A Cyber Security Veteran with over 10 years experience in Incident Response, Threat Intelligence, & Detection Engineering. This is my passion project to connect and share with others in the Industry!
Daily News Update
4 articles were published in the last 24 hours, covering 3 topics: China Targets Fired US Govt Workers with Fake Consulting Gigs * Chinese intelligence services are reportedly using fake consulting and headhunting firms to recruit recently laid-off US federal employees, leveraging their potential need for new work and access to
Red Letter Brief
Amidst the US-China trade war drama, would China actually pull the trigger on destructive cyber attacks using known footholds (think Volt & Salt Typhoon) in US critical infrastructure? Probably not, but expect a surge in cyber espionage and signaling campaigns targeting US telcos and leadership.
Red Letter Brief
US cybersecurity leadership is dangerously eroding as strategic policy gives way to the President's political grievances. These vindictive actions have dismantled expertise and created clear weaknesses which America's adversaries are sure to capitalise on.
Daily News Update
Australian Super (Pension) Funds targeted in successful Credential Stuffing attack draining member funds. Trump fires NSA/CyberCom Director and NSA Deputy Director over loyalty fears. Incident Response is a race - because it has to be. CVSS 10 RCE vuln in Apache Parquet disclosed, patch now!
Daily News Update
Chinese group exploiting Ivanti RCE bug since mid-March to drop web shells; DNS Fast Flux increasingly used by cyber crims & nation-states; GitHub Supply Chain attack traced to leaked Access Token in a CI workflow; Oracle says breach is of legacy system - receipts show otherwise.
Daily News Update
Hunters International's transition to Data Extortion model could indicate the "impose cost" offensive targeting Ransomware is paying off. Trump Administration uses commercial email for sensitive military discussions. Verizon API flaw allowed unrestricted access to customer call history.
Daily News Update
Increased scans of Palo Alto GlobalProtect devices may indicate imminent attack. Nakasone names China the biggest Cyber threat to the US. DPRK expands prolific IT Worker campaigns to Europe. Talos finds Identity a key culprit in 69% of Ransomware incidents.
Daily News Update
DPRK actors actively infiltrate global businesses, gaining privileged access and pivoting to 3rd parties. Lazarus adopts "ClickFix" tactics, luring job seekers and targeting non-technical roles. Attackers abuse malicious WordPress mu-plugins, a stealthy technique to inject code into every page.
Daily News Update
Crocodilus malware is targets Android crypto wallets with social engineering, bypassing typical security measures to steal seed phrases. Microsoft's "Quick Machine Recovery" tool could automatically fix boot crashes caused by bad drivers or configurations, e.g. CrowdStrike's faulty update from 2024.
Daily News Update
Malware authors increasingly use niche languages like Rust, Nim, and even Phix to bypass traditional security tools and complicate static analysis. The DOJ seized $8.2M in USDT from romance scams, revealing sophisticated manipulation tactics and links to human trafficking in Cambodia and Myanmar.
Daily News Update
A breach at Oracle Health compromised patient data, with Oracle allegedly shifting responsibility to hospitals and avoiding documentation. A Walmart subsidiary is investigating claims of a Clop ransomware attack, potentially linked to the Cleo file transfer vulnerability.
Daily News Update
Audio Summary: Friday, March 28, 2025 (Australia/Melbourne)0:00/330.61× Infostealer Campaign Compromises 10 npm Packages Ten npm packages were updated with malicious code to steal environment variables and other sensitive data from developers' systems. The campaign targeted multiple cryptocurrency-related packages, and the popular 'country-currency-map'