Follow the evidence.

Tech leaders need to show value when scaling the cloud and AI

The biggest barriers to successful FinOps transformation aren't due to the lack of tools, but how costs are governed and allocated.

Governed AI agents can drive platform expansion, says Securonix

AI agents can drive sustained platform expansion as enterprise environments become more complex.

Building the real-time cruise terminal

Podcast: Singapore Cruise Centre’s digital transformation connects ecosystem data, enables passportless clearance and lays the groundwork for AI-driven operations.

TextIn meets critical need for intelligent document processing as companies adopt AI

AI is exposing the technology debt enterprises can no longer ignore

Know that fragmented systems, complex data environments and uncontrolled AI adoption can undermine your enterprise transformation. 

Empowering Malaysia’s smart manufacturing journey through better data management

Technology and smart infrastructure vital to aviation transformation

What are the strategic forces reshaping airport development and the practical challenges of building and operating the next generation of airports?

[SANS ISC] More Exotic Excel Files Dropping AgentTesla

Today, I published the following diary on isc.sans.edu: “More Exotic Excel Files Dropping AgentTesla”: Excel is an excellent target for attackers. The Microsoft Office suite is installed on millions of computers, and people trust these files. If we have the classic xls, xls, xlsm file extensions, Excel supports many others! The post [SANS ISC] More Exotic Excel Files Dropping AgentTesla appeared first on /dev/random.

[SANS ISC] Are Leaked Credentials Dumps Used by Attackers?

Today, I published the following diary on isc.sans.edu: “Are Leaked Credentials Dumps Used by Attackers?“: Leaked credentials are a common thread for a while. Popular services like “Have I Been Pwned” help everyone know if some emails and passwords have been leaked. This is a classic problem: One day, you create an account The post [SANS ISC] Are Leaked Credentials Dumps Used by Attackers? appeared first on /dev/random.

[SANS ISC] Do Attackers Pay More Attention to IPv6?

Today, I published the following diary on isc.sans.edu: “Do Attackers Pay More Attention to IPv6?“: IPv6 has always been a hot topic! Available for years, many ISP’s deployed IPv6 up to their residential customers. In Belgium, we were for a long time, the top-one country with IPv6 deployment because all The post [SANS ISC] Do Attackers Pay More Attention to IPv6? appeared first on /dev/random.

[SANS ISC] macOS: Who’s Behind This Network Connection?

Today, I published the following diary on isc.sans.edu: “macOS: Who’s Behind This Network Connection?“: When you must investigate suspicious behavior or work on an actual incident, you could be asked to determine who’s behind a network connection. From a pure network point of view, your firewall or any network security The post [SANS ISC] macOS: Who’s Behind This Network Connection? appeared first on /dev/random.

[SANS ISC] Quick Malware Triage With Inotify Tools

Today, I published the following diary on isc.sans.edu: “Quick Malware Triage With Inotify Tools“: When you handle a lot of malicious files, you must have a process and tools in place to speedup the analysis. It’s impossible to investigate all files and a key point is to find interesting files The post [SANS ISC] Quick Malware Triage With Inotify Tools appeared first on /dev/random.

[SANS ISC] Python Malware Using Postgresql for C2 Communications

Today, I published the following diary on isc.sans.edu: “Python Malware Using Postgresql for C2 Communications“: For modern malware, having access to its C2 (Command and control) is a crucial point. There are many ways to connect to a C2 server using tons of protocols, but today, HTTP remains very common The post [SANS ISC] Python Malware Using Postgresql for C2 Communications appeared first on /dev/random.

Hack.lu 2023 Wrap-Up

[Edit: Sorry for the “bullet-point” style, it was a lot of details to compile in this blog post] We were back at the Alvisse Parc Hotel after a break of four years! In 2022, only a light CTI summit was organized (see my wrap-up), but this year, hack.lu was back The post Hack.lu 2023 Wrap-Up appeared first on /dev/random.

[SANS ISC] Show me All Your Windows!

Today, I published the following diary on isc.sans.edu: “Show me All Your Windows!“: It’s a key point for attackers to implement anti-debugging and anti-analysis techniques. Anti-debugging means the malware will try to detect if it’s being debugged (executed in a debugger or its execution is slower than expected). Anti-analysis refers The post [SANS ISC] Show me All Your Windows! appeared first on /dev/random.

[SANS ISC] Have You Ever Heard of the Fernet Encryption Algorithm?

Today, I published the following diary on isc.sans.edu: “Have You Ever Heard of the Fernet Encryption Algorithm?“: In cryptography, there is a gold rule that states to not develop your own algorithm because… it will be probably weak and broken! They are strong algorithms (like AES) that do a great job The post [SANS ISC] Have You Ever Heard of the Fernet Encryption Algorithm? appeared first on /dev/random.

[SANS ISC] From a Zalando Phishing to a RAT

Today, I published the following diary on isc.sans.edu: “From a Zalando Phishing to a RAT“: Phishing remains a lucrative threat. We get daily emails from well-known brands (like DHL, PayPal, Netflix, Microsoft, Dropbox, Apple, etc). Recently, I received a bunch of phishing emails targeting Zalando customers. Zalando is a German The post [SANS ISC] From a Zalando Phishing to a RAT appeared first on /dev/random.

Firefox Security Response to pwn2own 2025

At Mozilla, we consider security to be a paramount aspect of the web. This is why not only does Firefox have a long running bug bounty program but also mature … Read more The post Firefox Security Response to pwn2own 2025 appeared first on Mozilla Security Blog.

Updated GPG key for signing Firefox Releases

The GPG key used to sign the Firefox release manifests is expiring soon, and so we’re going to be switching over to a new signing subkey shortly. The GPG fingerprint … Read more The post Updated GPG key for signing Firefox Releases appeared first on Mozilla Security Blog.

Mozilla VPN Security Audit 2023

To provide transparency into our ongoing efforts to protect your privacy and security on the Internet, we are releasing a security audit of Mozilla VPN that Cure53 conducted earlier this … Read more The post Mozilla VPN Security Audit 2023 appeared first on Mozilla Security Blog.

Rapidly Leveling up Firefox Security

At Mozilla, we believe in an open web that is safe to use. To that end, we improve and maintain the security of people using Firefox around the world. This … Read more The post Rapidly Leveling up Firefox Security appeared first on Mozilla Security Blog.

Updated GPG key for signing Firefox and Thunderbird Releases

Today, we moved to a new GPG signing subkey used to sign certain Firefox and Thunderbird artifacts (namely Linux tarballs, RPM packages, checksums files) after an unencrypted copy of the … Read more The post Updated GPG key for signing Firefox and Thunderbird Releases appeared first on Mozilla Security Blog.

Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0

Mozilla remains committed to fostering a secure, agile, and transparent Web PKI ecosystem. The new Mozilla Root Store Policy (MRSP) v3.0, effective March 15, 2025, introduces critical updates to strengthen … Read more The post Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0 appeared first on Mozilla Security Blog.

Version 2.9 of the Mozilla Root Store Policy

Online security is constantly evolving, and thus we are excited to announce the publication of MRSP version 2.9, demonstrating that we are committed to keep up with the advancement of … Read more The post Version 2.9 of the Mozilla Root Store Policy appeared first on Mozilla Security Blog.