Today the United States Securities and Exchange Commission charged four companies for intentionally misleading investors about the severity of the SolarWinds breach.

In or around September 2019, APT29 a/k/a Cozy Bear a/k/a Turla Group compromised United States-based network monitoring company SolarWinds. The compromise resulted in one of the largest Supply-Chain attacks in history when the state-sponsored group began slipstreaming malicious payloads into the SolarWinds Orion toolset updates.

The United States Securities and Exchange Commission has issued the following fines:

- Unisys, an information technology service and consulting company : $4,000,000 fine

- Avaya, a company with provides cloud services and workplace collaboration services: $1,000,000 fine

- Check Point Software, a provider for hardware and software cyber security solutions: $995,000 fine

- Mimecast, a cloud-based email management company: $990,000 fine

> be american
> need medical stuff done
> get estimated cost of $70,000 (with insurance)

this ransomware thing is starting to make a whole lot more sense

Microsoft is introducing "AI employees"

/me sighs

https://www.theguardian.com/technology/2024/oct/21/microsoft-launches-ai-employees-that-can-perform-some-business-tasks

It's all over for early-to-mid-2000's mall goths.

A Threat Actor operating under the moniker 'Satanic' claims to have compromised HOTTOPIC and exfiltrated information on 350,000,000 customers.

https://www.infostealers.com/article/largest-retail-breach-in-history-350-million-hot-topic-customers-personal-and-payment-data-exposed-as-a-result-of-infostealer-infection/

We're not going to do cybercrime to pay for medical bills. We're joking — attempting to convey how bad it feels to see these outrageous medical bills

Regardless, we wouldn't do ransomware. We have standards. We would be like normal everyday Americans and commit violent crimes.

Just kidding, we're tubby, no violent crimes either.

Relax, FBI.

Thank you endingwithali for the wonderful meme

i guess we putting malware inside of svg files

wtf the family and i just went to mcdonalds and we found c++ boost libraries in our food

We've been informed teenagers are now carving vx-underground into their desks at school.

We're going to report you to the Principle >:(

Malware is illegal and for nerds

Principal**

Sorry, we can't spell or read or write

> make thousands of typos
> no one bats an eye
> confuse Principle or Principal
> get eaten alive in the comments

literally me (pretend the hotdogs are malware)

We don't do any exploit stuff, but anytime we leave malware-city and swing on down to exploit-dev-and-blue-team-ville we always see people discussing pretty much the same stuff.

Today Namecheap launched the new TLD .locker

They state it is for people involved in Bitcoin, DeFi apps, and online gaming. In other words, it is perfect for ransomware groups.

Very cool.

Which one of you purchased this?