There has been an increase in research surrounding methods of executing attacks against Machine Learning (ML) and Artificial Intelligence (AI) systems, with nearly 2,000 papers published on the topic in one repository over the last ten years. However,…

The US Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have released a joint document providing information on software supply chain attacks, the risks presented by such attacks, and…

Cyber Scene #55 - Cyber Meteorology - Part One: The Ghost of Cold War Past  

SoS Musings #48 - Ready to Embrace Zero Trust Security?  

Cybersecurity Snapshots #17 - DoppelPaymer Ransomware Gang  

Spotlight on Lablet Research #17 - Project: Scalable Trust Semantics and Infrastructure  

Washington DC’s police department has reportedly been hit by Russian-speaking ransomware threat actors who claim to have stolen sensitive information.  The group behind the attack is called Babuk.  The Babuk group has given the police three…

The average ransom paid by ransomware victims has increased as cybercriminals exploit vulnerabilities in software and remote desktop protocol (RDP) services. According to Coveware's Quarterly Ransomware Report, the average ransom payment in the first…

Ransomware authors are continuing to get better at encrypting victims' sensitive information, demanding ransoms, and threatening to leak targets' data online. There has also been an increase in ransom demands, with multiple ransomware groups…

Hackers have found a way to evade the latest macOS protections. Apple has released macOS Big Sur 11.3, an update to the Mac operating system. The update addresses a flaw that exists in macOS Catalina 10.15 and macOS Big Sur. The exploitation of this flaw…

A cybersecurity consultant discovered millions of retailers' records online in an unsecured Elasticsearch server on April 5th.  The consultant was unsure whom the data belonged to. However, upon closer inspection, the consultant noticed many 'test'…

The Cybersecurity and Infrastructure Security Agency's (CISA) National Risk Management Center (NRMC) is working to assess and identify security risks for 5G wireless services. Dan Dagher, supply chain risk management initiative lead at NRMC, recently…