Craig Anderson

In an era where technology increasingly intertwines with everyday life, the potential cybersecurity threat posed by over-reliance on Chinese-made LIDAR technology, as reported by the Foundation for Defense of Democracies (FDD), raises significant security concerns. The FDD paper underscores that US critical national infrastructure (CNI) sectors, including public safety, transportation, and utilities, are notably vulnerable to the integration of Chinese

The takedown of Matrix, an encrypted messaging service extensively used by criminals, represents a significant victory for international law enforcement agencies. Led by Eurojust and Europol, the investigation reached a pivotal moment on December 3, as Dutch and French authorities, supported by Italy, Lithuania, and Spain, effectively dismantled main servers in France and Germany. This comprehensive crackdown resulted in numerous

In recent years, cyber espionage has become an increasingly prominent threat to global security, and one of the key players in this space is the Earth Estries group. This China-linked advanced persistent threat (APT) group has garnered significant attention for its extensive operations across more than 12 countries, predominantly targeting telecommunications companies in Southeast Asia. Earth Estries, active since at

The recent ransomware attack on Blue Yonder, a leading supply chain technology provider, has caused significant disruptions for numerous retailers and supermarkets in the US and UK. This incident comes just days before the Thanksgiving holiday, highlighting the vulnerabilities in supply chain management systems and presenting a critical challenge for maintaining retail operations during peak seasons. Immediate Impact on Retailers

The sophistication of cyberattacks has reached new heights with RomCom, a notorious threat actor, exploiting zero-day vulnerabilities in both Firefox and Windows to deploy their RomCom RAT malware. These vulnerabilities, identified as CVE-2024-9680 and CVE-2024-49039, have facilitated a series of high-severity attacks that leveraged minimal user interaction to achieve significant security breaches. CVE-2024-9680, a high-severity use-after-free flaw in Firefox, was