AI is Founder Augmentation | Daniel Miessler
The ideal number of human employees in any company is zero. This is a flaw of capitalism, not automation, yet in the next couple years…
Month: January 2025
Fortinet warns of auth bypass zero-day exploited to hijack firewalls
Attackers are exploiting a new authentication bypass zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks. This security flaw (tracked…
Boost up Your SOC & DFIR Operations with ANY.RUN’s Threat Intelligence Feeds
Effective cyber threat detection and response depend on the ability to access actionable, real-time intelligence. ANY.RUN, a trusted name in interactive malware analysis, offers Threat…
Reality With Filters | Daniel Miessler
I clearly see the merits of both sides, similar to the end-to-end encryption discussion. The last few years have given me some clarity on where…
FBI wipes Chinese PlugX malware from over 4,000 US computers
The U.S. Department of Justice announced today that the FBI has deleted Chinese PlugX malware from over 4,200 computers in networks across the United States.…
CMA kicks off investigation into Google search engine dominance
The Competition and Markets Authority (CMA) has kicked off the new year with an investigation of Google Search under the new digital markets competition regime,…
Hackers use FastHTTP in new high-speed Microsoft 365 password attacks
Threat actors are utilizing the FastHTTP Go library to launch high-speed brute-force password attacks targeting Microsoft 365 accounts globally. The campaign was recently discovered by…
UK to follow America in imposing a ransomware payment ban
The United Kingdom is poised to implement a significant shift in its approach to tackling ransomware attacks, with a formal ban on ransomware payments set…
Air Gap – Cyber Defense Magazine
In August 2024, the FBI issued a notice that an Iranian backed team was attempting to hack American political parties’ campaign information. (Miller & Balsamo,…
Subpostmasters won’t get financial redress until mid-2027 at current rate of progress
At the current rate of progress, subpostmasters who took the Post Office to court and exposed the scandal won’t receive financial redress until mid-2027. Sir…
A Partial Victory for AI Researchers
HackerOne has partnered with security and AI communities to advocate for stronger legal protections for independent researchers. Most recently, HackerOne participated in a workshop hosted by…
Microsoft 365 apps crash on Windows Server after Office update
Microsoft says a known issue is causing Classic Outlook and Microsoft 365 applications to crash on Windows Server 2016 or Windows Server 2019 systems. This…