Security Bulletin

Reuters reports that Spain had numerous private and public websites impacted by a wave of distributed denial-of-service attacks claimed by pro-Russian hacktivist group NoName amid an ongoing European Union summit.

The Intellexa alliance has been using a range of tools for intercepting and subverting mobile and Wi-Fi technologies to deploy its surveillance tools, according to an investigation by Amnesty International and others.

Thousands of devices, including D-Link and Zyxel gear, remain vulnerable to takeover despite the availability of patches for the several bugs being exploited by IZ1H9 campaign.

Two U.S. congressmen, EU officials, the German ambassador to the U.S. and the president of Taiwan were targeted – but not necessarily infected – by the Predator spyware.

I was recently looking at a ZIP file, and after some time, I noticed that 7Zip was not displaying a modification date/time:

It's past time to reimagine how to best nurture talent and expand recruiting and training to alleviate the shortage of trained cybersecurity staff. We need a diverse talent pool trained for tomorrow's challenges.

Gee interviews David, a hiring manager, to discuss why he looks for skills “outside of the box”, his mentoring experience, and more.

Security sensors are common in the home for both prevention and response in the event something goes wrong. But in the cloud, have you taken the same approach?

The National Cybersecurity Strategy calls for strong governance around vulnerability reporting – and that benefits everyone.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Wireshark 4.2.0rc1 is now available, which means that soon we will move from 4.0.x to 4.2.x.