Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Stolen passwords are exposing America’s water providers to hackers
New security research has found that well over a thousand U.S. water and wastewater providers are exposed to hacks due to malware that’s capable of stealing their employees’ passwords and active logged-in sessions. The findings by cybersecurity defense firm S
The Accelerationist Case for Frontier Pacing
The following article originally appeared on Venkatesh Rao’s Substack, Contraptions, and is being republished here with the author’s permission. The sole athletic achievement of my life came in 1993: winning the IIT Bombay freshman 50m freestyle race with a t
Stolen passwords are exposing America's water providers to hackers | TechCrunch
New security research has found that well over a thousand U.S. water and wastewater providers are exposed to hacks due to malware that’s capable of stealing their employees’ passwords and active logg
Complex AI threats increasing stress levels of cybersecurity professionals
As AI makes attacks more sophisticated and increases the volume of cybersecurity work, so has the stress levels of cybersecurity professionals. A latest report from ISACA, a global professional body
The AI Your Company Never Approved Is Already Making Decisions
The AI Your Company Never Approved Unapproved generative AI is already in daily work. Spotting it means watching prompts, SaaS, and endpoints. Managing it means sanctioned tools people will actually use, plus controls that treat paste as a data path. A produc
Android Phone Users Have A New Malware Threat To Worry About
A frightening new form of Android malware was recently discovered and unveiled by security researchers from Zimperium. Posting on Zimperium's blog, the team has shared key findings about the aptly-na
Microsoft and Coinbase probe leads to arrest of crooks behind ‘EvilTokens’, a DIY phishing network powered by AI
We’ve all seen the emails: A spoofed message from your company’s CFO or a vendor asking you to pay an outstanding invoice. These phishing messages lead to millions of dollars of fraudulent payments every year, and are becoming more realistic all the time. The
Microsoft dismantles AI-powered phishing platform EvilTokens
The dismantling of EvilTokens highlights the critical need for collaborative cybersecurity efforts to combat sophisticated phishing threats globally.
Map Shows Which European Countries Are Preparing Citizens for Crisis
Governments across Europe are increasingly telling citizens to prepare at home for a major crisis like war, extreme weather and cybersecurity threats, with Ireland becoming the latest country to push emergency preparedness guidance directly into households. L
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining access to internal services and stealing sensitive data on employees and job applicants.
Foreign Capitals, K.M. and the Pressure at the Ballot Box, Nikos A.’s Airport Transfers and Alexis’ Bench — Let’s All Go to Katerina for Psychotherapy
///
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely shifting tactics in response to recent security controls. "Indexed-btree is a malicious npm package mim