Start your day with intelligence. Get The OODA Daily Pulse.

Home > OODA Analysis and Briefs

Analysis

  • The Cyber Threat To NASA’s Artemis Program

    NASA is enabling another giant leap for humanity. With the Artemis program, humans will return to the Moon in a way that will enable establishment of gateways to further exploration of not just the Moon but eventually the entire solar system. The initial expenses of the program will return significant advances for scientific understanding and…

  • The Key to a Defensible Cyberspace – A Look at the Work of Jason Healey and the NY Cyber Task Force

    Jason Healey has been a vocal advocate for challenging the assumptions and metrics we use to develop a defensible cyberspace and also to ensure that the networks of today continue to afford us great communication, economic, and societal benefits.  This in-depth article takes a look at Jason’s work, with a special emphasis on his NY…

  • The Hackers Who Saved the World – Interview with Author Joe Menn

    I’ve just finished reading an advance copy of Joseph Menn’s new book Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World (Amazon Link) and can recommend highly for OODA Loop members. As the importance of hacker history goes, this was a book that was destined to be written.  I’m…

  • How a Presidential Commission Was Tracking Hackers in 1996

    The President’s Commission on Critical Infrastructure Protection is often cited as one of the most important initiatives from the 1990s that advanced our cybersecurity programs in the U.S.  The commission, which looked at cyber threats to critical infrastructure, created a lasting critical infrastructure framework that is still in use today.  In addition, it proposed the…

  • Maturing the Cyber Threat Intelligence Field into a Discipline

    My background is in operational intelligence. I started my career as a naval intelligence officer working the dynamic problems of operational fleets in real-world, ours-vs-theirs situations. I later worked joint and allied military intelligence, but still in that operational side of the field, trying to figure out what might happen in chaotic situations where adversaries…

  • Is There An Emerging Global Food Industry Resiliency Crisis?

    It is a truism that every society is only a few meals away from revolution, proven not for the first time when high food prices initiated the Arab Spring, and yet food security is a woefully neglected national security concern. America lacks a national food policy, even though we are headed towards a crisis.

  • Cyber Threat Analysis Report Volume 1, Edition 6

    The black hat hiding in the closet and other analysis by Mike Tanji in this week’s Cyber Threat Analysis Report.

  • Unmasking Maskirovka: Russia’s Cyber Influence Operations – OODA Network Expert Book Review

    Unmasking Maskirovka: Russia’s Cyber Influence Operations examines Russian ‘Information Operations’ (InfoOps) as a tool of strategic influence.  This exploration is timely and relevant given the Russian assault on the American electoral process in the 2016 Presidential election—especially since the long-range implications are still being assessed.

  • Cyber Threat Analysis Report Volume 1 Edition 5

    Why is it so hard for us to pay attention to cybersecurity? Mike Tanji analyzes the latest news and trends in the cybersecurity industry.

  • Cyber Threat Analysis Report Volume 1, Edition 4

    NIST’s Ron Ross on the state of cyber: ’We literally are hemorrhaging critical information’ After Chinese hackers infiltrated a Navy subcontractor’s computer network and stole a trove of highly sensitive data on submarine warfare, it spurred the government to revise the standards that contractors must follow to ensure government data is properly protected data. What…

  • Cyber Threat Analysis Report Volume 1, Edition 3

    Can you trust NSA tools? This and more as OODA Network Expert Michael Tanji provides insightful analysis of the most recent and significant cyber news.

  • Global security spending to top $103 billion in 2019, says IDC

    New IDC data confirms the global trend toward increased cybersecurity spending. The IDC projects spending to reach $103 billion this year, which would represent a 9.4% increase, the bulk of which is due to expanded security budgets at companies with over 500 employees. Between 2018 to 2022, spending is expected to increase by 9.2% each…

  • Email – The Often Overlooked Cybersecurity Risk

    Are silly email mistakes putting your sensitive data and customer PII at risk or in violation of GDPR. Matt Devost breaks down four real life examples that highlight inadvertent email risks.

  • The State of the Cybersecurity Community: An update following RSA 2019

    OODA Experts provide their perspective on the RSA 2019 conference including a list of 30+ companies to watch.

  • The Cyber Threat Analysis Report Volume 1 Edition 2

    Fresh off of RSA – OODA Network Expert Michael Tanji provides insightful analysis of the most recent and significant cyber news.

Briefs

  • Humanoid robots are here, but they’re awkward. Do we really need them?

    Building a robot that’s both human-like and useful is a decades-old engineering dream inspired by popular science fiction. While the latest artificial intelligence craze has sparked another wave of investments in the quest to build a humanoid, most of the current prototypes are clumsy and impractical, looking better in staged performances than in real life.…

  • OpenAI chief seeks new Microsoft funds to build ‘superintelligence

    OpenAI plans to secure further financial backing from its biggest investor Microsoft as the ChatGPT maker’s chief executive Sam Altman pushes ahead with his vision to create artificial general intelligence (AGI) — computer software as intelligent as humans. In an interview with the Financial Times, Altman said his company’s partnership with Microsoft’s chief executive Satya…

  • Personalized A.I. Agents Are Here. Is the World Ready for Them?

    You could think of the recent history of A.I. chatbots as having two distinct phases. The first, which kicked off last year with the release of ChatGPT and continues to this day, consists mainly of chatbots capable of talking about things. Greek mythology, vegan recipes, Python scripts — you name the topic and ChatGPT and its…

  • How Chinese Aggression is Increasing the Risk of War in the Taiwan Strait

    China’s increasingly aggressive activities around Taiwan are fueling fears that the United States could be drawn into a third major war in the world. Reestablishing communication channels will be high on the agenda when President Biden talks with Chinese leader Xi Jinping this week. Aside from wearing down Taiwanese defenses, these aggressive activities create psychological…

  • Indonesian President Joko Widodo Heads to U.S. Amid Gaza Tensions

    Indonesian President Joko Widodo is in the United States this week for a summit with President Joe Biden at the White House amid the Israel-Gaza war. The visit has prompted questions about whether Widodo will call for a ceasefire in Gaza. The issue is particularly heated as the Indonesia Hospital has been encircled by Israeli…

  • Netanyahu Sees No Near-Term Role for Palestinian Authority in a Postwar Gaza

    Even as Israeli tanks and ground troops continued to battle Hamas militants in Gaza, Prime Minister Benjamin Netanyahu on Sunday outlined a postwar vision for the territory. This version does not involve the Palestinian Authority in its current form. Mr. Netanyahu said “overall military responsibility” would be handled by Israel after the war. The comments…

  • U.S. Carries Out Another Round of Airstrikes on Targets Tied to Iran

    The United States conducted a new round of airstrikes against facilities used by Iran and its proxies in eastern Syria late Sunday in retaliation for a spate of recent attacks against American troops, Pentagon officials said on Sunday. The airstrikes appeared to mark an escalation by the Biden administration. U.S. officials blame Iran and the…

  • Ransomware Group Leaks Files Allegedly Stolen From Boeing

    The notorious LockBit ransomware group has leaked gigabytes of files allegedly stolen from the systems of aerospace giant Boeing. The allegedly stolen data has been leaked, indicating that the company has refused to pay a ransom. The aerospace giant is aware that a ransomware group has released information allegedly taken from its systems, but it…

  • 2.2 Million Impacted by Data Breach at McLaren Health Care

    Michigan healthcare system, McLaren Health Care, is informing around 2.2 million individuals that their personal information was compromised in a data breach earlier this year. The threat actor stole names, dates of birth, Social Security numbers, health insurance information, and medical information. McLaren Health Care said it has no evidence that the stolen information has…

  • Success Eludes the International Counter Ransomware Initiative

    Ransomware is growing at tremendous rates and focusing on critical infrastructure sectors that can impact vast numbers of citizens. It is such a blight that countries are banding together to see what can be done. Everybody is looking towards the United States for leadership. The CRI has recently trumpeted a collective plan to fight ransomware…

  • ChatGPT: OpenAI Attributes Regular Outages to DDoS Attacks

    The popular generative AI application ChatGPT experienced recurring outages this week. The company attributed the recurring disruptions to a distributed denial of service (DDoS) attack resulting in high error rates in the API and ChatGPT itself, and said that it’s undertaking a series of countermeasures to get the service back up and running. While OpenAI…

  • Generative AI still mostly experimental, say executives

    One year after the debut of ChatGPT created a global sensation, leaders of business, government and civil society said at the Reuters NEXT conference in New York that generative AI technology is still mostly in an experimental stage, with limited exceptions. While ChatGPT has enchanted consumers with its ability to generate everything from Shakespeare-style sonnets…

  • 5 ChatGPT Prompts To Identify Your Next Big Business Opportunity

    What could be around the corner for you? A huge new business, a game-changing client, a jaw-dropping deal? All of these things could be on their way. But rather than sit there and try to manifest them into your life, you can use ChatGPT to go out and find them. You can explore the possibilities…

  • AI robotics’ ‘GPT moment’ is near

    It’s no secret that foundation models have transformed AI in the digital world. Large language models (LLMs) like ChatGPT, LLaMA, and Bard revolutionized AI for language. While OpenAI’s GPT models aren’t the only large language model available, they have achieved the most mainstream recognition for taking text and image inputs and delivering human-like responses even…

  • The Department of State Unveils its First-Ever Enterprise Artificial Intelligence Strategy

    The Department of State released its first-ever “Enterprise Artificial Intelligence Strategy FY 2024-2025: Empowering Diplomacy through Responsible A I” (EAIS) on November 9, 2023. Signed by Secretary Blinken, the EAIS establishes a centralized vision for artificial intelligence (AI) innovation, infrastructure, policy, governance, and culture by inaugurating Department-wide guidance for the responsible and ethical design, development,…

  • OpenAI seeks partnerships to generate AI training data

    It’s an open secret that the data sets used to train AI models are deeply flawed. Image corpora tends to be U.S.- and Western-centric, partly because Western images dominated the internet when the data sets were compiled. And as most recently highlighted by a study out of the Allen Institute for AI, the data used to…

  • US Government Issues Guidance on SBOM Consumption

    The US cybersecurity agency CISA, the NSA, and the Office of the Director of National Intelligence (ODNI) have issued new guidance for software vendors and suppliers to enhance the security of the software supply chain. This document helps organizations assess their security practices throughout the software development lifecycle, including the management of open source software…

  • France, UK Seek Greater Regulation of Commercial Spyware 

    France and Britain are jointly calling for increased global regulation of commercial surveillance software, prompted by recent spyware scandals involving tools like Pegasus and Predator. They caution against the uncontrolled development and use of surveillance technology, highlighting the potential for misuse with just a few lines of code. The unregulated use of such software raises…

  • Intel Sued Over ‘Downfall’ CPU Vulnerability 

    A class action lawsuit has been filed against Intel by plaintiffs represented by Bathaee Dunne regarding the handling of speculative execution vulnerabilities in its CPUs, including the recent Downfall attack. The plaintiffs argue that Intel CPUs are “defective” because they remain vulnerable to cyberattacks or experience significant performance slowdowns due to vulnerability fixes. The complaint…

  • Iran Warns of ‘Inevitable Expansion’ of Israel-Gaza War

    According to Iran’s foreign minister, an expansion of the scope of the war in Gaza is “inevitable” due to Israel’s heightened aggression. Regional tension and cross-border clashes have intensified since Hamas, the Iran-backed group that runs Gaza, attacked Israel on October 7, triggering Israel’s war on the enclave. United States and coalition troops have been…

  • US Troops Face Further Attacks in Iraq

    United States troops in Iraq have been targeted in new attacks using drones and explosives, military and security sources reported. Since the war between Israel and Hamas began, US and coalition troops have been attacked at least 40 times in Iraq and Syria. The US has accused Iran of “actively facilitating” rocket and drone attacks…

  • Hungary Signals Veto of Ukraine EU Membership Talks

    Hungary’s premier said negotiations on Ukrainian membership in the European Union should not move forward. Unanimity among all member states is required to admit a new country into the bloc, giving Orban a powerful veto. Under the pro-Russian leader, Hungary has often complicated EU efforts to support Ukraine amid Moscow’s invasion.  Read more: https://www.aljazeera.com/news/2023/11/10/hungarys-orban-says-negotiations-on-ukraines-future-eu-membership-should-not-move-forward

  • Biden and Xi to Seek to Stabilize Relations in California Meeting

    President Biden and President Xi Jinping plan to meet on Wednesday, where Mr.Biden’s advisers say the discussion will be about stabilizing relations even as it features a host of topics on which the two fiercely competitive countries disagree. Mr. Biden is prepared to bring up issues including Taiwan, election interference, the war in Ukraine and…

  • 10 Tips For Safeguarding Your Business In The Age Of Artificial Intelligence

    Artificial intelligence (AI) has rapidly infiltrated our daily lives and the business landscape, revolutionizing the way we consume and interact with information. Machine learning algorithms, natural language processing and deep learning models enable AI systems to analyze vast amounts of data, generate content and even mimic human conversations. While AI holds immense promise, it also…

  • Man crushed to death by robot that mistook him for a box of vegetables

    A South Korean man has been crushed to death by an industrial robot that mistook him for a box of vegetables. The man, who was in his 40s, had been inspecting a problem with the robot’s sensor at a distribution centre for agricultural produce in South Gyeongsang province. According to the Yonhap news agency, the…

  • OpenAI unveils 16 custom ChatGPT bots to help you with specific tasks

    ChatGPT subscribers who want to get a taste of OpenAI’s custom GPT chatbots can now take a host of different ones for a spin. At its Dev Day event on Monday, the company revealed that subscribers would be able to create their own ChatGPT chatbots for specific tasks. Though that option isn’t yet available, 16…

  • Amazon dedicates team to train ambitious AI model codenamed ‘Olympus’

    Amazon is investing millions in training an ambitious large language model (LLMs), hoping it could rival top models from OpenAI and Alphabet, two people familiar with the matter told Reuters. The model, codenamed as “Olympus”, has 2 trillion parameters, the people said, which could make it one of the largest models being trained. OpenAI’s GPT-4…

  • Humane may be launching a $699 AI-powered projector to replace your phone. That’s not the craziest part

    If there’s one company that’s truly embraced the ChatGPT/AI era, it’s Humane, a secretive startup built by a super team of ex-Apple employees, including co-founders Imran Chaudhri and Bethany Bongiorno. The company, which has been drip-feeding teasers and mission statements over the past four years of its first-ever consumer product, is set to unveil the…

  • WhatsApp releases new security features to protect users’ IP addresses

    WhatsApp is the most popular messaging app in the world and one aspect of the app that users prefer is its strong security and privacy features. This summer, WhatsApp added a feature that allows users silence unknown callers. The messaging app now has a setting that can hide your IP address from other parties on…

  • Ransomware Mastermind Uncovered After Oversharing on Dark Web

    Researchers responded to an ad to join up with a RaaS operation and ended up in a cybercriminal job interview with one of the most active threat actors in the affiliate business. This person “farnetwork” is behind at least five different strains of ransomware. The criminal was unmasked after giving over too many specifics to…

  • A turning point in Myanmar as army suffers big losses

    The military-installed president of Myanmar has warned that the country may break apart if the government can’t control the fighting that has begin in Shan State. The speech was given at an emergency meeting held by the ruling military council to address coordinated attacks by anti-military insurgents which have inflicted serious losses on the armed…

  • Suspects held over alleged Hezbollah plot in Brazil

    An alleged plot to attack Jews in Brazil was foiled following the arrest of two men suspected to be linked to the Islamist group Hezbollah. The arrests were made in São Paulo on Wednesday in an operation that was described as a disruption of preparation of terrorist attacks. Other raids were carried out across the…

  • South Africa turns to army in nationwide clampdown on illegal mining

    South Africa’s president has requested thousands of military personnel to assist in the nationwide clampdown on illegal mining. The illegal mining activity in the country is estimated to cost South Africa billions of dollars per year. 3,300 army personnel will partner with police in the operation across all provinces of South Africa. This mission will…

  • Thick smog shuts down Pakistan’s Lahore, sickens tens of thousands

    A large amount of thick, toxic fog has settled in Pakistan’s Lahore city, causing tens of thousands of people to fall ill. Pakistan is one of the world’s most polluted countries. The toxic fog in eastern Pakistan on Thursday caused authorities to close schools, markets and parks for four days and drove residents to wear…

  • Samsung unveils ChatGPT alternative Samsung Gauss that can generate text, code and images

    Just a few days after OpenAI’s developer event, Samsung unveiled its own generative AI model, Samsung Gauss, at the Samsung AI Forum 2023. Samsung Gauss, developed by the tech giant’s research unit Samsung Research, consists of three tools: Samsung Gauss Language, Samsung Gauss Code and Samsung Gauss Image. Samsung Gauss Language is a large language model that…

  • The Strong Case For Board Oversight Of Artificial Intelligence

    While much of Corporate America has rushed to develop artificial intelligence strategies, the role of the board of directors in that process has remained questionable. Technology officers? Of course. Innovators and business strategists? You bet. Senior executives? Goes without saying. But the board of directors? Not quite sure what they’d bring to the table, other…

  • Meta to Require Political Advertisers to Disclose Use of A.I.

    Meta spent years figuring out how to handle political advertising across Facebook and Instagram. It put systems into place and developed policies for what types of political ads were and were not allowed on its platforms. But that was before the rise of consumer artificial intelligence. On Wednesday, Meta introduced a new policy to grapple with A.I.’s…

  • ChatGPT is back online after a 90-minute ‘major’ OpenAI outage

    OpenAI’s ChatGPT service is back online after being down and inaccessible for its 100 million weekly active users. ChatGPT went down shortly before 9AM ET / 6AM PT and remained inaccessible for more than 90 minutes. OpenAI said it was experiencing a major outage that also impacted the company’s API services. ChatGPT users were greeted…

  • An AI just negotiated a contract for the first time ever — and no human was involved

    In a world first, artificial intelligence demonstrated the ability to negotiate a contract autonomously with another artificial intelligence without any human involvement. British AI firm Luminance developed an AI system based on its own proprietary large language model (LLM) to automatically analyze and make changes to contracts. LLMs are a type of AI algorithm that can…

  • Israeli archaeologists help find remains of Hamas attack victims

    Archaeologists have been tasked with helping Israel’s military identify the remains of 1,400 people killed in Hamas’s attack on 7 October. They have been examining burnt houses and cars at a festival site where hundreds died. At least 10 missing people have been found, and some have been buried. The Israel Antiquities Authority reports that…

  • G7 Summit: Bloc insists support for Ukraine ‘will never waver’

    The G7 group of countries has affirmed their support for Ukraine, despite rising Middle East tensions. The group’s foreign ministers acknowledged Russia’s readiness for a long war and reiterated their commitment to Ukraine economically and militarily. The G7 countries, including Britain, France, Germany, Italy, Japan, Canada, and the US, have been at the forefront of…

  • Sudan conflict: Thousands flee fresh ethnic killings in Darfur

    Thousands of people have been forced to flee the Sudanese region of West Dafur due to fears of ethnic cleansing. Witnesses accuse the paramilitary group Rapid Support Forces (RSF) of targeting and killing non-Arabs, with reports of hundreds of deaths. The RSF has been battling the Sudanese army for control of the country since April.…

  • Ukraine gets European Commission backing for talks on Ukraine membership

    The European Commission has recommended that formal talks should begin with Ukraine on joining the European Union, five months after the 27 member states gave it candidate status. Commission chief Ursula von der Leyen praised Ukraine’s progress and suggested talks should also start with Moldova and Georgia if they pass reforms. Ukraine has completed over…

  • Dropper Service Bypassing Android Security Restrictions to Install Malware

    A dropper-as-a-service (DaaS) called ‘SecuriDropper’ uses a session-based installer to sideload malware, bypassing Android’s Restricted Settings feature introduced by Google in Android 13. The malware uses an Android API to mimic a marketplace’s installation process, preventing the operating system from identifying the payload as sideloaded. The dropper asks permissions to read and write to external…

  • Marina Bay Sands Discloses Data Breach Impacting 665k Customers

    Singapore’s Marina Bay Sands luxury resort has reported a data breach affecting 665,000 customers, mainly its shopping loyalty program members. The breach occurred on October 19 and 20, allowing an unauthorized third-party to access information such as name, email address, phone number, country of residence, and membership details. The resort has not found evidence of…

  • FBI Highlights Emerging Initial Access Methods Used by Ransomware Groups 

    The FBI has issued a warning on ransomware operators exploiting vulnerabilities in third-party vendors and services to gain initial access to victim environments. Between 2022 and 2023, multiple ransomware attacks abused gaming vendors to compromise servers of small and tribal casinos and encrypt personal information. The FBI warns of callback-phishing data theft and extortion attacks…

  • Sumo Logic Urges Users to Change Credentials Due to Security Breach

    Sumo Logic, a provider of cloud monitoring and SIEM tools, has revealed a potential security breach involving unauthorized access to a AWS account. The company has advised customers to rotate credentials used to access Sumo Logic or other systems. The most urgent are API access keys, but users should also change installed collector credentials, third-party…

  • Hezbollah MP: group will respond ‘double’ over Lebanese civilians hurt

    A Lebanese Hezbollah lawmaker announced on Tuesday that the militant group will respond ‘double’ to any Israeli attacks on civilians. An Israeli strike killed three children and their grandmother in south Lebanon on Sunday. The rise in violence across the Israel-Lebanon border has increased fears of regional escalation of conflict. The same Hezbollah lawmaker stated…

  • Tanks poised around Gaza City; Netanyahu says Israel to run security after war

    Israel gave Gaza City civilians a four-hour window to escape on Tuesday before pressing forward with ground operations. Israeli Prime Minister Benjamin Netanyahu stated directly for the first time that Israel will handle security operations within Gaza for an indefinite period. Gaza’s interior ministry says 900,000 Palestinians are still sheltering in northern Gaza and Gaza…

  • Bosch, SAP and others back Europe’s answer to OpenAI with $500 million of fresh funds

    Aleph Alpha, a German startup taking on Microsoft-backed artificial intelligence firm OpenAI, said Monday it had raised $500 million in a funding round backed by the likes of Bosch, SAP and Hewlett Packard Enterprise. The company, which has built its own large language models, raised the fresh cash in a series B round, the company’s second…

  • OpenAI promises to fund legal costs for ChatGPT users sued over copyrigh

    OpenAI said it would cover the legal costs for business-tier ChatGPT users who find themselves in hot water over copyright infringement. OpenAI is calling its pledge Copyright Shield, which only covers users of its business-tier ChatGPT Enterprise and its developer platform. OpenAI isn’t covering users of the free and Plus ChatGPT versions. On Nov. 6,…

  • American Airlines Pilot Union Recovering After Ransomware Attack

    The Allied Pilots Association suffered a file-encrypting ransomware attack last week. The organization is now restoring its pilot-facing products and tools and hopes to recover its other services soon. The APA revealed that hackers used ransomware during the attack. They did not provide additional information on the variant of ransomware or specify if hackers exfiltrated…

  • The Evolution Of AI: From IBM And AWS To OpenAI and Anthropic

    I was recently engaged in a conversation about my work on Watson back in 2015 when a comment I received confused with me: “AI just started! Was ChatGPT created in 2015?” I realized then that many people didn’t realize the depth of AI history. First of all, what is AI? Artificial Intelligence, a specialty within…

  • OpenAI Now Lets You Build Your Own Custom GPT Chatbots

    OpenAI, the company whose ChatGPT brought AI chatbots to mainstream awareness, said Monday that it’ll let you build your own special-purpose version of its artificial intelligence technology. And with a new app store coming that’ll let you find or share these GPTs, as the company is calling the special-purpose bots, OpenAI looks like it’s hoping…

  • Ransomware Gang Leaks Data Allegedly Stolen From Canadian Hospitals

    Hackers recently targeted five Canadian hospitals with data breaches: Bluewater Health, Chatham-Kent Health Alliance, Erie Shores HealthCare, Hôtel-Dieu Grace Healthcare, and Windsor Regional Hospital. The Daixin ransomware gang claimed responsibility for the attack. Bluewater Health announced it alone lost information on 5.6 million visits made by 270,000 unique patients during the breach. The other four…

  • New models and developer products announced at DevDay

    Today, we shared dozens of new additions and improvements, and reduced pricing across many parts of our platform. These include: New GPT-4 Turbo model that is more capable, cheaper and supports a 128K context window New Assistants API that makes it easier for developers to build their own assistive AI apps that have goals and…

  • Blinken discusses Gaza in Turkey, wraps up Mideast tour with little progress

    Yesterday, U.S. Secretary of State Antony Blinken concluded a four-day tour in the Middle East, his second trip to the region since the Israel-Hamas conflict erupted on October 7. Blinken’s meetings focused on securing humanitarian aid for Gaza and returning hostages currently held by Hamas. Blinken’s trip did not secure a humanitarian pause in Israel’s…

  • ‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks

    A threat actor recently exploited a privilege escalation vulnerability in the GNU C Library (glibc) to conduct cloud attacks. Aqua Security attributed the activity to the Kinsing threat actor, which has previously conducted cryptojacking operations and targeted containerized environments. The Looney Tunables vulnerability (CVE-2023-4911) enables hackers to execute arbitrary code and escalate privileges on major…

  • Polish truckers block Ukraine border crossings over loss of business

    Polish truckers blocked three border crossings with Ukraine on Monday to protest the loss of business to Ukrainian truckers and other foreign entities. The Polish government exempted Ukrainian truckers from the previously required permit process in February 2o22. The Polish truckers claim that Russian and Belarusian companies also exploited this exemption to establish Polish entities.…

  • US Sanctions Russian National for Helping Ransomware Groups Launder Money

    The US Department of the Treasury’s Office of Foreign Assets Control (OFAC) imposed sanctions against Ekaterina Zhdanova on Friday. Zhdanova, a Russian national, allegedly laundered money for ransomware organizations and Russian elites. OFAC stated that Zhdanova maintained access to the international financial system through transactions with traditional luxury businesses on behalf of her clients. She…