In this post, we analyze the evolution of CastleStealer, including the sensitive data it targets, new techniques for bypassing browser protections, remote command capabilities, and an approach to exfi
This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs . Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor M
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
If you’ve ever wondered whether your background qualifies you for a career in cybersecurity, you’re not alone — and you’re probably more prepared than you think. My name is Shannon Brazil, and I work
Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post 3 lessons from frontier AI vulnerability research appeared first on Microsoft S
Google has new Android updates, but many users will not be able to get patched immediately.
Apple just released a system called "Reference Image." It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It ca
Google has released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don't delay.
The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
In cloud-centered environments, establishing trust between workloads is fundamental to securing machine-to-machine communication. Traditional approaches such as API keys, shared secrets, and static se
Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management. The post CISO perspectives on managing vulnerability risks in the age of AI
ASOS customers received a push notification regarding a breach of the company. Here's what we know so far.
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 6, 2026 – Listen to the Podcast Episode A new study shows that malware stealing employee passwords has
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Domino's is warning customers by email that their accounts have been compromised in a credential stuffing attack.
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Oct. 5, 2026 – Listen to the Podcast Episode Kevin Novak is the CISO at Evansville, Ind.-based Old National,
A list of topics we covered in the week of September 28 to October 4 of 2026
A list of topics we covered in the week of September 28 to October 4 of 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
