Security Bulletin

Infostealers written in Python are not new. They also onboard a lot of sandbox detection mechanisms to prevent being executed (and probably detected) by automatic analysis. Last week, I found one that uses the same approach but in a different way...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Ukrainian Vyacheslav Penchukov faces a lengthy U.S. prison sentence for his part in running the JabberZeus and IcedID malware groups.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

The USDA’s Distance Learning and Telemedicine (DLT) program was established in 2023 to help organizations provide education and healthcare services to communities in rural areas. The Cisco Public Funding Office helps these organizations explore DLT...

The purveyor of the infamous Pegasus mobile spyware now has a new method for obtaining critical information from target iPhones and other mobile devices.

We're improving Cisco Secure Access by adding functionality that improves end user experience, simplifies security management for IT and tightens security.

[This is a Guest Diary by Rafael Larios, an ISC intern as part of the SANS.edu BACS program]

Cyberattacks and threats increasingly are honed in on ICS/OT networks, but security training for operators of these critical infrastructure environments is perilously scarce.