Security Bulletin

CIS Hardened Images are virtual machine images hardened with the globally recognized secure configuration recommendations of the CIS Benchmarks.

A friend asked me if my pngdump.py tool can extract individual bits from an image (cfr. diary entry " Steganography Analysis With pngdump.py").

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Deepfakes and other forms of generative AI may be the catalysts to force a restructuring of the entire U.S. identity system.

The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam.

Voice firewalls, call authentication and real-time fraud detection offer robust vishing prevention.

The chat infrastructure and data-leak site of the notorious ransomware-as-a-service group has been inactive since March 31, according to security vendors.

Jen Easterly, former director of CISA, discussed the first 100 days of the second Trump administration and criticized the president's "mandate for loyalty" during a panel at RSAC 2025.

Security Scorecard's Dr. Aleksandr Yampolskiy discusses securing what you don't own with supply chain detection and response.

Fortra's Rohit Dhamankar discusses Cobalt Strike abuse decreases by 80% with Fortra, Microsoft, Health-ISAC initiative.

Okta's Charlotte Wylie discusses securing non-human identities at scale in the era of AI agents.

While nation-state actors are demonstrating how easily they can infiltrate US networks, government officials don't seem to have a clear vision for what comes next.