Insights
Security news, Microsoft and Azure updates, and practical guides on cloud infrastructure, custom applications and data, from the Alcaeus Services team.
Filtered by category: Security Clear filter
More than 70 US companies paid salaries to employees who were never in the country. The laptops sat in ordinary Texas houses. The people typing were in North Korea.
One employee was tricked out of their login. The attackers then used ASOS's own app to push a ransom demand onto customers' phones — and what the BBC saw in their sample goes beyond what ASOS has admitted.
Hundreds of stores lost their cold chain overnight. The controllers involved were, in many cases, products the manufacturer stopped supporting years ago.
Fortinet has warned customers that a critical zero-day vulnerability in FortiMail is being actively exploited in the wild, putting internet-exposed email security gateways at immediate risk.
The U.K.’s domestic security service, MI5, has issued an unusually direct public warning about the China General Technology Research Institute (CGTRI), alleging that the research body has strong links to China’s Ministry of State…
A new high-severity zero-day affecting Citrix NetScaler ADC and NetScaler Gateway has emerged following the disclosure of two critical remote code execution vulnerabilities in the same product family.
Apple is preparing to introduce additional controls around Full Disk Access (FDA) in macOS, responding to growing privacy and security concerns surrounding increasingly capable AI agents.
An international law-enforcement operation has disrupted the KillSec ransomware-as-a-service (RaaS) group, taking control of its leak site, seizing core infrastructure and securing at least 110 terabytes of stolen data.
A highly targeted credential-phishing campaign has placed artificial intelligence policy and regulatory experts in the crosshairs of a China-aligned espionage group tracked by Proofpoint as TA419.
Security researchers have uncovered a malicious npm campaign involving 101 packages that abuse the open-source Baileys WhatsApp project to silently manipulate developers' authenticated WhatsApp accounts.
Microsoft Threat Intelligence has detailed a major evolution in the phishing operations of Star Blizzard, a Russian state threat actor associated by CISA with the Russian Federal Security Service (FSB) Centre 18.
Apple has patched a high-severity out-of-bounds write vulnerability affecting iOS, iPadOS and macOS after receiving a report that the flaw may have been exploited in an extremely sophisticated attack against specific targeted individuals.
