Tag: incident response

  • The Register: IBM Cloud login breaks for second time in a fortnight

    Source URL: https://www.theregister.com/2025/06/03/ibm_cloud_outage/ Source: The Register Title: IBM Cloud login breaks for second time in a fortnight Feedly Summary: Sev-1 incident downs support portals down and means application data paths ‘may be affected’ IBM’s Cloud has experienced a second Severity One incident in a fortnight. Both meant users could not log in to the Big…

  • The Register: ConnectWise customers get mysterious warning about ‘sophisticated’ nation-state hack

    Source URL: https://www.theregister.com/2025/05/30/connectwise_compromised_by_sophisticated_government/ Source: The Register Title: ConnectWise customers get mysterious warning about ‘sophisticated’ nation-state hack Feedly Summary: Pen tester on ScreenConnect bug: This one ‘terrifies’ me ConnectWise has brought in the big guns to investigate a “sophisticated nation state actor" that broke into its IT environment and then breached some of its customers.… AI…

  • The Register: 8,000+ Asus routers popped in ‘advanced’ mystery botnet plot

    Source URL: https://www.theregister.com/2025/05/29/8000_asus_routers_popped_in/ Source: The Register Title: 8,000+ Asus routers popped in ‘advanced’ mystery botnet plot Feedly Summary: No formal attribution made but two separate probes hint at the same suspect Thousands of Asus routers are currently ensnared by a new botnet that is trying to disable Trend Micro security features before exploiting vulnerabilities for…

  • Cloud Blog: Mark Your Calendar: APT41 Innovative Tactics

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/apt41-innovative-tactics/ Source: Cloud Blog Title: Mark Your Calendar: APT41 Innovative Tactics Feedly Summary: Written by: Patrick Whitsell Google Threat Intelligence Group’s (GTIG) mission is to protect Google’s billions of users and Google’s multitude of products and services. In late October 2024, GTIG discovered an exploited government website hosting malware being used to target…

  • The Register: Ransomware attack on MATLAB dev MathWorks – licensing center still locked down

    Source URL: https://www.theregister.com/2025/05/27/mathworks_ransomware_attack_leaves_ondeadline/ Source: The Register Title: Ransomware attack on MATLAB dev MathWorks – licensing center still locked down Feedly Summary: Commercial customers, STEM students all feeling the pain after mega outage of engineering data-analysis tool Software biz MathWorks is cleaning up a ransomware attack more than a week after it took down MATLAB, its…

  • Krebs on Security: Oops: DanaBot Malware Devs Infected Their Own PCs

    Source URL: https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/ Source: Krebs on Security Title: Oops: DanaBot Malware Devs Infected Their Own PCs Feedly Summary: The U.S. government today unsealed criminal charges against 16 individuals accused of operating and selling DanaBot, a prolific strain of information-stealing malware that has been sold on Russian cybercrime forums since 2018. The FBI says a newer…

  • CSA: Hidden AWS Risks: Securing Overlooked Resources

    Source URL: https://checkred.com/resources/blog/the-hidden-risk-in-your-cloud-stack-how-overlooked-aws-resources-become-entry-points-for-hackers/ Source: CSA Title: Hidden AWS Risks: Securing Overlooked Resources Feedly Summary: AI Summary and Description: Yes **Summary:** The incident involving Angel One highlights significant vulnerabilities in cloud security, particularly regarding AWS infrastructure. It underscores the dangers of cloud sprawl, misconfiguration, and inadequate visibility into cloud resources. The text emphasizes the necessity for…