Today in the SUN we feature an article from @sansinstitute.bsky.social on 10 Gaps Executive Cyber Exercises Consistently Reveal.
Read more below:
www.sans.org/blog/from-ta...
#cybersecurity
@andyjabbour.bsky.social
The BlueHammer researchers drops another Windows EOP zero-day, named RedSun:
deadeclipse666.blogspot.com/2026/04/publ...
Good new resilience guidance from the 🇬🇧 UK NPSA: 'Fire as an Act of Sabotage Guidance' www.npsa.gov.uk/national-sec... @gate15.bsky.social @dpounder.bsky.social @bridgetjohnson.bsky.social www.npsa.gov.uk/sites/defaul...
🇨🇦 New from our neighbors: Critical infrastructure resilience and escalated threat navigation initiative: 'As geopolitical instability accelerates cyber threats to critical infrastructure...' www.cyber.gc.ca/en/cyber-sec... #cybersecurity #resilience cc @gate15.bsky.social @campuscodi.risky.biz
🇬🇧 New: Preparing for severe #cyber threat: why leaders must act now; A call to action to collectively build UK.
- Resilience beats prevention
- Preparation must happen before the threat escalates
#resilience www.ncsc.gov.uk/blogs/prepar... @gate15.bsky.social @campuscodi.risky.biz #cybersecurity
Today in the SUN we feature an article from Fitch Ratings on the growth of U.S. cyber insurance direct written premiums.
Read more below:
www.fitchratings.com/research/ins...
#cybersecurity
@andyjabbour.bsky.social
Our latest edition of the Security Sprint is out now! In this episode, Dave and Andy discuss AI, an FBI Report, Hurricane Predictions, and more! Our podcast is available right now, go check it out!
#cybersecurity
@andyjabbour.bsky.social
gate15.global/weekly-secur...
Check out our latest blog post, "Offensive AI: What Red Teams and Attackers are Doing Now!"
Read more below:
gate15.global/offensive-ai/
#cybersecurity
@andyjabbour.bsky.social
Today in the SUN we feature an article from Emsisoft on the state of ransomware in Q1 2026.
Read more below:
www.emsisoft.com/en/blog/4756...
#cybersecurity
@andyjabbour.bsky.social
Today in the SUN, we feature an article from @proofpoint.com on Mailbox rules in O365—a post-exploitation tactic in cloud ATO.
Read more below:
www.proofpoint.com/us/blog/thre...
#cybersecurity
@andyjabbour.bsky.social
A good TTP to follow, check your @microsoft.com Outlook rules weekly. I learned that the hard way years ago. New from @proofpoint.com: www.proofpoint.com/us/blog/thre... #cybersecurity @gate15.bsky.social
Here's a link straight to the briefing: labs.cloudsecurityalliance.org/wp-content/u...
The CSA CISO Community, SANS, [un]prompted, and the wider community released a briefing on how AI-driven vulnerability discovery is reshaping the defender timeline.
Read more below:
labs.cloudsecurityalliance.org/mythos-ciso/
#cybersecurity
@andyjabbour.bsky.social
@campuscodi.risky.biz
Today in the SUN we feature an article from GTSC's Homeland Security Today on Secretary Mullin ordering all staff back to work despite no congressional deal.
Read more below:
www.hstoday.us/featured/dhs...
#cybersecurity
@andyjabbour.bsky.social
Great to be out in California talking with tribes about #cybersecurity risk, threats, mitigation & resilience! Next stop on the West Coast tour: Washington! Glad to rep my @gate15.bsky.social team and to support TribalHub & Tribal-ISAC.
Last week we have observed 164 events across 39 countries and attributed them to 34 ransomwares.
The top targeted country was #UnitedStates and the most targeted sector was #Construction.
The ransomware #Gentlemen has been busy with 28 new events (17%)!
Learn more: https://ecrime.ch/
Today in the SUN we cover an article from @theregister.com on Zephyr Energy losing £700K in a cyber hit that rerouted contractor payment.
Read more below:
www.theregister.com/2026/04/09/z...
#cybersecurity
@andyjabbour.bsky.social
Check out their guidance on security tips for social media and messaging services and Frontier models and their impact on cyber security below.
www.cyber.gov.au/business-gov...
www.cyber.gov.au/about-us/vie...
The Australian Signals Directorate released a lot of new guidance to increase cyber resilience.
Check out their article on detecting socially engineered messages below:
www.cyber.gov.au/business-gov...
#cybersecurity
@andyjabbour.bsky.social
@campuscodi.risky.biz
JCAT released new guidance, "Tailored security for major events mitigates terrorist threat to hospitality and nightlife industry." The intent is to emphasize mitigation strategies that enhance ITAC collaboration during major events.
Check it out below:
www.dni.gov/index.php/nc...
Check out our latest blog post, "Leveraging AI for Proactive Physical Threat Detection and Emergency Response!"
Read more below:
gate15.global/leveraging-ai/
#cybersecurity
@andyjabbour.bsky.social
Today in the SUN we feature an article from @axios.com on Hate crimes against Latinos and Sikhs hitting a record high in 2025.
Read more below:
www.axios.com/2026/04/09/h...
#cybersecurity
@andyjabbour.bsky.social
In the opening Summit keynote, Target's CISO, Jodie Kautt will explore how adopting a “never waste a good crisis” mindset—using both internal incidents and industry headlines—can help sharpen focus and strengthen cyber programs.
Read more: summit2026.rhisac.or...
With my colleague Dana Nickel: Iranian hackers are going after US energy and water facilities through exploiting a vulnerability in industrial control equipment, a coalition of federal agencies warned today: subscriber.politicopro.com/article/2026...
Anthropic's 'Project Glasswing' is an interesting tool for cyber security - but also another SUPERB marketing strategy from these AI firms... www.anthropic.com/glasswing
My @gate15.bsky.social teammates & I are glad to be members of the @globalencryption.org and to support this message: 'Global Encryption Coalition Steering Committee Statement on Meta’s Removal of End-to-End #Encryption from Instagram Direct Messages' www.globalencryption.org/2026/04/glob...
This is resulting in real-world outages and financial impact, with demonstrated capability to manipulate SCADA/HMI data and cause operational disruption.
www.ic3.gov/CSA/2026/260...
#cybersecurity
@andyjabbour.bsky.social
@campuscodi.risky.biz
A joint FBI/CISA/NSA advisory warns that Iranian-affiliated APT actors are actively exploiting internet-facing PLCs across U.S. critical infrastructure, including energy, using remote access and common OT protocols to manipulate SCADA/HMI data and disrupt operations.
www.cisa.gov/news-events/...
Russian espionage group APT28 compromised MikroTik and TP-Link routers to redirect traffic for certain authentication operations to AitM phishing kits
This botnet was taken down today by the FBI, DOJ, Lumen, and Microsoft
www.lumen.com/blog-and-new...