Microsoft’s May Patch Tuesday Rains Down 138 Fixes
Microsoft’s May Patch Tuesday landed with the subtlety of a dump truck in a server room.
Palo Alto Firewall Flaw Lands on CISA Exploited-vulnerability List
Threat actors pounce on Palo Alto’s PAN-OS software firewall flaw as customers wait for full fix.
Iran-linked Hackers Used Ransomware Panic as Cover for Espionage
A Rapid7 report reveals suspected Iranian hackers, MuddyWater, utilized Chaos ransomware tactics for espionage, emphasizing social engineering and stealthy data exfiltration methods.
EU Targets Huawei, ZTE in Escalating Telecom Infrastructure Security Push
The EU’s move signals a broader shift from 5G risk management to supply chain control.
FBI Lands Rare Win: Chinese State Hacker Extradited
Xu Zewei, accused of running Hafnium / Silk Typhoon intrusions and stealing COVID-19 research, will face a Houston judge today.
Microsoft Backs Off Forced Windows Updates, Sort of
Microsoft is enhancing user control over Windows updates, allowing users to pause updates during setup to reduce disruptions.
Zero-click Windows Flaw Leaks Credentials after Incomplete Patch
Incomplete Microsoft patch is exploited by APT28, allowing attackers to capture NTLM hashes when Windows renders a malicious shortcut.
Midnight Deadline Set After Cisco Firewall Backdoor Survives Patching
CISA confirms at least one federal agency was breached; patches alone did not remove the implant.
No Margarine for Error: Land O’Lakes Man Pleads Guilty in BlackCat Case
Land O’Lakes man slips into BlackCat scheme as insider, pleads guilty.
Scattered Spider Hacker Pleads Guilty to $8M Crypto Theft Scheme
Tyler Buchanan, 24, pleaded guilty to hacking and stealing $8 million in cryptocurrency.