Security researchers at Comparitech discovered that healthcare organizations (HCOs) in the US have suffered nearly 5000 publicly recorded data breaches since 2009, spilling hundreds of millions of records in the process.  The researchers analyzed…

Facebook recently suffered a bug, and Meta blamed the problem on a "configuration change." Meta noted that they resolved the issue as quickly as possible for everyone impacted and apologized for any inconvenience.  The technical glitch meant that…

A ransomware victim paid to regain access to their network, but the cybercriminals did not keep their end of the bargain. According to cybersecurity researchers at Barracuda Networks, the real-life incident occurred in August 2021, when hackers from the…

Researchers discovered that the scanners tasked with filtering out malicious contributions to packages distributed via the popular open-source code repository Python Package Index (PyPI) generate many false alerts. According to Chainguard's analysis of…

The Center Hospitalier Sud Francilien (CHSF), a 1,000-bed hospital located 28 kilometers from the center of Paris, recently faced a cyberattack forcing the medical center to refer patients to other facilities and postpone surgery appointments. Since CHSF…

A large-scale adversary-in-the-middle (AiTM) phishing campaign targeting enterprise users of Microsoft email services has also targeted Google Workspace users. According to Zscaler researchers Sudeep Singh and Jagadeeswar Ramanukolanu, this campaign…

SoS Musings #64 - Steganography: An Attack Hiding in Plain Sight

Spotlight on Lablet Research #33 - Side-Channel Attack Resilience  

Cyber Scene #71 - Sizing up the Cloudburst, Above and Below  

Cybersecurity Snapshots #33 - Car Dealerships Need to Take Cybersecurity More Seriously

A trade association representing manufacturers of unmanned drones, cars, airplanes, boats, and other vehicles is collaborating with a cybersecurity firm to create voluntary security standards for the autonomous vehicles market. The Association for…

Sonatype researchers have discovered 186 malicious packages in the npm JavaScript library registry that infect Linux hosts with cryptocurrency mining applications. According to Sonatype, many of the packages published by the same pseudonymous npm account…