Tag: response strategies
-
The Cloudflare Blog: Unleashing improved context for threat actor activity with our Cloudforce One threat events platform
Source URL: https://blog.cloudflare.com/threat-events-platform/ Source: The Cloudflare Blog Title: Unleashing improved context for threat actor activity with our Cloudforce One threat events platform Feedly Summary: Gain real-time insights with our new threat events platform. This tool empowers your cybersecurity defense with actionable intelligence to stay ahead of attacks and protect your critical assets. AI Summary and…
-
The Register: Extortion crew threatened to inform Edward Snowden (?!) if victim didn’t pay up
Source URL: https://www.theregister.com/2025/03/18/extortionists_ox_thief_legal_threats/ Source: The Register Title: Extortion crew threatened to inform Edward Snowden (?!) if victim didn’t pay up Feedly Summary: Don’t laugh. This kind of warning shows crims are getting desperate Dark web analysts at infosec software vendor Fortra have discovered an extortion crew named Ox Thief that threatened to contact Edward Snowden…
-
Schneier on Security: Silk Typhoon Hackers Indicted
Source URL: https://www.schneier.com/blog/archives/2025/03/silk-typhoon-hackers-indicted.html Source: Schneier on Security Title: Silk Typhoon Hackers Indicted Feedly Summary: Lots of interesting details in the story: The US Department of Justice on Wednesday announced the indictment of 12 Chinese individuals accused of more than a decade of hacker intrusions around the world, including eight staffers for the contractor i-Soon, two…
-
The Register: How NOT to f-up your security incident response
Source URL: https://www.theregister.com/2025/03/10/incident_response_advice/ Source: The Register Title: How NOT to f-up your security incident response Feedly Summary: Experts say that the way you handle things after the criminals break in can make things better or much, much worse Feature Experiencing a ransomware infection or other security breach ranks among the worst days of anyone’s life…
-
The Register: Developer sabotaged ex-employer with kill switch that activated when he was let go
Source URL: https://www.theregister.com/2025/03/08/developer_server_kill_switch/ Source: The Register Title: Developer sabotaged ex-employer with kill switch that activated when he was let go Feedly Summary: IsDavisLuEnabledInActiveDirectory? Not any more. IsDavisLuGuilty? Yes. IsDavisLuFacingJail? Also yes A federal jury in Cleveland has found a senior software developer guilty of sabotaging his employer’s systems – and he’s now facing a potential…
-
The Register: Like whitebox servers, rent-a-crew crime ‘affiliates’ have commoditized ransomware
Source URL: https://www.theregister.com/2025/03/07/commoditization_ransomware/ Source: The Register Title: Like whitebox servers, rent-a-crew crime ‘affiliates’ have commoditized ransomware Feedly Summary: Which is why taking down chiefs and infra behind big name brand operations isn’t working Interview There’s a handful of cybercriminal gangs that Jason Baker, a ransomware negotiator with GuidePoint Security, regularly gets called in to respond…