Threat actors recently infiltrated the decentralized music platform Audius and stole more than 18 million AUDIO tokens, which are currently worth around $6 million. Audius is an Ethereum blockchain-based decentralized streaming service. Users can earn…

As evidenced by ongoing, dangerous campaigns, threat actors have figured out how to use the existing functionality and infrastructure of popular messaging apps such as Telegram and Discord to host and execute a variety of malware. According to Intel 471'…

SoS Musings #63 - Testbeds for Security Experimentation

Cyber Scene #70 - Fueling Cyber: Capitol, Capital  

Spotlight on Lablet Research #32 - Characterizing User Behavior and Anticipating its Effects on Computer Security with a Security Behavior Observatory  

Cybersecurity Snapshots #32 - LockBit Ransomware Group

In light of the Internal Revenue Service's (IRS) annual observation and mitigation of over 1.4 billion cyberattacks, the new IRS Strategic Plan for fiscal years 2022-2026 highlights the importance of secure digital transformation and protecting critical…

Over the last six years, European cops estimate that they have assisted approximately 1.5 million people and organizations in decrypting files encrypted by ransomware, saving around $1.5 billion. Europol, the European Union's law enforcement agency,…

Uber has recently settled with the US Department of Justice (DoJ) over its cover-up of a November 2016 data breach.  Uber has agreed to help the DoJ prosecute its former chief security officer Joseph Sullivan in exchange for escaping prosecution…

As many as 207 websites have been infected with malicious code that uses WebAssembly on the browser to launch a cryptocurrency miner. The web security company Sucuri, which revealed the details of the campaign, said it launched an investigation after a…

Security researchers at Vade discovered that banks received the largest share of phishing attacks during the first half of 2022.  The researchers also found that attackers were most likely to send their phishing emails on weekdays, with most…

According to researchers at Tessian, human error is one of the most significant risks in cybersecurity.  The researchers stated that while everyone makes mistakes, there are a substantial number of employees who are completely oblivious to the…