shamos

Shamos macOS Infostealer: Malvertising Lures, BYOD Gaps, and Sector Expansion

Shamos, a new Atomic macOS Stealer (AMOS) variant attributed to COOKIE SPIDER, is targeting U.S. tech and education sectors via malvertising and fake support sites.

College tip: if the ‘fix’ starts with ‘just paste this,’ your Keychain’s about to major in regret.

[SIGNALS WEEKLY] Perimeter to Persistence: Evolving Paths to Ransomware and OT Access

The perimeter kept the keys. Edge appliances and OT switches are becoming the shortest path from exposure to stolen identity and ransomware. The plumbing became the persistence layer.

[GAME THEORY] KEV Is Not a Patch List. It Is a Race for Control.

Nine actively exploited flaws show why patching closes an entry point—but not necessarily the incident.

[GAME THEORY] AI gateways are becoming the new IAM chokepoint

AI gateways are starting to concentrate credentials, logs, routing, quotas, and policy. That makes them worth watching now.

[SIGNALS WEEKLY] Converging Threats Across SaaS, Web Edge, and OT

OAuth consent made SaaS data theft look normal. Niche web plugins kept handing attackers first doors. OT debug ports reminded everyone that “engineering access” can age into exposure.

Read more

[SIGNALS WEEKLY] Perimeter to Persistence: Evolving Paths to Ransomware and OT Access

[GAME THEORY] KEV Is Not a Patch List. It Is a Race for Control.

[GAME THEORY] AI gateways are becoming the new IAM chokepoint

[SIGNALS WEEKLY] Converging Threats Across SaaS, Web Edge, and OT