Sophos Firewall v21.5 early access is now available

Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 malicious commits to 5,561 GitHub repositories within a six-hour window. “Using throwaway accounts and forged author identities (build-bot, auto-ci, ci-bot, pipeline-bot), the attacker injected GitHub Actions workflows containing base64-encoded bash payloads that exfiltrate CI

Top Class Actions reports a settlement stemming from the Citrix Bleed” data breach it suffered in 2023. NOTE: You cannot sign up for a claim at this time. Nor can you sign up via DataBreaches.net. Wait for the official settlement site and follow the instructions on that site to find out if you are eligible……

Habib Mohammadi reports: A group of unidentified hackers has breached the Taliban’s databases, leaking documents from 21 ministries and government agencies, some of which appear to be classified, according to reports circulating online. The leaked files reportedly include documents from the Taliban-controlled ministries of finance, justice, foreign affairs, information and culture, telecommunications, and mining, as…

This week, our news radar shows that every new tech idea comes with its own challenges. A hot AI tool is under close watch, law enforcement is shutting down online spots that help cybercriminals, and teams are busy fixing software bugs that could let attackers in. From better locks on our devices to stopping sneaky…

Analyzing dark web forums to identify key experts on e-crime

After posting something about a new report on cbsecurity[.]net by Dos-OP on Nova RaaS, Nova contacted me to complain, dispute the claims, and accuse me of being an unprofessional journalist. Once they made contact, I told him I would forward his criticisms to Dos-OP for their response, even though, as Dos-OP pointed out to me, Nova……