Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

apono

TruffleNet Weaponizes Stolen Credentials to Target AWS

Nov 5, 2025 By Gabriel Avner In Apono
New details are emerging about a wave of intrusions into Amazon Web Services environments. Attackers are reportedly weaponizing AWS IAM, using it to validate stolen credentials and turn identity controls into a springboard for in-cloud abuse. According to new research from Fortinent, attackers are leveraging the open source TruffleHog tool to automate testing of stolen AWS credentials in what they are calling the TruffleNet infrastructure.
Read Post

Secure by Design, Secure by Default, Secure by Demand: The Signs of a Secure Software Supply Chain

Nov 4, 2025 By Rubrik In Rubrik
Welcome to Data Security Decoded. Join host Caleb Tolin in conversation with Lauren Zabierek, Senior Vice President for the Future of Digital Security at the Institute for Security and Technology. A former CISA leader and long-time national security professional, Lauren unpacks the principles of Secure by Design, Secure by Default, and Secure by Demand and how these frameworks are reshaping the software supply chain.
View Video
Trustwave

SpiderLabs Ransomware Tracker Update October 2025: Qlin Doubles Down on Attacks

Nov 4, 2025 By Trustwave In Trustwave
The worldwide ransomware landscape saw a dramatic shift in attacks in October 2025, jumping 41% month over month, with the most prolific attacker, Qlin, more than doubling the number of attacks it launched, according to Trustwave, A LevelBlue Company, research. The US remained the primary recipient of ransomware attacks, but October saw manufacturing overtake technology as the most targeted vertical sector.
Read Post
Trustwave

Scattered LAPSUS$ Hunters: Anatomy of a Federated Cybercriminal Brand

Nov 4, 2025 By Serhii Melnyk In Trustwave
Trustwave SpiderLabs’ Cyber Threat Intelligence team is tracking the recent emergence of what appears to be the consolidation of three well-known threat groups into a “federated alliance” that offers, among its activities, Extortion-as-a-Service (EaaS). The collective comprises Scattered Spider, ShinyHunters, and LAPSUS$.
Read Post
levelblue

SpiderLabs Ransomware Tracker Update October 2025: Qlin Doubles Down on Attacks

Nov 4, 2025 By Doug Olenick In LevelBlue
The worldwide ransomware landscape saw a dramatic shift in attacks in October 2025, jumping 41% month over month, with the most prolific attacker, Qlin, more than doubling the number of attacks it launched, according to Trustwave, A LevelBlue Company, research. The US remained the primary recipient of ransomware attacks, but October saw manufacturing overtake technology as the most targeted vertical sector.
Read Post

Everything Runs on Software, But Most of It Isn't Secure

Nov 4, 2025 By Rubrik In Rubrik
Our economy, healthcare, energy, and even water systems are powered by software. But here’s the hard truth is that most of that software is built insecurely. And that’s why cyberattacks keep growing in scale and impact. When code underpins everything we rely on, every flaw becomes a national risk.
View Video

Intel Chat: BlackBasta, BlueNoroff, Operation ForumTroll & Aisuru [263]

Nov 3, 2025 By LimaCharlie In LimaCharlie
In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.