Security News
![The Story of the Mirai Botnet](/static/build/img/news/alt/ransomware-statistic-small.jpg)
About Bruce Schneier I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.
![Inferno Malware Masqueraded as Coinbase, Drained $87 Million from 137,000 Victims](/static/build/img/news/inferno-malware-masqueraded-as-coinbase-drained-87-million-from-137000-victims-small.jpg)
The operators behind the now-defunct Inferno Drainer created more than 16,000 unique malicious domains over a span of one year between 2022 and 2023. The scheme “leveraged high-quality phishing...
![Hackers Weaponize Windows Flaw to Deploy Crypto-Siphoning Phemedrone Stealer](/static/build/img/news/hackers-weaponize-windows-flaw-to-deploy-crypto-siphoning-phemedrone-stealer-small.jpg)
Threat actors have been observed leveraging a now-patched security flaw in Microsoft Windows to deploy an open-source information stealer called Phemedrone Stealer. “Phemedrone targets web...
![3 ways to combat rising OAuth SaaS attacks](/static/build/img/news/3-ways-to-combat-rising-oauth-saas-attacks-small.jpg)
OAuth allows users to grant another application limited access to their resources - such as personal data, online accounts, and other sensitive items in SaaS environments - without sharing their credentials. OAuth is crucial in enabling seamless and secure connections between SaaS applications.
![10 cybersecurity frameworks you need to know about](/static/build/img/news/10-cybersecurity-frameworks-you-need-to-know-about-small.jpg)
As cyber threats grow more sophisticated, understanding and implementing robust cybersecurity frameworks is crucial for organizations of all sizes. This article lists the most essential cybersecurity frameworks developed to guide businesses and governments in safeguarding their digital assets.
![Tsurugi Linux: Tailoring user experience for digital forensics and OSINT investigations](/static/build/img/news/tsurugi-linux-tailoring-user-experience-for-digital-forensics-and-osint-investigations-small.jpg)
Tsurugi Linux is a heavily customized open-source distribution focused on supporting DFIR investigations. The project focuses mainly on live forensics analysis, post-mortem analysis, and digital evidence acquisition.
![Geopolitical tensions combined with technology will drive new security risks](/static/build/img/news/geopolitical-tensions-combined-with-technology-will-drive-new-security-risks-small.jpg)
Against a backdrop of systemic shifts in global power dynamics, climate, technology and demographics, global risks are stretching the world's adaptative capacity to its limit. Concerns over a persistent cost-of-living crisis and the intertwined risks of AI-driven misinformation and disinformation, and societal polarization dominated the risks outlook for 2024.
![China’s gambling crackdown spawned wave of illegal online casinos and crypto-crime in Asia](/static/build/img/news/chinas-gambling-crackdown-spawned-wave-of-illegal-online-casinos-and-crypto-crime-in-asia-small.jpg)
Global crime networks have set up shop in autonomous territories run by armed gangs across Southeast Asia, and are using them to host physical and online casinos that, in concert with crypto exchanges, have led to an explosion of money laundering, cyberfraud, and cybercrime across the region and beyond. The scenario above was outlined on Monday by the United Nations Office on Drugs and Crime in a new report [PDF] titled "Casinos, Money Laundering, Underground Banking, and Transnational Organized Crime in East and Southeast Asia: A Hidden and Accelerating Threat."
![Ivanti Connect Secure zero-days now under mass exploitation](/static/build/img/news/ivanti-connect-secure-zero-days-now-under-mass-exploitation-small.jpg)
Two zero-day vulnerabilities affecting Ivanti's Connect Secure VPN and Policy Secure network access control appliances are now under mass exploitation. While Ivanti is yet to release patches for these two actively exploited zero-days, admins are advised to apply mitigation measures provided by the vendor on all ICS VPNs on their network.
![Windows Copilot autostart tests limited to 27" displays or larger](/static/build/img/news/windows-copilot-autostart-tests-limited-to-27-displays-or-larger-small.jpg)
Microsoft says that tests of a controversial new Windows 11 feature that automatically opens the AI-powered Copilot assistant after Windows starts are limited to systems with 27-inch displays. For now, the option also requires enrolling in the company's Windows Insider program since the change is currently being tested in the Windows 11 Insider Preview Build 23615, released last Thursday in the Dev Channel.