Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
US Government Email Systems Open to Abuse Thanks to Typos
Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
APT29's Watering Holes Target Thousands of Mobile Users
After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.
openSUSE Leap 16.1 gives Linux users the right to remain immutable
openSUSE Leap 16.1 lets users choose between a conventional Linux installation and an immutable system from the same installer, bringing the previously separate Leap Micro into the fold. It's the first point release after Leap 16.0, which we looked at last year when it reached the release candidate stage. Leap 16.1 has arrived ahead of its paid enterprise sibling, SUSE Linux En
SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era
The ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AI-driven security operations.
Microsoft fixed Excel 2016 copy-paste bug. Then reintroduced it. Now it's fixed again
The Excel copy-and-paste bug is back, which means Microsoft is making a second round of fixes. The bug first appeared in the September update and manifested in multiple versions of Excel as a silent failure of the paste operation. Users copied content and attempted to paste it, but the destination cell was unchanged no matter how hard they mashed the Ctrl+V keys. Microsoft fixe
SAP promises to open out data flows in both directions
SAP has taken meaningful steps in opening its data to bidrectional sharing across the enteprise, and in decoupling the advanced analytics needed for AI from its ERP upgrade path. During a technical conference last week, the German software giant adopted native support for Apache Iceberg, the open table format, and extended its partnership with Databricks to bring data from lega
Microsoft admits certifications can be a drag, launches creds that recognize skills
When The Register writes about professional certifications offered by vendors, we often receive comments arguing that such credentials are nowhere near as valuable as real-world experience. Now, Microsoft has acknowledged there’s some merit in that argument. Redmond revealed its stance last week in a post from general manager for content and insights Cameron Percy, who observed
Critical Rails Bug Threatens to Derail Vulnerable Servers
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
Google, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet
Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity.
Incidents Move Too Fast for Pen & Paper
Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would alleviate pressure.
Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
The new YubiID service bridges identity verification with credential enrollment and recovery across existing identity platforms, closing a phishing-resistant authentication gap. Plus: post-quantum YubiKey beta.
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
Fresh European Fridge Attacks Put Cold-Chain Security in Focus
Beyond food storage, the same combination of Internet connectivity, remote access, and inadequate security practices can put temperature-controlled infrastructure across other critical sectors at risk.
Microsoft improves Windows 11 performance on 8 GB PCs as RAM prices keep climbing
With RAM getting more expensive, Microsoft is putting more effort into making Windows 11 run better on systems with just 8 GB of memory. Microsoft said on Tuesday that it was "raising the bar for 8 GB Windows 11 PCs," following a renewed focus on memory optimization earlier this year. The changes come as Redmond continues pushing more expensive Copilot+ PCs, which require at le
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
German police led a multinational probe that exposed an alleged crime-as-a-service provider supplying fraudulent trading platforms to investment scammers.
9 Cyber Awareness Tips That Actually Match Today’s Maze of Threats
Practical guidance on safer search, stronger login security, better executive protection, and other habits that help reduce enterprise risk.
GhostBSD 26.2 takes the fright out of FreeBSD with a friendlier installer
GhostBSD, the easiest-to-install flavor of FreeBSD for the daemon-curious desktop dabbler, is back with a fresh update. GhostBSD 26.2-R15.1p6, to give it its slightly unwieldy full version number, is based on FreeBSD 15.1. It brings a new installer, full-disk encryption support, a smaller installation image, and fixes across its desktop tools. FreeBSD 15.1 was released back in
LLMJacking Emerges as Thriving Cybercriminal Enterprise
Cybercriminals have turned reselling cloud access to LLMs into a lucrative business model, with some victims paying as much as $1 million in resource consumption before access was revoked.
3AM Affiliate Embraces AI-Like Loops in European School Attack
Evidence suggests a model may have generated and revised commands during the ransom gang's breach, though researchers stopped short of claiming full automation.