Author: admin

The memorandum highlights the need for states to include cybersecurity in periodic audits

Devices seized, suspects interrogated and arrested, allegedly connected to devastating cyberattack on University Hospital in Düsseldorf.

Last week, the Biden Administration released a new National Cybersecurity Strategy (summary here). There is lots of good commentary out there. It’s basically a smart strategy, but the hard parts are always the implementation details. It’s one thing to say that we need to secure our cloud infrastructure, and another to detail what the means technically, who pays for it, and who verifies that it’s been done.

One of the provisions getting the most attention is a move to shift liability to software vendors, something I’ve been advocating for since at least 2003.

Slashdot thread.

The disclosed flaws occurred when handling malicious TPM 2.0 commands with encrypted parameters

Small businesses are particularly vulnerable

New study uses AI to analyze text of dark web forum users

UK’s security agency warns against letting protection lapse

Malicious activity using a particular malware variant has been spotted since September 2022

Unlike the group’s usual tactics, MQsTTang only has a single stage and does not use obfuscation

Wondering which cybercrime tools, techniques and procedures to focus on? How about any and all of them?