1.6M RingCentral accounts' data dumped after ShinyHunters extortion attack
1.6M RingCentral accounts' data dumped after ShinyHunters extortion attack
Another one bites the dust
theregister.com
Petrus Vasenius
@vasenius.fi
Cloud Security leader @ U42 🛡️☁️ | Reposts/Likes ≠ Endorsements | #CyberSecurity | #SecOps
Exclusive Anthropic Cyber Tool Mythos Accessed by Unapproved Actors t.co/h8GhJPhlC6
https://gbhackers.com/exclusive-anthropic-cyber-tool-mythos-breached/
t.co
I created a blog post based on my talk in #Disobey2026: vasenius.fi/beyond-the-p... #CyberSecurity #DataSecurity #Honeytokens
Beyond the Perimeter: Mastering Data Deception in the Cloud Era - The Security Everywhere
I recently had the distinct pleasure of presenting at the Disobey 2026 event in Helsinki. My session, titled Data Honeytokens […]
vasenius.fi
We analyze novel attack vectors where malicious JavaScript is dynamically generated at runtime. This process leverages client-side API calls to trusted LLM services, initiated from an initially benign webpage (hiding malicious code in a text prompt). Read the threat brief here: bit.ly/4qQW0Cp
The Next Frontier of Runtime Assembly Attacks: Leveraging LLMs to Generate Phishing JavaScript in Real Time
We discuss a novel AI-augmented attack method where malicious webpages use LLM services to generate dynamic code in real-time within a browser.
bit.ly
We have a new badge competition starting ...now! Create a game or (mini)app for the badge! Join and win awesome (disclaimer: with relative degrees of "awesome") prizes at Disobey 2026! To find out more, visit: disobey.fi/2026/competi...
Our research has identified a characteristic within Azure Private Endpoint deployments that could expose Azure resources to denial of service conditions. This finding pertains to the Azure Private Link mechanism: bit.ly/4r1nzZd
DNS OverDoS: Are Private Endpoints Too Private?
We've identified an aspect of Azure’s Private Endpoint architecture that could expose Azure resources to denial of service (DoS) attacks.
bit.ly
#MongoBleed vulnerability CVE-2025-14847 can expose sensitive data from heap memory. This includes cleartext credentials, API keys, session tokens and PII. Read our latest Threat Brief for details: bit.ly/4qVOkOM
Threat Brief: MongoDB Vulnerability (CVE-2025-14847)
Database platform MongoDB disclosed CVE-2025-14847, called MongoBleed. This is an unauthenticated memory disclosure vulnerability with a CVSS score of 8.7.
bit.ly
Vibe Coding and Vulnerability: Why Security Can’t Keep Up The promise of AI-assisted development, or “vibe coding,” is undeniable: unprecedented speed and productivity for development teams. unit42.paloaltonetworks.com/securing-vib... #VibeCoding #AISecurity #RiskManagement #Unit42
Securing Vibe Coding Tools: Scaling Productivity Without Scaling Risk
AI-generated code looks flawless until it isn't. Unit 42 breaks down how to expose these invisible flaws before they turn into your next breach.
unit42.paloaltonetworks.com
Starting the new week strong! 👏 We are excited to announce the sessions for our #Security track! And what a power house of speakers and sessions! 🤩 Get your tickets here: 🎫 cloudtechtallinn.com 🗓️ cloudtechtallinn.com/agenda #VisitTallinn #CTTT26
6 Predictions for the AI Economy: 2026's New Rules of Cybersecurity www.paloaltonetworks.com/perspectives...
2026 Cybersecurity Predictions
Secure the autonomous enterprise. Get 6 essential predictions detailing the new rules of cybersecurity required to innovate confidently in the AI-native economy.
paloaltonetworks.com
Microsoft is increasing prices for many of its products due to changes in its Enterprise Agreement (EA) volume licensing, effective November 1, 2025. The company is eliminating tiered discounts. This change will result in a cost increase of 6% to 12% for many. www.microsoft.com/en-us/licens...
Microsoft Online Services: Pricing Consistency Update | Microsoft Licensing Resources
Upcoming updates to Online Services pricing under volume licensing programs.
microsoft.com
Struggling to manage it all at work? 5 ways to delegate like a pro - and lighten your load Leading isn't easy. Five business leaders share how to hand off responsibility, build trust, and focus on long-term success. #hackernews #news
Struggling to manage it all at work? 5 ways to delegate like a pro - and lighten your load
Leading isn't easy. Five business leaders share how to hand off responsibility, build trust, and focus on long-term success.
zdnet.com
If you want to learn more about how to use the #entraid advanced features for your blue team, check out my talk on Thursday at 11.45 AM! #iam #CyberSecurity #tallinn
Cloud Tech Tallinn@cloudtechtallinn.com · last yr.Our agenda is now published on our website 🥳🥳🥳 Check it out and start planning your days! Agenda: cloudtechtallinn.com/agenda Tickets: cloudtechtallinn.com #CTTT26 #VisitTallinn
Amazon Outage is Waking People up Regarding Our Slavery to the Internet - U.S. Government Failing in Defense Against Cyberattacks medicalkidnap.com/2025/10/23/a...
Amazon Outage is Waking People up Regarding Our Slavery to the Internet – U.S. Government Failing in Defense Against Cyberattacks - Medical Kidnap
In the wake of the Amazon Web Services (AWS) outage earlier this week, there have been numerous articles published in the media concerning just how vulnerable our society has become to just a few Big ...
medicalkidnap.com
A foreign actor infiltrated the National Nuclear Security Administration’s Kansas City National Security Campus through vulnerabilities in Microsoft’s SharePoint browser-based app, raising questions about the need to solidify further federal security protections. www.csoonline.com/article/4074...
Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
A foreign actor infiltrated the National Nuclear Security Administration’s Kansas City National Security Campus through vulnerabilities in Microsoft’s SharePoint browser-based app, raising questions a...
csoonline.com
ConnectWise fixes Automate bug allowing AiTM update attacks ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...] #hackernews #news
ConnectWise fixes Automate bug allowing AiTM update attacks
ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...]
bleepingcomputer.com
China accuses US of cyberattack: Beijing says sensitive info stolen; what is National Time Center? Representative image (AI) China on Sunday accused the US National Security Agency (NSA) of carrying out cyberattacks on its National Time Service Center. It further warned that any damage to the…
China accuses US of cyberattack: Beijing says sensitive info stolen; what is National Time Center?
Representative image (AI) China on Sunday accused the US National Security Agency (NSA) of carrying out cyberattacks on its National Time Service Center. It further warned that any damage to the facility could disrupt network communications, financial systems and power supply.The Ministry of State Security said in a WeChat post that the US agency exploited vulnerabilities in the messaging services of a foreign mobile phone brand in 2022 to steal sensitive information from devices used by the center’s staff.
dotnewstv.in
Just shared a new blog post on how Microsoft Azure’s Security Suite gets even stronger with Palo Alto Networks’ tech and Unit 42’s intelligence. It’s about collaboration, visibility, and resilience across every layer of defense. Read here 👇 vasenius.fi/enhancing-mi...
Enhancing Microsoft Azure's Security Suite with Palo Alto Networks and Unit 42 - The Security Everywhere
Disclaimer: This post reflects my personal perspective as I begin my new role at Unit 42. The views expressed here […]
vasenius.fi
NDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile World Author, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA) Our thanks to the Network and Distributed … #hackernews #news
NDSS 2025 – Keynote 2: Towards Resilient Systems In An Increasingly Hostile World
Author, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA) Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the organization’s’ YouTube channel.
securityboulevard.com
Financial, Other Industries Urged to Prepare for Quantum Computers
Financial, Other Industries Urged to Prepare for Quantum Computers
Despite daunting technical challenges, a quantum computer capable of breaking public-key encryption systems may only be a decade or two off.
darkreading.com
PoC Exploit Unveiled for Lenovo Code Execution Vulnerability Enabling Privilege Escalation
PoC Exploit Unveiled for Lenovo Code Execution Vulnerability Enabling Privilege Escalation
cybersecuritynews.com
Excited to be part of the new Evo Finland podcast episode on Security x AI 🎙️ We dive into when to build vs. buy AI tools, the newest AI-native threats, and why human oversight still matters. 🎧 Listen here: open.spotify.com/episode/5JbU... #AI #CyberSecurity #EvoFinland
Evo Finland #27 - Security & AI In Practice
open.spotify.com
Rolling out Microsoft Purview just got easier. This friendly deployment guide turns the latest models and the lightweight blueprint into a simple good, better, best path. Start fast, protect data, grow with confidence. Read more: vasenius.fi/how-to-choos... #MicrosoftPurview #DataSec
How to Choose the Right Microsoft Purview Deployment Model - The Security Everywhere
Rolling out Purview doesn’t have to feel like a maze. Microsoft has packaged its guidance into short, scenario driven “deployment […]
vasenius.fi
Anatomy of a Billion-Download NPM Supply-Chain Attack open.substack.com/pub/jdstaerk...
Anatomy of a Billion-Download NPM Supply-Chain Attack
A massive NPM supply chain attack has compromised foundational packages like Chalk, affecting over 1 billion weekly downloads. We dissect the crypto-stealing malware and show you how to protect your p...
open.substack.com
Unify SecOps with Sentinel Data Lake and Defender XDR. Learn RBAC hardening, onboarding, incident correlation, Purview audit logging, and cost aware retention. vasenius.fi/microsoft-pu... #MicrosoftSecurity #SecOps #SecurityOperations #MicrosoftSentinel #MicrosoftPurview
Microsoft Purview with Unified SecOps - Powerful Combination? - The Security Everywhere
Unify SecOps with Sentinel Data Lake and Defender XDR. Learn RBAC hardening, onboarding, incident correlation, Purview audit logging, and cost aware retention.
vasenius.fi