tactics – Page 36 – Experimental News Clipping Site

CSA: Dark Patterns: How the CPPA is Cracking Down

Feb 19, 2025

—

by

Source URL: https://cloudsecurityalliance.org/articles/dark-patterns-understanding-their-impact-harm-and-how-the-cppa-is-cracking-down Source: CSA Title: Dark Patterns: How the CPPA is Cracking Down Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the California Privacy Protection Agency’s (CPPA) stringent stance against “dark patterns” in user interface design, particularly in relation to the California Consumer Privacy Act (CCPA). It clarifies what dark patterns…

Cloud Blog: Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger

Feb 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger/ Source: Cloud Blog Title: Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger Feedly Summary: Written by: Dan Black Google Threat Intelligence Group (GTIG) has observed increasing efforts from several Russia state-aligned threat actors to compromise Signal Messenger accounts used by individuals of interest to Russia’s intelligence services. While this…

Cloud Blog: Cloud CISO Perspectives: New AI, cybercrime reports underscore need for security best practices

Feb 18, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-new-ai-cybercrime-reports-underscore-need-security-best-practices/ Source: Cloud Blog Title: Cloud CISO Perspectives: New AI, cybercrime reports underscore need for security best practices Feedly Summary: Welcome to the first Cloud CISO Perspectives for February 2025. Stephanie Kiel, our head of cloud security policy, government affairs and public policy, discusses two parallel and important security conversations she had at…

The Register: US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware

Feb 18, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/18/us_newspaper_publisher_exercises_linguistic/ Source: The Register Title: US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware Feedly Summary: Called it an ‘incident’ in SEC filing, but encrypted apps and data exfiltration suggest Lee just can’t say the R word US newspaper publisher Lee Enterprises is blaming its recent service…

The Register: Twin Google flaws allowed attacker to get from YouTube ID to Gmail address in a few easy steps

Feb 17, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/17/infosec_news_in_brief/ Source: The Register Title: Twin Google flaws allowed attacker to get from YouTube ID to Gmail address in a few easy steps Feedly Summary: PLUS: DOGE web design disappoints; FBI stops crypto scams; Zacks attacked again; and more! Infosec In Brief A security researcher has found that Google could leak the email…

Hacker News: Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

Feb 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.volexity.com/blog/2025/02/13/multiple-russian-threat-actors-targeting-microsoft-device-code-authentication/ Source: Hacker News Title: Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses a series of spear-phishing campaigns carried out by Russian threat actors targeting Microsoft 365 accounts using Device Code Authentication. The attacks leverage social engineering tactics, exploiting political…

The Register: Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks

Feb 14, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/14/chinese_spies_ransomware_moonlighting/ Source: The Register Title: Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks Feedly Summary: Some employees steal sticky notes, others ‘borrow’ malicious code A crew identified as a Chinese government-backed espionage group appears to have started moonlighting as a ransomware player – further evidence that lines are blurring between nation-state cyberspies…

Microsoft Security Blog: Storm-2372 conducts device code phishing campaign

Feb 14, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conducts-device-code-phishing-campaign/ Source: Microsoft Security Blog Title: Storm-2372 conducts device code phishing campaign Feedly Summary: Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign has been active since August 2024 with the actor creating lures…

The Register: North Korea targets crypto developers via NPM supply chain attack

Feb 13, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/13/north_korea_npm_crypto/ Source: The Register Title: North Korea targets crypto developers via NPM supply chain attack Feedly Summary: Yet another cash grab from Kim’s cronies and an intel update from Microsoft North Korea has changed tack: its latest campaign targets the NPM registry and owners of Exodus and Atomic cryptocurrency wallets.… AI Summary and…

The Register: Ransomware isn’t always about the money: Government spies have objectives, too

Feb 12, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/12/ransomware_nation_state_groups/ Source: The Register Title: Ransomware isn’t always about the money: Government spies have objectives, too Feedly Summary: Analysts tell El Reg why Russia’s operators aren’t that careful, and why North Korea wants money AND data Feature Ransomware gangsters and state-sponsored online spies fall on opposite ends of the cyber-crime spectrum.… AI Summary…

Tag: tactics