article thumbnail

Microsoft Can Fix Ransomware Tomorrow

Adam Shostack

It starts: Recently, I was at a private event on security by design. My latest at Dark Reading draws attention to how Microsoft can fix ransomware tomorrow. My latest article at Dark Reading is Microsoft Can Fix Ransomware Tomorrow.

article thumbnail

Handling Pandemic-Scale Cyber Threats (preprint)

Adam Shostack

A new paper on 'Pandemic Scale Cyber Events Josiah Dykstra and I have a new pre-print at Arxiv, Handling Pandemic-Scale Cyber Threats: Lessons from COVID-19. While the nature of these threats differs, the responses to COVID-19 illustrate valuable lessons that can guide preparation and response to cyber events.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Short-Lived Certificates Coming to Let’s Encrypt

Schneier on Security

This is a big upgrade for the security of the TLS ecosystem because it minimizes exposure time during a key compromise event. Specifically, certificates with a lifetime of six days.

article thumbnail

E-skimming campaign uses Unicode obfuscation to hide the Mongolian Skimmer

Security Affairs

The Mongolian Skimmer captures final data entries using the beforeunload event, ensures cross-browser compatibility with various event-handling techniques, and employs anti-debugging tactics by monitoring formatting changes to detect and evade debugging attempts.

article thumbnail

Major Cybersecurity Events (31st March – 6th April 2025)

Penetration Testing

Below is a structured summary of the most notable events, with key details: CISA Alert Resurge Malware Exploiting Ivanti ZeroDay (CVE-2025-0282) The U.S. In the past week, several significant cybersecurity incidents have made headlines including high-impact data breaches, and newly discovered or exploited vulnerabilities.

article thumbnail

Amazon discloses employee data breach after May 2023 MOVEit attacks

Security Affairs

Amazon and AWS systems remain secure, and we have not experienced a security event. We were notified about a security event at one of our property management vendors that impacted several of its customers including Amazon. Exposed data did not include Social Security numbers or financial information.

article thumbnail

Cisco Live San Diego Case Study: Malware Upatre! (Encrypted Visibility Engine Event)

Cisco Security

Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.