Mar 15, 2025Ravie Lakshmanan Malware / Supply Chain Security Cybersecurity researchers have warned of a malicious campaign targeting users of the Python Package Index (PyPI) repository with bogus libraries masquerading as “time” related utilities, but harboring hidden functionality to steal sensitive data such as cloud access tokens. Software supply chain security firm ReversingLabs said it […]
California’s legal push on geolocation data collection must take aim at the right targets, privacy experts say
The attorney general for California announced this week a wide-ranging investigation into the way companies collect, process and use consumer location data. The investigation will include scrutiny of advertising networks, mobile app providers and data brokers whose practices may violate the California Consumer Privacy Act (CCPA), one of the strictest state privacy laws in the […]
We’re going teetotal: It’s goodbye to The Daily Swig
PortSwigger today announces that The Daily Swig is closing down Over the past five-and-a-half years, The Daily Swig has provided an independent and high-quality perspective on cybersecurity news and topics. We are proud of everything that the Swig has achieved, and to this point, we are sorry to announce that this journey has come to […]
Why Apple’s RCS encryption move is a privacy game-changer for your texts
Maria Diaz/ZDNET Apple joined the RCS bandwagon last year, giving its users the ability to exchange rich text messages with their Android counterparts. The only problem? Those messages are not encrypted, exposing them to security risks. Now, Apple will soon eliminate that obstacle. Also: Google Fi users finally get RCS on iPhone – here’s how to […]
End-to-End Encrypted Texts Between Android and iPhone Are Coming
Knifings, firebombings, shootings, and murder-for-hire plots—all linked to a splinter group of the 764 crime network called “No Lives Matter.” According to its own manifesto, the group seeks to “purify mankind through endless attacks” and has released at least two “kill guides” tied to violent plots in the US and Europe. Intelligence documents reviewed by […]
Fraudsters Impersonate Clop Ransomware to Extort Businesses
Fraudsters have been observed impersonating the Clop ransomware gang to extort businesses, researcher from Barracuda Networks have found. The incident is part of a trend of scammers impersonating high-profile ransomware actors and claiming to have exfiltrated sensitive data in order to extort payments from targets. In the extortion email, the attackers claimed to have exploited […]
6 Potential Security Concerns With the Eventual Rollout of 6G
6G could be available by the end of the decade, which should decrease latency and connectivity speeds for users. However, these wireless networks present new cybersecurity challenges. What should industry professionals prepare for? What Is 6G? 6G will be the sixth generation of wireless technology once it arrives. Experts say it could debut by 2030, though […]
LockBit Ransomware Developer Extradited to US
US authorities have extradited a dual Russian and Israeli national on charges of being a developer of the notorious LockBit ransomware. Rostislav Panev, aged 51, has been extradited from Israel, where he was arrested in August 2024 pursuant to a US provisional arrest request. He has had an initial appearance before a US magistrate before […]
Medusa Ransomware: FBI and CISA Urge Organizations to Act Now to Mitigate Threat
The Medusa ransomware gang continues to present a major threat to the critical infrastructure sector, according to a newly-released joint advisory from the FBI, Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC). As of February 2025, the Medusa ransomware operation, which we have previously detailed on the Tripwire […]
Little fires everywhere for March Patch Tuesday – Sophos News
Microsoft on Tuesday released 57 patches affecting 10 product families. Six of the addressed issues are considered by Microsoft to be of Critical severity, and nine have a CVSS base score of 8.0 or higher. Six, all affecting Windows, are under active exploit in the wild. One issue has been publicly disclosed but not yet […]