The Register

Nearly 10 years after Data and Goliath, Bruce Schneier says: Privacy’s still screwed

‘In 50 years, I think we’ll view these business practices like we view sweatshops today’ Interview  It has been nearly a decade since famed cryptographer and privacy expert Bruce Schneier released the book Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World – an examination of how government agencies and tech giants exploit personal data. Today, his predictions feel eerily accurate.… READ MORE HERE…

Read More
The Register

If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish

Roses aren’t cheap, violets are dear, now all your access token are belong to Vladimir Digital thieves – quite possibly Kremlin-linked baddies – have been emailing out bogus Microsoft Teams meeting invites to trick victims in key government and business sectors into handing over their authentication tokens, granting access to emails, cloud data, and other sensitive information.… READ MORE HERE…

Read More
The Register

2 charged over alleged New IRA terrorism activity linked to cops’ spilled data

Officer says mistakenly published police details were shared ‘a considerable amount of times’ Two suspected New IRA members were arrested on Tuesday and charged under the Terrorism Act 2000 after they were found in possession of spreadsheets containing details of staff that the Police Service of Northern Ireland (PSNI) mistakenly published online.… READ MORE HERE…

Read More
Microsoft Secure

Storm-2372 conducts device code phishing campaign

Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign has been active since August 2024 with the actor creating lures that resemble messaging app experiences including WhatsApp, Signal, and Microsoft Teams. Storm-2372’s targets during this time have included government, non-governmental organizations (NGOs), information technology (IT) services and technology, defense, telecommunications, health, higher education, and energy/oil and gas in Europe, North America, Africa, and the Middle East. Microsoft assesses with medium confidence that Storm-2372 aligns with Russian interests, victimology, and tradecraft.
The post Storm-2372 conducts device code phishing campaign appeared first on Microsoft Security Blog. READ MORE HERE…

Read More
Microsoft Secure

Securing DeepSeek and other AI systems with Microsoft Security

Microsoft Security provides cyberthreat protection, posture management, data security, compliance and governance, and AI safety, to secure AI applications that you build and use. These capabilities can also be used to secure and govern AI apps built with the DeepSeek R1 model and the use of the DeepSeek app. 
The post Securing DeepSeek and other AI systems with Microsoft Security appeared first on Microsoft Security Blog. READ MORE HERE…

Read More