IN THE NEWS

Google has launched a new enterprise security platform called Google Unified Security that combines the company’s visibility, threat detection, and incident response capabilities and makes it available across networks, endpoints, cloud infrastructure, and apps.

This week, domain name system networking and security solution provider Infoblox announced a partnership with Google Cloud that aims to deliver highly performant cloud-native networking and cybersecurity services at scale.

Cybersecurity agencies from Australia, Canada, New Zealand, and the United States have published a joint advisory about the risks associated with a technique called fast flux that has been adopted by threat actors to obscure a command-and-control (C2) channel.

The Trump administration has fired the director and deputy director of the National Security Agency, the United States’ powerful cyber intelligence bureau, according to two sources with direct knowledge of the situation, members of the Senate and House intelligence committees and two former officials familiar with the matter.

Phishers, ransomware groups, and state-sponsored actors are using a decades-old domain name system (DNS) abuse technique to supercharge their malicious infrastructure.

This story, originally published March 29, has been updated with further Medusa mitigation advice from the FBI as well as additional comment from Boris Cipot, and a report into another “as a service” threat, this time from the Morphing Meerkat threat which uses DNS over HTTPS to escape detection.

Just days after Google confirmed it is bringing its next AI upgrade to Gmail, with major privacy implications, there’s more good and bad news for the 3 billion users relying on Google to deliver secure, spam-free email to their phones and computers.

Cybercriminals have created a new technique to serve phishing emails to business users which are almost indistinguishable from legitimate messages.

A phishing kit was observed using DNS mail exchange (MX) records that direct emails to mail servers to dynamically serve fake, tailored login pages that’s spoofed more than 100 brands.

A phishing-as-a-service (PhaaS) platform has been observed generating phishing kits that use DNS mail exchange (MX) records to serve fake login pages spoofing over 100 brands, cybersecurity company Infoblox reports.