Archive

🎓️ Vulnerable U | #120

Grocery supply chain hack leaves shelves empty, 0-click Microsoft 365 Copilot vulnerability, massive internet outage, my Sleuthcon trip report, and much more!

Matt Johansen

cybercrime

Jun 13, 2025

•

9 min read

Sleuthcon 2025 Trip Report: Key Takeaways From the Industry’s Premier Cyber-Crime Conference

Front-row notes on ransomware franchising, residential-proxy abuse, and the crypto money-trail analytics reshaping modern threat hunting

Matt Johansen

News

UNFI Cyberattack Halts Deliveries to Whole Foods and 30,000+ Grocery Stores

Jun 12, 2025

•

4 min read

UNFI Cyberattack Halts Deliveries to Whole Foods and 30,000+ Grocery Stores

June 2025 breach forces UNFI to take critical systems offline, triggering order backlogs, an FBI investigation, and scrutiny of critical infrastructure.

Newsroom

Apple WWDC 2025: Every iOS 26 Security & Privacy Feature Explained

Jun 9, 2025

•

9 min read

Apple WWDC 2025: Every iOS 26 Security & Privacy Feature Explained

Deep dive into call screening, messages filtering, on-device AI, PCC, and promised RCS encryption - what they mean for security and privacy

Matt Johansen

Newsletter

Jun 6, 2025

•

14 min read

🎓️ Vulnerable U | #119

Google Threat Intel Voice Phishing Knowledge Drops, Massive critical Cisco bug, Meta caught tracking data they weren't supposed to, and much more!

Matt Johansen

News

Lockbit, laid bare: what a SQL dump tells us about the world’s most notorious ransomware-as-a-service

May 30, 2025

•

7 min read

Lockbit, laid bare: what a SQL dump tells us about the world’s most notorious ransomware-as-a-service

Analysis of leaked builds, chat logs and wallet tables uncovers how new affiliates fuel global ransomware attacks.

Newsroom

Newsletter

May 30, 2025

•

15 min read

🎓️ Vulnerable U | #118

ASUS botnet, Everything is a C2 (even you're calendar), Bitcoin related kidnappings and violence continue, Fake AI Video Generators are delivering malware, and much more!

Matt Johansen

Malware

May 30, 2025

•

4 min read

Booking.com? more like Booking.exe: inside a ClickFix email that drops malware

How attackers use clipboard PowerShell stagers and brand-spoofed links to bypass macros and drop a .NET RAT.

Newsroom

cybercrime

How Funnull Became the Backbone of U.S. Crypto Pig-Butchering Scams

May 29, 2025

•

4 min read

How Funnull Became the Backbone of U.S. Crypto Pig-Butchering Scams

Treasury’s May 29 action freezes Funnull’s IP pools and prefab scam kits. An estimated $200 million in U.S. losses tied to this turnkey infrastructure provider.

Matt Johansen

News

ConnectWise Breach - ScreenConnect Hit by Nation State Hackers

May 29, 2025

•

4 min read

ConnectWise Breach - ScreenConnect Hit by Nation State Hackers

Analysis of the May 28 breach shows tight scope but zero transparency. Here’s what MSPs must do to validate their defenses.

Newsroom

Malware

May 29, 2025

•

6 min read

Fake AI Video Generators Deliver Rust-Based Malware via Malicious Ads

Analysis of UNC6032’s Facebook and LinkedIn ad blitz shows social-engineered ZIPs leading to multi-stage Python and DLL side-loading toolkits

Matt Johansen

Microsoft

Void Blizzard hackers raid NATO cloud tenants with Evilginx phishing

May 28, 2025

•

3 min read

Void Blizzard hackers raid NATO cloud tenants with Evilginx phishing

The new Microsoft report links the Russia-backed group to cookie-theft proxies and mass mailbox exports across critical sectors in Europe and North America.

Matt Johansen

🎓️ Vulnerable U | #120

Sleuthcon 2025 Trip Report: Key Takeaways From the Industry’s Premier Cyber-Crime Conference

UNFI Cyberattack Halts Deliveries to Whole Foods and 30,000+ Grocery Stores

Apple WWDC 2025: Every iOS 26 Security & Privacy Feature Explained

🎓️ Vulnerable U | #119

Lockbit, laid bare: what a SQL dump tells us about the world’s most notorious ransomware-as-a-service

🎓️ Vulnerable U | #118

Booking.com? more like Booking.exe: inside a ClickFix email that drops malware

How Funnull Became the Backbone of U.S. Crypto Pig-Butchering Scams

ConnectWise Breach - ScreenConnect Hit by Nation State Hackers

Fake AI Video Generators Deliver Rust-Based Malware via Malicious Ads

Void Blizzard hackers raid NATO cloud tenants with Evilginx phishing

Vulnerable U

Home

Account

Sponsors