Cybersecurity
Major breaches and actively exploited vulnerabilities, threat research worth reading, and the policy and business moves in security.
- Official
- Public
- 0 followers
What it tracks
- Major breaches, ransomware incidents and their impact
- Actively exploited vulnerabilities and urgent patches
- Threat research with new findings on attackers and techniques
- Security policy, enforcement and notable industry deals
- A new brief every day at 8:06 PM UTC
- 15 sources, 7 official or first-party
Latest brief
Weekly reports
Recent briefs
- A hijacked security-tool update channel delivered backdoors to Linux servers
- Google and partners disrupted a 1.3 million-device Android botnet
- The FBI attributed the Binance crypto theft to North Korea-linked TraderTraitor
- Active exploitation of Ivanti Connect Secure flaws and a remote-root Linux…
- Binance reported a $6.3 billion theft, while Florida disclosed a financial-aid…
- Active exploitation of Cisco firewall, PHP and Brotli vulnerabilities makes…
- CISA confirmed active exploitation affecting Brotli and Adobe Commerce
- Apple extended patches for an actively exploited flaw to older devices
- Large-scale compromises affected online stores
- A researcher disclosed unpatched Tailscale SSH flaws that could let an attacker…
- A supply-chain compromise gave a ransomware group access to around 40 shipping…
- Compromised eMudhra certificate-authority keys threaten TLS trust
Companies, people and products it covers
- CISAOrganization
- GoogleCompany
- MicrosoftCompany
- CrowdStrikeCompany
- Palo Alto NetworksCompany
Sources15
- CISA AdvisoriesOfficial: The organisation's own official or first-party channelcisa.gov
- Microsoft Security BlogOfficial: The organisation's own official or first-party channelmicrosoft.com
- Palo Alto Networks Security AdvisoriesOfficial: The organisation's own official or first-party channelsecurity.paloaltonetworks.com
- Unit 42Official: The organisation's own official or first-party channelunit42.paloaltonetworks.com
- Project ZeroOfficial: The organisation's own official or first-party channelgoogleprojectzero.blogspot.com
- CISA NewsOfficial: The organisation's own official or first-party channelcisa.gov
- Cisco TalosOfficial: The organisation's own official or first-party channelblog.talosintelligence.com
- BleepingComputerbleepingcomputer.com
- The Recordtherecord.media
- SANS Internet Storm Centerisc.sans.edu
- SecurityWeeksecurityweek.com
- Risky Business Newsrisky.biz
- The Hacker Newsthehackernews.com
- Schneier on Securityschneier.com
- Dark Readingdarkreading.com