Red Letter Brief
Amidst the US-China trade war drama, would China actually pull the trigger on destructive cyber attacks using known footholds (think Volt & Salt Typhoon) in US critical infrastructure? Probably not, but expect a surge in cyber espionage and signaling campaigns targeting US telcos and leadership.
Daily News Update
Chinese group exploiting Ivanti RCE bug since mid-March to drop web shells; DNS Fast Flux increasingly used by cyber crims & nation-states; GitHub Supply Chain attack traced to leaked Access Token in a CI workflow; Oracle says breach is of legacy system - receipts show otherwise.
Daily News Update
Hunters International's transition to Data Extortion model could indicate the "impose cost" offensive targeting Ransomware is paying off. Trump Administration uses commercial email for sensitive military discussions. Verizon API flaw allowed unrestricted access to customer call history.
Daily News Update
Increased scans of Palo Alto GlobalProtect devices may indicate imminent attack. Nakasone names China the biggest Cyber threat to the US. DPRK expands prolific IT Worker campaigns to Europe. Talos finds Identity a key culprit in 69% of Ransomware incidents.
Daily News Update
Audio Summary: Thursday, March 27, 2025 (Australia/Melbourne)0:00/292.1521× Chinese ‘FamousSparrow’ Hackers Resurface The Chinese government-backed hacking group FamousSparrow, thought to be dormant since 2022, has allegedly been targeting organisations in the U.S., Mexico, and Honduras. ESET researchers discovered suspicious activity on a U.S. trade
Daily News Update
Audio Summary: Tuesday, March 25, 2025 (Australia/Melbourne)0:00/390.3121× Critical Flaw in Next.js Allows Authorization Bypass A critical severity vulnerability, tracked as CVE-2025-29927, has been discovered in the Next.js web development framework, potentially allowing attackers to bypass authorization checks. The flaw enables attackers to send
Daily News Update
Audio Summary: Friday, March 21, 2025 (Australia/Melbourne)0:00/508.2481× Taiwan Critical Infrastructure Targeted by Hackers Hackers with apparent ties to China-based groups like Volt Typhoon are targeting critical infrastructure in Taiwan. Cisco Talos discovered a malicious campaign, active since at least 2023, attempting to establish long-term access
Daily News Update
Tomcat RCE Vulnerability Under Attack A critical remote code execution (RCE) vulnerability in Apache Tomcat, tracked as CVE-2025-24813, is being exploited in the wild. Attackers are using proof-of-concept (PoC) exploits - the first of which being posted just 30 hours after disclosure - to take over servers via a PUT
Daily News Update
This post is an AI-generated summary of News Articles from a handful of publications over the last 24 hours. No credit is taken for the contents of said articles or the accuracy thereof. Audio Summary: Friday, March 14, 2025 (Australia/Melbourne)0:00/212.8561× Chinese Cyber Espionage Targeting Juniper
Daily News Update
This post is an AI-generated summary of News Articles from a handful of publications over the last 24 hours. No credit is taken for the contents of said articles or the accuracy thereof. Audio Summary: Thursday, March 13, 2025 (Australia/Melbourne)0:00/166.441× Executive Summary Over the past
Daily News Update
This post is an AI-generated summary of News Articles from a handful of publications over the last 24 hours. No credit is taken for the contents of said articles or the accuracy thereof. Audio Summary: Friday, March 7, 2025 (Australia/Melbourne)0:00/189.841× Executive Summary The recent articles