Author | Lightnews

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 1d

BIND warns of bugs that could bring DNS cache attack back from the dead

At least one CVE could weaken defenses put in place following 2008 disclosure.

arstechnica.com

1 8 35

Reposted by Insights Into Things Podcasts

Ollie Whitehouse @ollieatnowhere.bsky.social · 15d

A call to arms on observability and threat hunting coupled with a marker of where we want to collectively get to..

www.ncsc.gov.uk/blog-post/st...

Strengthening national cyber resilience through observability and threat hunting

How organisations can improve their ability to both detect and discover cyber threats.

www.ncsc.gov.uk

2 3

Insights Into Things Podcasts @insightsintothings.com · 16d

Apparently so is trash in the parks of Washington DC judging from the news reports.

Reposted by Insights Into Things Podcasts

Dovewoman 💙 🇺🇦 💙 @dovewoman.bsky.social · 17d

1 23 66

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 16d

Cruz apparently took particular issue with Wikipedia's reliable sources/perennial sources list, which lists Fox News as a "generally unreliable" source for politics and science.

Ted Cruz picks a fight with Wikipedia, accusing platform of left-wing bias

Cruz sends letter demanding answers from Wikimedia Foundation.

arstechnica.com

64 64 300

Reposted by Insights Into Things Podcasts

Lou @loustella.com · 17d

Oh thank god, finally

iPadOS 26.1 Beta 2 Reintroduces Slide Over Multitasking

With the second beta of iPadOS 26.1, Apple tweaked multitasking on the iPad to reintroduce the Slide Over feature. Slide Over was removed in iPadOS...

www.macrumors.com

1 1

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 17d

Apple complied with a demand from the Trump administration to remove the ICEBlock app, which allowed iPhone users to report the locations of ICE officers, following claims from law enforcement that the application created "safety risks" for agents.

Apple removes ICEBlock, won’t allow apps that report locations of ICE agents

Apple nixes tracking apps after Trump admin claimed they put ICE agents at risk.

arstechnica.com

4 7 41

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 17d

Starlink’s ambitious mobile plan could be trouble for Apple, AT&T, and Verizon

SpaceX Starlink’s mobile power play: 50 MHz of spectrum and 15,000 new satellites.

arstechnica.com

4 5 35

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 21d

Trump admin defiles even the “out of office” email auto-reply

“Radical Left” and “Democrat Senators” come in for attack.

arstechnica.com

2 19 60

Insights Into Things Podcasts @insightsintothings.com · 20d

The swearing-in is a ministerial duty, not a discretionary power of the Speaker. Johnson needs to do his job or he needs to be removed from the role if he refuses to do his job.

7

Reposted by Insights Into Things Podcasts

Cynthia Brumfield @metacurity.com · 24d

CISA wants you to know that cybersecurity month is coming up, just in time for what seems today to be a government shutdown and an expiration of the 2015 Cybersecurity Information Sharing Act tomorrow at midnight, both of which are not good for cybersecurity.

The start of a CISA press release that reads:

DHS and CISA Announce Cybersecurity Awareness Month 2025

Secretary Noem has tasked CISA with leading the charge to secure America’s cyberspace

WASHINGTON – Today, the Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA) announced the official beginning of Cybersecurity Awareness Month 2025. This national campaign, administered by CISA, will give partner agencies and the private sector the tools, support, and information they need to secure the vital services fundamental to our civilization: water, power, communications, food, finance, and more. This year’s theme is Building a Cyber Strong America, as CISA gets back on mission to be the nation’s leading cybersecurity agency.

4 7

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 24d

It’s official: EA is selling to private equity in $55 billion deal

Investors will receive $210 per share, well above the stock’s all-time high.

arstechnica.com

14 13 58

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 27d

Sinclair gets nothing it asked for, puts Jimmy Kimmel back on anyway

Sorry, Brendan Carr: Sinclair stops preempting Kimmel on its ABC affiliates.

arstechnica.com

11 73 390

Insights Into Things Podcasts @insightsintothings.com · 27d

A ransomware gang leaked images of toddlers from a hacked daycare chain, escalating pressure on victims and raising ethical concerns in cybercrime.
#Ransomware #DataBreach #CyberCrime #Privacy #ChildSafety #CyberSecurity #Infosec www.theregister.com/2025/09/25/r...

Cybercrooks publish toddlers' data in 'reprehensible' attack

: Images of toddlers and home addresses leaked in reprehensible landmark attack

www.theregister.com

2

Insights Into Things Podcasts @insightsintothings.com · 27d

Researchers warn new Supermicro BMC flaws could let attackers create persistent backdoors in servers, posing major data center risks.
#Supermicro #BMC #Backdoor #DataCenter #CyberSecurity #PersistentThreat #Infosec #ServerSecurity www.bleepingcomputer.com/news/securit...

New Supermicro BMC flaws can create persistent backdoors

Two vulnerabilities affecting the firmware of Supermicro hardware, including Baseboard Management Controller (BMC) allow attackers to update systems with maliciously crafted images.

www.bleepingcomputer.com

1

Insights Into Things Podcasts @insightsintothings.com · 27d

Cisco warns of an actively exploited IOS zero-day vulnerability allowing privilege escalation, urging immediate patching.
#Cisco #ZeroDay #IOS #CyberSecurity #Exploit #Vulnerability #PatchNow #Infosec www.bleepingcomputer.com/news/securit...

Cisco warns of IOS zero-day vulnerability exploited in attacks

Cisco has released security updates to address a high-severity zero-day vulnerability in Cisco IOS and IOS XE Software that is currently being exploited in attacks.

www.bleepingcomputer.com

1

Insights Into Things Podcasts @insightsintothings.com · 28d

A single weak password led to the ransomware-driven shutdown of a 158-year-old shipping company, forcing it into bankruptcy.
#Ransomware #PasswordSecurity #DataBreach #CyberSecurity #Infosec #SupplyChain #MaritimeSecurity thehackernews.com/2025/09/how-...

How One Bad Password Ended a 158-Year-Old Business

Weak password let Akira ransomware destroy 158-year-old KNP Logistics, causing £5M ransom demand and 700 job losses.

thehackernews.com

1

Reposted by Insights Into Things Podcasts

Cynthia Brumfield @metacurity.com · 28d

Here's what you need to know about the RCE flaw in the Cisco appliance software

Cisco: sec.cloudapps.cisco.com/security/cen...

NCSC: www.ncsc.gov.uk/news/persist...

CISA: www.cisa.gov/news-events/...

One CVE is up at www.cve.org/CVERecord?id...

One is reserved. www.cve.org/CVERecord?id...

Cisco Security Advisory: Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, IOS Software, IOS XE Software, and IOS XR Software Web Services Remote Cod...

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software,...

sec.cloudapps.cisco.com

2 4 9

Insights Into Things Podcasts @insightsintothings.com · 28d

China-linked hackers are using a backdoor called BRICKSTORM to steal intellectual property from law firms, SaaS, and tech companies, targeting executive inboxes. Mandiant attributes it to UNC5221.
#BRICKSTORM #China #Mandiant #UNC5221 #CyberSecurity #Infosec #IPTheft therecord.media/china-linked...

China-linked hackers use ‘BRICKSTORM’ backdoor to steal IP

Researchers said the BRICKSTORM campaign stood out because of its “sophistication, evasion of advanced enterprise security defenses and focus on high-value targets.”

therecord.media

2

Reposted by Insights Into Things Podcasts

Trump's 'Noble' Peace Prize @laboomer68.bsky.social · 28d

California becomes the latest state to pass laws prohibiting the wearing face masks or disguises. Here are the states that agree and have already passed similar laws.

62 320 1K

Insights Into Things Podcasts @insightsintothings.com · 28d

That hockey puck mouse was literally the worst mouse design in the world until the magic mouse came out with a charging port on the bottom that rendered the device useless while charging.

I hated using this mouse.

2

Reposted by Insights Into Things Podcasts

Ars Technica @arstechnica.com · 28d

Apple demands EU repeal the Digital Markets Act

“DMA compliance is not optional, it’s an obligation,” the EU reminds Apple.

arstechnica.com

4 7 35

Reposted by Insights Into Things Podcasts

Cynthia Brumfield @metacurity.com · 29d

Wow. The UK government is thinking of bailing out JLR. What a case study on how absolutely critical cybersecurity risk management is.

Government considers financial support for JLR suppliers
www.bbc.com/news/article...

Jaguar Land Rover: Government mulls financial support for supply chain firms

Fears are growing that some of the carmaker's suppliers could go bust without support.

www.bbc.com

1 4 8

Insights Into Things Podcasts @insightsintothings.com · 28d

Kaspersky warns the RevengeHotels cybercrime group is back, targeting hotels with phishing and malware to steal guest payment data.
#RevengeHotels #Kaspersky #CyberCrime #Hospitality #DataTheft #Malware #CyberSecurity www.theregister.com/2025/09/23/k...

Kaspersky: RevengeHotels returns with AI-coded malware

: Old hotel scam gets an AI facelift, leaving travellers’ card details even more at risk

www.theregister.com

Insights Into Things Podcasts @insightsintothings.com · Sep 23

Several cybersecurity vendors pulled out of MITRE’s evaluation program, citing concerns over cost, transparency, and limited value.
#MITRE #CyberSecurity #Vendors #Evaluation #Infosec #ThreatDetection #EnterpriseSecurity www.infosecurity-magazine.com/news/cyber-v...

Cyber Threat Detection Vendors Pull Out of MITRE Evaluations Test

MITRE said it understands why Microsoft, SentinelOne and Palo Alto pulled out of its 2025 of ATT&CK Evaluations test – and promises to do better next year

www.infosecurity-magazine.com

1