#infosecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #infosecurity, aggregated by home.social.
-
Advisory for Oracle Fusion middleware:
- 345 vulnerabilities fixed
- 9 vulnerabilities with CVE score of 10.0
- 145 vulnerabilities with CVE score of 9.0 to 9.9 -
The Gentlemen have usurped Qilin as the most prolific ransomware gang of recent times, according to analysis of incidents which can be attributed to known ransomware threat groups
(Write up by me. Picture, alas not in article...)
https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/
-
@[email protected]
Guess you’ve upgraded to a non-proprietary operating system like free, open-source Linux, and said goodbye to M$ and G$. :tuxtyping: :tux:
#microsoft #linux #infosecurity #infosec #tux -
A ransomware group and a cyber-criminal gang which specializes in stealing credentials through supply chain attacks have teamed up in a move which what has been described by cybersecurity researchers as an “unprecedented model of industrialized ransomware.”
As detailed by Sophos, the collaboration is between the Vect ransomware group and TeamPCP, a group associated with The Com, a collective of English-speaking cyber criminals behind a series of high-profile supply chain attacks.
Sophos warned that the combination of a convergence of TeamPCP’s large-scale supply chain credential theft, which particularly targets developers, alongside Vect’s ransomware-as-a-service service operation represents a “meaningful shift in the ransomware threat landscape”.
The result is that any organization which has had login credentials stolen by TeamPCP could be at additional risk of also falling victim to a ransomware attack by Vect.
(Me for Infosecurity Mag)
https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/
-
Защита конфиденциальных данных в облачных LLM
Защита персональных данных и коммерческой тайны при работе с облачными LLM требует многоуровневого подхода, сочетающего архитектурные, технические и организационные меры. Наиболее надежным решением является полный контроль над средой обработки данных.
-
A major cybercriminal network involving thousands of infected websites used to distribute malware has been disrupted by an international law enforcement takedown.
The action against the SocGholish malware group formed the latest part of Operation Endgame, an ongoing global police investigation to combat ransomware and cybercrime worldwide.
Announced by the Dutch police on June 18, action was taken to remediate infections of 15,000 websites controlled by SocGholish group and to dismantle the botnet associated with the group.
Notably, the SocGholish botnet was regularly used by Evil Corp, the notorious, Russia-based ransomware and cyber crime group behind a swath of destructive malware attackers worldwide, including against governments, healthcare institutions and enterprises...
Here's my write up for #Infosecurity Magazine!
https://www.infosecurity-magazine.com/news/operation-endgame-socgholish-evil/
-
Cybercriminals are experiencing the same worries as many employees working in legitimate jobs: many are worried that the rise of #AI tools could result in them losing their jobs, according to analysis of chatter on underground discussion boards by researchers at Sophos.
Some users explicitly expressed concerns that those selling AI tools could actively take work away from those cybercriminal developers who manually write code. While others are less than impressed by quality of AI-developed malware...
(I'm loathed to say 'Hey, cyber criminals are just like the rest of us!' And yet...)
Anyway, here's my write-up for #Infosecurity Magazine!
https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/
-
Happy Weekend you all!
I am wondering — who's telling stories with us in London this year?Corelight and Object First are confirmed, and many more will officially be in this week. So don't miss your chance to record with us and share your story.
Sean Martin and I have been showing up at Infosecurity Europe since 2018 — every venue, every news cycle, every London weather mood, and a few Guinness pints along the way. June 2–4 at ExCeL we'll be back, doing what we love most: walking the show floor, capturing the conversations that matter, and turning hallway moments into stories that travel. And of course taking a few hours to visit our favorites spots in London!
If your brand has a story worth telling at the show, there are three ways we can tell it together — all produced on location at ExCeL:
🎤 Coverage Sponsorship — comprehensive partnership across the event: 15-minute on-site video conversation, 5-minute Brand Highlight, 1–2 sponsored editorial articles, custom companion article, logo placement on the coverage page, multi-platform distribution, full rights to everything we produce together — and you get all the assets, of course!
🎙️ On Location Brand Briefing — a 15-minute on-site video conversation hosted by Sean and me, paired with a 400–600 word custom companion article, full media assets (MP4 + MP3 + PNG), and logo placement on the coverage page
🎧 Brand Highlight — a short, 5-minute story recorded on location at the show. Same as a Briefing, just shorter — if you've got less to say! 😉
See what nine years of doing this looks like — RSAC 2026 coverage just wrapped, Black Hat is getting busy, and Infosec is already taking shape:
✨https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage
You can book directly from the page, or DM me with questions and we'll take it from there.
So — who's joining us in London?
#Cybersecurity #InfosecEurope #InfosecCommunity #technology #infosecurity #infosec Studio C60 / ITSPmagazine
-
Privacy watchdog finds thousands of tax account breaches, urges stronger protections
https://ground.news/article/privacy-watchdog-finds-thousands-of-tax-account-breaches-urges-stronger-protections?utm_source=mobile-app&utm_medium=newsroom-share
#Canada #Privacy #InfoSecurity -
VECT Ransomware is a Wiper, Not Ransomware — Don’t Bother Paying, Says Check Point Research
You can read their blog post at https://blog.checkpoint.com/security/vect-ransomware-why-paying-wont-get-your-files-back/ or their full report at https://research.checkpoint.com/2026/vect-ransomware-by-design-wiper-by-accident/
(h/t, @cybernews)
I contacted VECT and asked them for their response to #CheckPoint's report. Their response was, um... short? :)
#infosecurity #ransomware #decryption #decryptor #VECT #wiper