Sami Laiho
 @samilaiho

Chief Research Officer (opinions are my own) / #1 & #2 at Ignite 2018 / Best Session - NIC x 5 / MVP Windows OS / win-fu.com / PluralsightAuthor

 Finland
samilaiho.com
Joined March 2011
Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth theregister.com/2025/11/07/b…

Bank of England says JLR's cyberattack damaged UK GDP growth

: This kind of material economic impact from online crooks thought to be a UK-first

theregister.com
U.S. Congressional Budget Office hit by suspected foreign cyberattack bleepingcomputer.com/news/se…

U.S. Congressional Budget Office hit by suspected foreign cyberattack

The U.S. Congressional Budget Office (CBO) confirms it suffered a cybersecurity incident after a suspected foreign hacker breached its network, potentially exposing sensitive data.

bleepingcomputer.com
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices unit42.paloaltonetworks.com/…

LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices

Commercial-grade LANDFALL spyware exploits CVE-2025-21042 in Samsung Android’s image processing library. The spyware was embedded in malicious DNG files.

unit42.paloaltonetworks.com
QNAP Security Advisories URL: qnap.com/en/security-advisor… Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None

Security Advisories | QNAP

This page lists current security advisories issued by QNAP. On this page you can also find instructions for reporting a vulnerability to QNAP.

qnap.com
1
Exclusive: Everest Ransomware Group Interview on Collins Aerospace Breach dailydarkweb.net/exclusive-e…

Exclusive: Everest Ransomware Group Interview on Collins Aerospace Breach - Daily Dark Web

Exclusive: Everest Ransomware Group Interview on Collins Aerospace Breach Discover the latest security threats and database leaks, including unauthorized VPN access and email breaches, in the cyber...

dailydarkweb.net
Danish authorities in rush to close security loophole in Chinese electric buses theguardian.com/world/2025/n…

Danish authorities in rush to close security loophole in Chinese electric buses

Investigation launched after discovery that Chinese supplier had remote access to vehicles’ control systems

theguardian.com
1
2
Gootloader malware is back with new tricks after 7-month break bleepingcomputer.com/news/se…

Gootloader malware is back with new tricks after 7-month break

The Gootloader malware loader operation has returned after a 7-month absence and is once again performing SEO poisoning to promote fake websites that distribute the malware.

bleepingcomputer.com
1
Malicious Infrastructure Finds Stability with aurologic GmbH recordedfuture.com/research/…

Malicious Infrastructure Finds Stability with aurologic GmbH

This investigative report reveals how German hosting provider aurologic GmbH has become a central enabler of malicious internet infrastructure, linking numerous threat activity networks while...

recordedfuture.com
1
China sentences 5 Myanmar scam kingpins to death therecord.media/china-senten…

China sentences 5 Myanmar scam kingpins to death

Five others were handed life sentences, while nine of the accused were handed prison sentences of three to 20 years.

therecord.media
From Paris to Berlin And every Cisco I get in My heart is pumping for love Pumping for love Remote Code Execution Classification: Critical, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 9.9 URL: sec.cloudapps.cisco.com/secu…
1
1
5
Google Chrome - Stable Channel Update for Desktop URL: chromereleases.googleblog.co… Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None

Stable Channel Update for Desktop

The Stable channel has been updated to 142.0.7444.134/.135 for Windows and  142.0.7444.135 for  Mac and  142.0.7444.134  for Linux ,  which ...

chromereleases.googleblog.com
1
1
The Intune MDM Device Certificate and its renewal… Next year (around 03/04 of 2026) every single Intune MDM certificate will need renewal. Yes, all of them!!!!!!! Why? Because the Microsoft Intune Root Certification Authority is expiring. I’m marking that date in my calendar, because if even 10% of all Intune-managed devices miss that renewal (which they will because of reasons I am asked to look at now)… we’re in for one massive shitshow. Why? If the certificate is not renewed, the device would lose communication with Intune.... The only solution is to reenroll! Where is the Microsoft announcement? @IntuneSuppTeam ???? #Intune #MSIntune #Windows #Windows11
22
93
7
494
Malicious Android apps on Google Play downloaded 42 million times bleepingcomputer.com/news/se…

Malicious Android apps on Google Play downloaded 42 million times

Hundreds of malicious Android apps on Google Play were downloaded more than 40 million times between June 2024 and May 2025, notes a report from cloud security company Zscaler.

bleepingcomputer.com
1
2
How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation research.checkpoint.com/2025…

How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation - Check Point...

By: Dikla Barda, Roaman Zaikin & Oded Vanunu  On November 3, 2025, Check Point Research’s blockchain monitoring systems detected a sophisticated exploit targeting Balancer V2’s ComposableStablePool...

research.checkpoint.com
'It's Been a Mess': Shutdown Slows Federal F5 Hack Response databreachtoday.com/its-been…

'It's Been a Mess': Shutdown Slows Federal F5 Hack Response

Current and former federal officials tell Information Security Media Group furloughs and leadership gaps across the federal cyber ecosystem have hindered the U.S.

databreachtoday.com
2
Securing critical infrastructure: Why Europe’s risk-based regulations matter microsoft.com/en-us/security…

​​Securing critical infrastructure: Why Europe’s risk-based regulations matter | Microsoft Security...

Learn how CISOs can use new European Union legislation to strengthen their cybersecurity measures.

microsoft.com
M&S pegs cyberattack cleanup costs at £136M as profits slump theregister.com/2025/11/05/m…

M&S pegs cyber cleanup costs at £136M, profits tumble

: Retailer's tech systems aren’t down anymore, but the same can’t be said for its rocky financials

theregister.com
Too Much Trust: The Danger of Over-Privileged Cloud Identities reliaquest.com/blog/threat-s…

Too Much Trust: The Danger of Over-Privileged Cloud Identities

Explore how over-privileged cloud identities with outdated processes increase cloud risks, driving 44% of security alerts and learn more strategies around defense.

reliaquest.com
1
2
UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit vulnerability.circl.lu/bundl…
Polish loan platform hacked; mobile payment system and other businesses disrupted therecord.media/poland-hacks…

Polish loan platform hacked; mobile payment system and other businesses disrupted

As several high-profile companies responded to cyberattacks, Polish Digital Affairs Minister Krzysztof Gawkowski said incidents involving Poland’s public and private infrastructure are becoming...

therecord.media
Load more