Start your day with intelligence. Get The OODA Daily Pulse.

Home > OODA Analysis and Briefs

Analysis

  • Hypersonic Vehicles are a Technological Tie that Binds U.S.-Sino Researchers

    A report from the Frontier Assessments Unit is a deep dive into hypersonic vehicle research with a very specific framing:  that of the collaborative efforts between U.S. universities and their research affiliations with universities and research organizations in China:  “These vehicles hold the promise of revolutionizing rapid response capabilities, reconnaissance, and even commercial air travel…the…

  •  A Chip Alliance is Proposed by the U.S. as ASML Explores Foreign Expansion and New Market Rival Canon, Inc.

    Europe’s most valuable technology company, ASML Holdings, is responsible for the manufacturing of semiconductor machinery.  The chip-machinery maker is a shocking stovepipe in the future of the IT supply chain, ranking with the world’s dependence on Taiwanese chip maker TSMC as a troubling risk variable – two potential points of failure (with no redundancies in…

  • We Have a Privacy Executive Order!  Time to See It in Action

    In late February 2024, the Biden Administration issued its long-awaited Executive Order to protect the personal data of Americans from foreign threats by restricting access to Americans’ bulk data by “countries of concern,”  when such acquisition would “pose an unacceptable risk to the national security of the United States.”

  • A ChatGPT Use Case for the Board of Directors: Corporate Disclosure and Policy Assessments

    Researchers from the National Bureau of Economic Research (NBER)  offer some foundational thinking on how ChatGPT can be applied to corporate disclosures and policies.  According to the authors, this “study provides a first look at the potential of ChatGPT to extract managerial expectations and corporate policies. We believe that our findings have important implications for…

  • RAND Researchers Explore Scenarios for a U.S. Victory in a War with the PRC

    Policy researchers from the Rand Corp. ponder the question: “How can the United States prevail in a limited war with the People’s Republic of China (PRC) while avoiding catastrophic escalation?”  Find their analysis and  scenarios here.  

  • An Overview of the NIST Cybersecurity Framework 2.0

    The NIST Cybersecurity Framework (CSF) 2.0, an evolution of its predecessor, is a comprehensive guide designed to assist organizations across various sectors in managing and mitigating cybersecurity risks effectively. This framework, while not prescribing specific actions, offers a taxonomy of high-level cybersecurity outcomes, enabling organizations, regardless of their size, sector, or maturity, to better understand,…

  • The February 2024 OODA Network Member Meeting Discussion of the Current Geopolitical Terrain

    After the annual OODA CEO Matt Devost and OODA Network Members Review the OODA Almanac 2024 – Reorientation  at the February 2024 OODA Network Member Meeting – which was held on Friday, February 16, 2024 –  the network ended the monthly meeting with a discussion of the current geopolitical “free for all” and potential geopolitical…

  • How To Properly Cut Your Cybersecurity Budget

    Cybersecurity is one of those areas where cost cutting must be done with forethought. Cut the wrong things and it can lead to catastrophic results including government fines, criminal penalties and loss of customer confidence. Cut the right things and key risks can still be mitigated and they can be mitigated more efficiently.

  • Implementation Plan 2.0 Faces a Crucial Test

    According to recent reporting, the Office of the National Cyber Director (ONCD) intends to issue an update to the national cybersecurity strategy implementation plan in the coming months. 

  • The Defense Intelligence Agency on the Iranian-backed Drone Power of Russia and the Houthis

    Two recently declassified Defense Intelligence Agency (DIA) reports extensively detail the Iranian-backed drone capabilities fueling the reconfiguration of global warfare into a drone swarm architecture – fueling what John Robb has framed as the future:  asymmetric, non-nation-state kinetic capabilities organized into drone swarms enhancing the ability for warfighting capabilities “networked tribes” and “global guerrillas” usurping…

  • By 2026, Online Content Generated by Non-humans Will Vastly Outnumber Human Generated Content

    As an OODAcon 2023 panelist noted:  We are fast approaching a “tipping point” – when non-human generated content will vastly outnumber the amount of human generated content. A general quantitative validation has also been floating around: “90% of Online Content will be AI-generated by 2026”. We took the time to validate this quant and flesh…

  • Reorient Your Organization: Scenarios Exploring a Quantum Attack on Critical U.S. Power Grid Infrastructure

    The Hudson Institute report on “Risking Apocalypse? Quantum Computers and the US Power Grid” highlights the significant threat posed by potential quantum computer attacks on the US power grid. It emphasizes the vulnerability of the grid to such attacks, which could decrypt existing encryption systems and cause catastrophic outcomes. As we navigate the complexities of…

  • OODA CEO Matt Devost and OODA Network Members Review the OODA Almanac 2024 – Reorientation

    Every year, we also use one of our monthly meetings for a discussion of the annual OODA Almanac with the OODA Network.  This conversation took place at the February 2024 OODA Network Member Meeting – which was held on Friday 16, 2024.    

  • i-SOON Data Leak Is Interesting but Mostly Unsurprising

    The i-SOON leak tells us nothing new perhaps as much as solidify points that have long been suspected and acknowledged of Chinese cyber operations.  Beijing tasks out orders on areas of interest to a variety of collection means, much like any other government.  In this case, one company has been identified, and there are likely other companies…

  • Two Emergent and Sophisticated Approaches to LLM Implementation in Cybersecurity

    Google Security Engineering and The Carnegie Mellon University Software Engineering Institute in collaboration with OpenAI have sorted through the hype – and done some serious thinking and formal research on developing “better approaches for evaluating LLM cybersecurity” and AI-powered patching: the future of automated vulnerability fixes. This is some great formative framing of the challenges…

Briefs

  • AI: China and the US go head-to-head

    In terms of timing, it doesn’t get much better than this. On 20 January 2025, with the world focused on Donald Trump’s inauguration, China’s DeepSeek quietly launched its low-cost, open-source, high-performance large language model, called R1. The capabilities of DeepSeek are reported to rival or even surpass OpenAI’s ChatGPT-4, and at a fraction of the…

  • DeepSeek rushes to launch new AI model as China goes all in

    The Chinese startup triggered a $1 trillion-plus sell-off in global equities markets last month with a cut-price AI reasoning model that outperformed many Western competitors. Now, the Hangzhou-based firm is accelerating the launch of the successor to January’s R1 model, according to three people familiar with the company. Deepseek had planned to release R2 in…

  • Trump and Macron Display Old Friendship but Split on the Ukraine War 

    On Monday, President Trump and President Emmanuel  Macron met for the first time since last month’s inauguration. The two officials put on a show of friendship, but signs of the growing divide between the U.S. and Europe over the Russia-Ukraine war were apparent. While Trump declined to call Putin a dictator, Macron stated that “the…

  • Taiwan Detains a Chinese-Crewed Ship After Undersea Cable Severed 

    Taiwanese authorities have detained a Chinese-crewed chip following the severing of an undersea communications cable near the island. Investigators believe the cargo ship may have been behind the damage. This is the latest incident in a series of cable severings which have provoked theories of Russia and China using cable sabotage as a method of…

  • ‘We’re Your True Friends,’ Xi Tells Putin, as Trump Courts Russia 

    China’s leader Xi Jinping had a video call with Russian President Vladimir Putin on Monday during which the two countries reaffirmed their friendship. The move is an apparent rebuff to recent ideas that the Trump administration would divide Russia and China. Xi said that China and Russia were “true friends who have been through thick…

  • Ukraine Nears a Deal to Give U.S. a Share of Its Mineral Wealth 

    The U.S. and Ukraine are nearing a deal that will give the U.S. a share of Ukraine’s natural resource revenues. President Trump and a Ukrainian government official announced the updates on the agreement on Monday, following Trump’s intense campaign for Ukraine to strike a deal. Trump said that he believes Ukrainian President Volodymyr Zelensky may…

  • OpenAI Bans ChatGPT Accounts Used by Chinese Group for Spy Tools 

    OpenAI has released a report describing its recent banning of ChatGPT accounts used by Chinese groups for espionage. The threat intelligence report highlights two operations. During the first operation, ChatGPT accounts were used to edit and debug code that searched for conversation on Chinese social and political topics on social media. The second operation involved…

  • DeepSeek’s ByteDance Data-Sharing Security Concerns 

    Security researchers are alerting to DeepSeeks sending of information back to a third party. A South Korean data protection agency reported that the AI tool is sending data to China’s ByteDance, the parent company of TikTok. The announcement was made just a day after South Korea suspended DeepSeek downloads in the country last week. The…

  • Australia Bans Kaspersky Software Over National Security and Espionage Concerns 

    Australia has now banned Russia’s Kaspersky software, citing national security concerns. Australia’s Secretary of the Department of Home Affairs, Stephanie Foster, said that she had determined the government’s use of Kaspersky products to pose “an unacceptable security risk to Australian government, networks, and data.” The government’s new directive prohibits entities from installing the company’s products…

  • Massive botnet hits Microsoft 365 accounts 

    A botnet has been discovered to have compromised over 130,000 devices. The botnet is launching coordinated password-spraying attacks against Microsoft 365 accounts. Security researchers are looking at possible connections to Chinese affiliated threat actors, as they have found evidence of infrastructure linked to China. While password spraying is a well-known technique, this campaign is a…

  • MongoDB Buys Voyage AI for $220 Million to Bolster AI Search

    Database company MongoDB Inc. said it’s acquiring Voyage AI for $220 million in a cash-and-stock deal to fast-track its ability to help its customers build artificial intelligence-powered applications. Through the deal, New York-based MongoDB aims to integrate Voyage’s retrieval tools for higher-quality AI outputs with real-time operational data for businesses, allowing its customers to develop…

  • Quantum Computing Has Arrived; We Need To Prepare For Its Impact

    Since the development of the electronic calculator in the 1960s, the field of computing has seen tremendous breakthroughs. In the field of information processing, the last several years have been particularly revolutionary. Technology has made what were previously considered science fiction dreams a reality. Our enabling equipment has become smaller and more versatile, and classical…

  • China taps tech talent to boost AI data centre boom

    Chinese state-owned data centres flush with artificial intelligence chips are tapping the expertise of technology groups to help bolster their multibillion-dollar investments as part of a nationwide effort to increase adoption of the fast-developing technology. Local governments have enlisted Merit Interactive and start-ups Infinigence AI and SiliconFlow to develop technology for the surge of AI…

  • Small Language Models Could Redefine The AI Race

    When ChatGPT, Gemini and its other generative AI cohorts burst onto the scene a little over two years ago, talk about large language models — artificial intelligence models trained on large volumes of datasets to understand and generate human-like texts and visuals — dominated the technology scene. For years, the AI race was defined by…

  • AI-Powered Robots Advance in General Tasks in a Crowded Market

    The dream of having robots do household chores inched a little closer to reality last week. Figure, an OpenAI-backed robotics artificial intelligence (AI) startup, showed off humanoid robots that can understand voice commands and can grab objects they had never seen before. In a Figure video, a guy holding a bag of groceries starts unloading…

  • The Largest Theft in History – Following the Money Trail from the Bybit Hack

    On February 21st 2025, approximately $1.46 billion in cryptoassets were stolen from Bybit, a Dubai-based exchange. Initial reports suggest that malware was used to trick the exchange into approving transactions that sent the funds to the thief. This is by the far the largest crypto heist of all time, dwarfing the $611 million stolen from…

  • Apple to Build A.I. Servers in Houston and Spend $500 Billion in U.S.

    Days after Apple’s chief executive met with President Trump, the company said on Monday that it planned to spend $500 billion and hire 20,000 people in the United States over the next four years and open a factory in Texas to make the machines that power the company’s push into artificial intelligence. “We are bullish…

  • Israel Says It Won’t Release Prisoners Until Hamas Stops ‘Humiliating’ Hostage Handovers

    Israel said it is temporarily withholding the release of any Palestinian prisoners until Hamas stops staging “ceremonies that humiliate our hostages,” throwing into question the future of the Gaza cease-fire. On Saturday. Hamas handed over six hostages in ceremonies, where the men were forced to wave on stage before crowds. Hamas also released a video…

  • Ukraine’s Zelensky Wants Better Terms on Minerals Deal Demanded by Trump

    The dispute over the minerals proposal is part of mounting disagreements between the U.S. and its allies about how best to end the war in Ukraine. Ukrainian President Volodymyr Zelensky said the administration should offer a better deal on mineral rights, saying the current U.S. offer demanded ruinous financial contributions from Ukraine. He called for…

  • Israel Expands West Bank Offensive, Says Troops to Remain ‘For Next Year’

    Israel says it is expanding its military offensive across the occupied West Bank and preparing for troops to remain in some refugee camps “for the next year”.  For more than a month, Israeli forces have been raiding Palestinian homes and using bulldozers to destroy critical infrastructure. The Israeli army said tanks have been deployed in…

  • Ukraine’s Zelenskyy offers to leave office in exchange for peace, NATO

    Ukrainian President Volodymyr Zelenskyy has offered to give up his position in exchange for peace and membership in NATO. Zelenskyy made the offer in a news conference in Kyiv on Sunday as the rift widens between himself and the new government in the United States, led by President Donald Trump. Last week, Trump called Zelenskyy…

  • US Charges Genesis Market User

    The US Justice Department last week announced charges against a man accused of buying credentials from the Genesis Market cybercrime marketplace, as well as using and selling those credentials. The suspect purchased roughly 2,500 stolen login credentials from Genesis Market. The man has been charged with wire fraud, aggravated identity theft, possession of unauthorized access…

  • Freelance Software Developers in North Korean Malware Crosshairs

    Hundreds of freelance software developers have been targeted and infected with North Korean malware over the past year. The victims were targeted with fake job opportunities as part of a widespread campaign tracked as DeceptiveDevelopment. As part of the attacks, ongoing since early 2024, the threat actors relied on fake personas and copied profiles to…

  • The future of organ transplants: Xenotransplantation, 3D bioprinting and stem cells

    When David Bennet received a new heart in January 2022, there was something very unusual about the organ being transplanted into his body – instead of coming from a human donor, it was actually a genetically modified pig heart. Marking a major breakthrough, it was the first time that a genetically engineered pig heart had…

  • Alibaba CEO Wu Says AGI Is Now Company’s ‘Primary Objective’

    Alibaba Group Holding Ltd.’s chief executive officer said the pursuit of artificial general intelligence is now the company’s “primary objective.” “Our first and foremost goal is to pursue AGI,” Eddie Wu told investors on a call after the company reported results that surpassed analyst estimates. “We aim to continue to develop models that extend the…

  • Will quantum computers disrupt critical infrastructure?

    Twenty five years ago computer programmers were racing to fix the millennium bug amidst fears that it would cause banking systems to crash and planes to fall out of the sky. Much to everyone’s relief the impact turned out to be minimal. Today, some fear there is a new critical threat to the world’s digital…

  • Microsoft’s new AI agent can control software and robots

    On Wednesday, Microsoft Research introduced Magma, an integrated AI foundation model that combines visual and language processing to control software interfaces and robotic systems. If the results hold up outside of Microsoft’s internal testing, it could mark a meaningful step forward for an all-purpose multimodal AI that can operate interactively in both real and digital…

  • DeepSeek Promises to Share Even More AI Code in a Rare Step

    Chinese AI sensation DeepSeek plans to release key codes and data to the public starting next week, an unusual step to share more of its core technology than rivals such as OpenAI have done. The 20-month-old startup, which surprised Silicon Valley with the sophistication of its AI models last month, plans to make its code…

  • Why would anyone want a humanoid robot?

    Imagine you’re a machine superintelligence that wants a body to move around in. Would you choose a human form?Probably not. Biologists have no settled theory on how our bipedalism evolved, but — like everything else in biology — it’s a kludge rather than an optimal design. Moving and balancing on two limbs is an impressive…

  • OpenAI Uncovers Evidence of A.I.-Powered Chinese Surveillance Tool

    OpenAI said on Friday that it had uncovered evidence that a Chinese security operation had built an artificial intelligence-powered surveillance tool to gather real-time reports about anti-Chinese posts on social media services in Western countries. The company’s researchers said they had identified this new campaign, which they called Peer Review, because someone working on the…

  • Guterres to propose UN assumes funding for mission struggling to fight gangs in Haiti

    The UN Secretary General has proposed that the UN assume responsibility for funding an on-going mission in Haiti. At a meeting of Caribbean leaders, the UN Secretary General has proposed that the UN assume responsibility for funding an on-going multination policing mission in Haiti. The funds would come from an existing trust fund. The proposal…

  • Hong Kong’s largest pro-democracy party takes initial step toward disbanding

    Hong Kong’s largest pro-democracy party has begun the process of disbanding. The Democratic Party of Hong Kong has begun the process of disbanding. The leadership of the party voted to explore the process of disbanding. To formally disband would require a vote of the full membership of the party. The party has faced an increasingly…

  • Israel identifies remains of child hostages but says another body from Hamas was not their mother

    Israel has not been able to confirm the identity of a body released by Hamas. As part of the on going ceasefire, Hamas released the bodies of several hostages to Israel. However, Israel has not been able to identify one of the bodies that was released. Israel and the US have accused Hamas of violating…

  • Thousands rally in Belgrade to support students’ fight against corruption

    Large protests have continued in Serbia as people rally for an end to corruption. Protests have continued across Serbia as people continue to rally for an end to corruption. Protests have been on going for weeks after the collapse of a canopy at a train station killed 15 people. Protesters have faced opposition from groups…

  • Mining Company NioCorp Loses $500,000 in BEC Hack

    NioCorp has disclosed that it lost $500,000 after a cybersecurity breach. American based mining company, NioCorp, has disclosed that it discovered that $500,000 were stolen after an email breach. They found that an attacker leverage an email system to submit fake invoices. The company is working with law enforcement to further investigate the breach. Read…

  • Alarming cyber mistake exposes passports, bills, and salary slips

    Digital lending company Vivifi has exposed the personal data of millions of users. Researchers have found that the digital lending company Vivifi has exposed the personal data of millions of users. They found that the personal data of users was stored on a misconfigured AWS server. The researchers have contacted the company and an investigation…

  • Europol urges vigilance as sinister online cults prey on children

    Europol is warning parents to be vigilant as online groups prey on children. Europol has issued a warning that online groups are increasingly targeting children. They have warned that children as young as 8 have been targeted. They also noted that groups are targeting vulnerable communities such as the LGBTQ community. Read more: https://cybernews.com/cybercrime/europol-urges-vigilance-as-sinister-online-cults-prey-on-children/

  • Patience pays off in quantum computing

    Michelangelo once said that “genius is eternal patience.” But it is rare to find many companies today that think much beyond the next quarter, let alone keep plugging away for 20 years at a speculative science project that may never work. That used to be the job of universities. Excitement therefore amps up when a…

  • Spore.Bio raises $23M to apply machine learning to microbiology testing

    Recalls in the food and beverage industry due to contamination incidents can be catastrophic for a company. Not only do companies have to pay fines and damages, but the impacts on the brand’s reputation can be long-lasting. That’s why Spore.Bio, a Paris-based deeptech startup, is trying to reinvent microbiology testing to get ahead of the…

  • Nvidia helps launch AI platform for teaching American Sign Language

    Nvidia has unveiled a new AI platform for teaching people how to use American Sign Language to help bridge communication gaps. The Signs platform is creating a validated dataset for sign language learners and developers of ASL-based AI applications. It so happens that American Sign Language is the third most prevalent language in the United…

  • US first drone killer suit that zaps UAVs 4-mile away with Terminator-like gun revealed

    California-based DZYNE Technologies has introduced a new counter-drone solution, the Dronebuster Detect, Track, Identify, Mitigate (DTIM) Kit, during the International Defence Exhibition and Conference (IDEX) held in the UAE. This compact and portable system addresses the growing need for effective counter-unmanned aerial systems (C-UAS) in modern military operations. With conflicts increasingly highlighting the importance of…

  • SEC launches new unit focused on protecting investors against fraud in crypto and AI

    The U.S. Securities and Exchange Commission is creating a new unit within its agency aimed at protecting investors from bad actors in crypto and artificial intelligence. The agency announced the new unit on Thursday, calling it the Cyber and Emerging Technologies Unit, or CETU, according to a statement. CETU will replace the Crypto Assets and…

  • Biggest-ever AI biology model writes DNA on demand

    Scientists today released what they say is the biggest-ever artificial-intelligence (AI) model for biology. The model — which was trained on 128,000 genomes spanning the tree of life, from humans to single-celled bacteria and archaea — can write whole chromosomes and small genomes from scratch. It can also make sense of existing DNA, including hard-to-interpret…

  • Apple Unveils New Lower-Priced iPhone With A.I. Features

    Less than a year after introducing its artificial intelligence capabilities, Apple is bringing the feature to its most affordable iPhone. On Wednesday, the company unveiled an iPhone that will cost $599 and feature an A.I. system it calls Apple Intelligence. The device brings A.I. features like notification summaries and writing recommendations in English to the…

  • How Hackers Manipulate Agentic AI with Prompt Engineering

    The era of “agentic” artificial intelligence has arrived, and businesses can no longer afford to overlook its transformative potential. AI agents operate independently, making decisions and taking actions based on their programming. Gartner predicts that by 2028, 15% of day-to-day business decisions will be made completely autonomously by AI agents. However, as these systems become…

  • Microsoft’s Xbox AI era starts with a model that can generate gameplay

    I reported in November that Microsoft was about to start a bigger effort to bring AI features to Xbox, and today, the company is unveiling what it’s calling a breakthrough in AI for gaming. Microsoft’s new Muse AI model could help Xbox developers create parts of games in the future, and the company says it’s…

  • Apple reveals C1, its first in-house 5G iPhone modem, replacing Qualcomm

    After years of development, Apple has unveiled what it calls C1, its first-ever in-house cellular modem. Apple’s latest silicon replaces Qualcomm modem chips previously required for 5G connectivity in the iPhone. The first Apple product to use the new C1 chip is the iPhone 16e, Apple’s latest entry-level model that replaces the iPhone SE line.…

  • Microsoft announces quantum computing breakthrough with new Majorana 1 chip

    Microsoft believes it has made a key breakthrough in quantum computing, unlocking the potential for quantum computers to solve industrial-scale problems. The software giant has spent 17 years working on a research project to create a new material and architecture for quantum computing, and it’s unveiling the Majorana 1 processor, Microsoft’s first quantum processor based…

  • France runs fusion reactor for record 22 minutes

    France has upped the ante in the quest for fusion power by maintaining a plasma reaction for over 22 minutes – a new record. The milestone was reached on February 12 at the Commissariat à l’énergie atomique et aux énergies alternatives (CEA) WEST Tokamak reactor. Achieving the dream of commercial fusion power is the Holy…

  • Ant Group enters China’s growing humanoid robot industry amid rising tech interest

    Ant Group, the Alibaba-linked fintech giant, is venturing into the humanoid robot industry, joining a growing list of major Chinese tech companies exploring this emerging field. The company has opened positions related to humanoid robot systems and applications through its subsidiary, Shanghai Ant Lingbo Technology, which was established at the end of 2024 with registered…

  • Google builds AI ‘co-scientist’ tool to speed up research

    Google has built an artificial intelligence laboratory assistant to help scientists accelerate biomedical research, as companies race to create specialised applications from the cutting-edge technology. The US tech group’s so-called co-scientist tool helps researchers identify gaps in their knowledge and propose new ideas that could speed up scientific discovery. “What we’re trying to do with…

  • Meeting Again in Paris, European Leaders Try to Recalibrate After Trump Sides With Russia 

    On Wednesday, President Emmanuel Macron of France called for a second emergency meeting of European allies. European leaders are trying to recalibrate relations with the U.S. as President Trump seeks to change American alliances. Macron had already brought together European leaders in Paris on Monday after the Trump administration suggested the U.S. would begin peace…

  • Alarmed by Trump’s Gaza Plan, Arab Leaders Brainstorm on Their Own 

    Arab officials are now coming together to form an alternative plan for Gaza where Arab countries would oversee its reconstruction. The coordination comes after President Trump suggested Gazans be expelled from the territory, with Secretary of State Marco Rubio framing the statement as: Come up with a better plan, or do it our way. Representatives…

  • U.S. and Russia Pursue Partnership in a Head-Spinning Shift in Relations 

    As the U.S. and Russia met in Saudi Arabia on Tuesday, talks were not limited just to ending the Ukraine war. Business ties were also on the table, and the two countries agreed to work together on ending the war, financial investment, and re-establishing normal relations. The meeting is a stark contrast from the past…

  • Sudanese Paramilitaries Announce Plan for Breakaway Government 

    The Rapid Support Forces (R.S.F.) in Sudan has taken a step towards forming a breakaway government. On Tuesday, the group hosted a political event in Kenya’s capital, Nairobi. A promised charter which was supposed to pave the path for a parallel government in areas controlled by R.S.F. was not signed. Although officials said three more…

  • North Korea’s Kimsuky Taps Trusted Platforms to Attack South Korea 

    North Korean threat actors are using trusted services to evade detection. These living-off-the-land (LotL) techniques have been observed in a recent Kimsuky campaign using PowerShell scripts and storing data in Dropbox folders. In the campaign is being referred to as “DEEP#DRIVE,” Kimsuky has used fake work logs, insurance documents, and other crypto-files to convince users…

  • Lee Enterprises Newspaper Disruptions Caused by Ransomware 

    Lee Enterprises, an American media company, has shared more details about the ransomware attack that recently impacted the newspaper giant. The company said the disruptions were caused by ransomware, and the attackers encrypted and stole files. Lee owns 350 publications across the U.S., and at least 75 of them were affected by the cyberattack. The…

  • Microsoft: New Variant of macOS Threat XCSSET Spotted in the Wild 

    A new variant of the macOS threat XCSSET is being actively used by attackers. Microsoft is warning that while this variant has only been used in a handful of attacks thus far, its use could quickly increase in the next few weeks. The malware has many capabilities, including injecting backdoors, stealing information from victim apps,…

  • Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign 

    Winnti, a China-linked threat actor, has been attributed to a new campaign called “RevivalStone.” The campaign is targeting Japanese manufacturing, materials, and energy companies. The activity has been discovered to overlap with activity by the APT41 cyber espionage group. APT41 is a highly skilled threat actor which conducts supply chain and espionage attacks. The group’s…

  • Biotech behind Alzheimer’s drug seeks partners for blood-brain barrier technology

    The Swedish biotech behind a groundbreaking Alzheimer’s treatment is in talks with partners for its new technology that allows drugs to cross the notoriously tricky blood-brain barrier. BioArctic signed the first deal for its “brain transporter” with Bristol Myers Squibb late last year. The deal is worth up to $1.4bn and allows the US drugmaker…