Archive

General * AWS Report on the recent outage * https://aws.amazon.com/message/101925/ * Sensible move from Microsoft - don't preview content sourced from untrusted locations (presumably using Mark of the Web) * https://www.bleepingcomputer.com/news/microsoft/microsoft-disables-preview-pane-for-downloads-to-block-ntlm-theft-attacks/ * Unit 42 takes a look at a large Smishing operation

General * [AU] Queensland Government renames "CISO" to "General Manager, Cyber Security" * https://www.itnews.com.au/news/qld-government-retires-ciso-position-title-621173 * [CA] FINTRAC fines Digital Payments platform 'Cryptomus' $176M for AML violations. Cryptomus processes transactions for a lot of 'questionable' cryptocurrency exchanges and cybercrime services.

General * The alliance that never was (LockBit, DragonForce, Qilin) * https://www.suspectfile.com/the-alliance-that-wasnt-a-critical-analysis-of-reliaquests-q3-2025-ransomware-report/ * Using (Zendesk) ticket-creation emails for spamming and email-bombing * https://krebsonsecurity.com/2025/10/email-bombs-exploit-lax-authentication-in-zendesk/ * Watch out macOS users….Google ads for fake Homebrew, LogMeIn sites push infostealers * https://www.bleepingcomputer.com/news/security/google

General * YouTube Outage * https://www.bleepingcomputer.com/news/google/youtube-is-down-worldwide-with-playback-error/ * https://mastodon.social/@netblocks/115380912092569430 * ASP.Net Core - patch the Kestrel web server - CVSS 9.9 from request smuggling * https://www.theregister.com/2025/10/16/microsoft_aspnet_core_vulnerability/ * Crypto-currency ATM's as a scam enabler

General * AU: Austrade to be future breach victim…they’re installing FortiFail: https://www.itnews.com.au/news/austrade-to-replace-its-data-centre-core-network-621042 * UK: Classic DE vs OE… DE ‘our SOC actions P2 alerts in 45 minutes’, OE ‘we get to them in a couple of days’…and they provide SOC services to others: