Reports

Bitcoin cryptocurrency

Malicious Python Packages Target Crypto Wallet Recovery Passwords

A newly discovered campaign pushing malicious open source software packages is designed to steal mnemonic phrases used to recover lost or destroyed crypto wallets, according to a report by ReversingLabs.

AI generated Deepfake images

Episode 256: Recursive Pollution? Data Feudalism? Gary McGraw On LLM Insecurity

Paul speaks with Gary McGraw of the Berryville Institute of Machine Learning (BIML), about the risks facing large language model machine learning and artificial intelligence, and how organizations looking to leverage artificial intelligence and LLMs can insulate themselves from those risks.

China Hacking Theme

China Calls Out U.S. For Hacking. The Proof? TBD!

The Chinese government is taking an aggressive approach to countering stories of Chinese cyber offensive campaigns: promoting tales of US hacks on Chinese organizations, but without the data to back them up.

BitCoins To Bombs: North Korea Funds Military With Billions In Stolen Cryptocurrency

A report from the firm Recorded Future finds that billions in gains from cryptocurrency heists fund close to half of North Korea’s military budget.

NASCO Alerts

AppSec Is A Mess. Our Kids Are Paying The Price.

Data stolen? Get used to it kid. That’s the reality for young people coming of age today in the app sec shanty town that is the 21st century U.S. economy. Like the actual favelas and shanty towns that have sprung up in developing nations over the last century, our application ecosystem is sprawling, unregulated, ad-hoc and prone to shocking breakdowns and failures. Our kids are paying the price.