Prioritizing patching: A deep dive into frameworks and tools – Part 2: Alternative frameworks
In the second of a two-part series on tools and frameworks designed to help with remediation prioritization, we explore some alternatives to CVSS
Read More
Podcast: The Truth Behind DeepSeek
We start this week with Emanuel’s rundown on the DeepSeek situation, the Chinese-made AI that has rocked stock markets and the wider AI industry. After the break, Sam explains how metadata in U.S. government memos lists Project 2025 members as the memo authors. In the subscribers-only section, Jason and Sam explain how GitHub is showing…
Podcast: The Underground Trade of Car Hacking Tech
We start this week with Joseph’s investigation into people selling custom patches for the Flipper Zero, a piece of hacking tech that car thieves can now use to break into a wide range of vehicles. After the break, Jason tells us about the new meta in AI slop: making 80s nostalgia videos. In the subscribers-only…
Behind the Blog: An AI Army Foot Fetish
This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we discuss a PC repair battle, a revealing comment from an FBI official, and a dangerously dumb narrative. EMANUEL: I want to update those who have been following the…
Marc Benioff ‘Jokes’ ICE Is Watching Salesforce Employees Who Traveled to the U.S.
Salesforce CEO Marc Benioff ‘joked’ with employees who had traveled to the United States for a Salesforce all-hands meeting that Immigration and Customs Enforcement agents were in the building keeping tabs on them, 404 Media has learned. Multiple employees told 404 Media about the joke, and 404 Media obtained internal Slack chats showing employees discussing…
March Patch Tuesday visits 15 product families
Eight Critical-severity bugs – none in Windows – appear in 84-CVE haul Categories: Threat Research Tags: Patch Tuesday, x-ops, Microsoft, Windows, detection
Hackers Threaten to Submit Artists’ Data to AI Models If Art Site Doesn’t Pay Up
An old school ransomware attack has a new twist: threatening to feed data to AI companies so it’ll be added to LLM datasets. Artists&Clients is a website that connects independent artists with interested clients. Around August 30, a message appeared on Artists&Clients attributed to the ransomware group LunaLock. “We have breached the website Artists&Clients to…
Behind the Blog: ‘Free Speech’ and Open Dialogue
This is Behind the Blog, where we share our behind-the-scenes thoughts about how a few of our top stories of the week came together. This week, we discuss “free speech,” keeping stupid thoughts in one’s own head, and cancel culture. JASON: In August 2014, I spoke to Drew Curtis, the founder of Fark.com, a timeless,…
People Think AI Images of Hollywood Sign Burning Are Real
There’s a video going viral this week of the Hollywood sign in Los Angeles with a wildfire raging behind it, letters glowing in the blaze. It’s a powerful scene, up there with the burning McDonald’s sign in imagery that’s come out of this week’s devastating fires spreading across LA. Unfortunately goes hard pic.twitter.com/Hzglibzs4t — Joseph…
5 ways to strengthen your firewall and endpoint’s defenses against ransomware
Sophos Firewall uses intelligent TLS inspection and AI-powered analysts to reveal hidden threats — without compromising performance.