Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

March 24, 2025 Cyber Threat Intelligence Briefing This week’s briefing covers: KTA134 (BLACKBASTA) Chats Suggests Help From Russian Officials Upon review of leaked chat logs, it appears that KTA248 (Oleg Nefedov, GG, Tramp, Kurva) was able to evade trial by eliciting the help of Russian government officials. Supply Chain Attack Leaks Secrets from GitHub A supply chain attack on the popular GitHub Action tj-actions/changed-files caused many repositories to leak their secrets over the weekend.

Hold up! Watch this before you do your taxes. ​@careercolin.

Mend.io is a complete AppSec platform with 5 products all in one AppSec platform: Renovate for automated dependency updates, SCA, container security, SAST, AI component risk management, and AI red teaming—all included in one price for AppSec teams and software development leaders.

Why AI Coding Tools are DANGEROUS...

Security isn’t just about fixing vulnerabilities—it’s about knowing which ones matter most. Attackers exploit the gaps, and a single exposed credential could mean game over.

How to set up and use Snyk for FREE!

A fake MRI scanner was compromised in minutes. This shocking real-world example shows how vulnerable medical networks can be and why supply chain security matters.

Use code IVANCAM50 for half off your first year of any personal or family Keeper plan!

Employees are now accessing work-related apps like Microsoft Word, Excel, and Teams using their personal devices. This practice could put your sensitive business information into the wrong hands. The miniOrange CASB solution helps you secure Office 365 by enforcing real-time security controls like: Try miniOrange MS 365 CASB to protect your business from data breaches while maintaining productivity.

Cross-Site Scripting (XSS) is one of the most common web security vulnerabilities that allows attackers to inject malicious scripts into trusted websites. In this video, we break down how XSS attacks work, the different types (Stored, Reflected, and DOM-based), and how you can protect your web applications from these threats.