collecting information from all the public reports from a range of security researchers. nattothoughts.substack.com/p/the-many-a...

Interesting report from ESET researchers potentially identifying a new Chinese APT they call LongNoseGoblin going after governments across Southeast Asia and Japan. www.welivesecurity.com/en/eset-rese...

Good news that Dutch authorities have arrested a suspect in bank fraud using real identities of victims to create bank accounts via facial recognition bypass. He was able to have victims eyes, nose & mouth placed over his face for the process. www.politie.nl/nieuws/2025/...

Good news in the end of year report from the US Treasury Department shows a decline in payments made to Ransomware attacks. We are moving in the right direction, but still giving $700M to criminals in the process. cyberscoop.com/ransomware-p...

I ask my esoteric fact questions to search for answers. Both Microsoft & Google do well but sometimes Bing Copilot either misinterprets the question or gives a wrong answer while Gemini does well. This is a good example, was the Japanese internment camp ruled unconstitutional.

Summary recommendations from Microsoft on the Minimum Security standards for multiple products like Office, Sharepoint & Teams. mc.merill.net/message/MC11...

Thanks for another year with the great presentations from Graphiant, Nokia & Cisco at @techfieldday.com at #NFD39 Hope everyone has a great holiday season and happy new year.

Interesting report from Brattle on the threat actors in the energy sector and recommendations on cyber security in response. www.brattle.com/insights-eve...

Interesting report from Bitsight finds that over 1k MCP servers found on the internet have no authorization in place and exposing sensitive data. Let’s be careful when adding new features to your services. www.bitsight.com/blog/exposed...

New rules from Microsoft are Expanding the Public Bug Bounty program to cover any vulnerabilities affecting their online services. This will include 3rd party domains for code that also affect Microsoft projects. www.microsoft.com/en-us/msrc/b...

New feature on Android phones rolling out in US, Mexico and Germany will allow the sharing of live video when making calls to emergency service numbers. blog.google/products/and...

Survey of EU Public and private critical sector organizations says they are having issues attracting and retaining Cyber Security professionals. www.enisa.europa.eu/publications...

Good summary from the UK NCSC on just what LLM prompt injection is and how it works. They note that the very nature of LLM will make this a forever cyber security problem. www.ncsc.gov.uk/blog-post/pr...

Both Apple and Google have started notifying users of spyware being deployed on their phones with up to 150 countries around the world affected. www.reuters.com/technology/a...

There are security vulnerabilities discovered in the PCIe communications found by CMU in Pittsburgh. Just in time for the even broader use of PCI in shared environments like #AI data centers. kb.cert.org/vuls/id/404544

The Android anti scam call prevention pilot program is expanding from Brazil and India to the UK. The feature monitors calls and alerts the user when financial scams are likely. security.googleblog.com/2025/12/andr...

Interesting report from the AWS team on the Chinese threat actors Earth Lamia and Jackpot Panda exploiting web application vulnerabilities around the world. aws.amazon.com/blogs/securi...

Interesting deep dive by CISA on the BRIKSTORM malware attack on government systems. www.cisa.gov/news-events/...

Good introduction on how to check out and get started with FRR, the Free Range Routing open source project for network engineers. ctrlaltroute.com/2025/11/14/g...

Interesting case study from Amazon on how Iranian state cyber actors are coming into the kinetic world once they compromise the cyber assets with two examples. aws.amazon.com/blogs/securi...