Krebs On Security

• Aisuru Botnet Shifts from DDoS to Residential Proxies
  October 28, 2025
  Aisuru, the botnet responsible for a series of record-smashing distributed denial-of-service (DDoS) attacks this year, recently was overhauled to support a more low-key, lucrative and sustainable business: Renting hundreds of thousands of infected Internet of Things (IoT) devices to proxy services that help cybercriminals anonymize their traffic.
• Patch Tuesday, October 2025 ‘End of 10’ Edition
  October 14, 2025
  Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October’s Patch Tuesday also marks the final month that Microsoft will ship security updates for Windows 10 systems. If you’re running a Windows 10 PC and you’re unable or unwilling to migrate to Windows 11, read on for other options. [...]
• Email Bombs Exploit Lax Authentication in Zendesk
  October 17, 2025
  Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously.

Dark Reading

• US Crypto Bust Offers Hope in Battle Against Cybercrime Syndicates
  October 23, 2025
  A $14 billion seizure by US investigators presents a warning for cybercriminals' reliance on bitcoin but is still a positive development for the cryptocurrency industry.
• Cloud Outages Highlight the Need for Resilient, Secure Infrastructure Recovery
  October 30, 2025
  Two massive technical outages over the past year underscore the need for cybersecurity teams to consider how to recover safely from disruptions without creating new security risks.
• Deepfake Awareness High at Orgs, But Cyber Defenses Badly Lag
  October 10, 2025
  The vast majority of organizations are encountering AI-augmented threats, but remain confident in their defenses, despite inadequate detection investment and more than half falling to successful attacks.

Schneier on Security

• Signal’s Post-Quantum Cryptographic Implementation
  October 29, 2025
  Signal has just rolled out its quantum-safe cryptographic implementation. Ars Technica has a really good article with details: Ultimately, the architects settled on a creative solution. Rather than bolt KEM onto the existing double ratchet, they allowed it to remain more or less the same as it had been. Then they used the new quantum-safe ratchet to implement a parallel secure messaging system.
• AI Summarization Optimization
  November 3, 2025
  These days, the most important meeting attendee isn’t a person: It’s the AI notetaker. This system assigns action items and determines the importance of what is said. If it becomes necessary to revisit the facts of the meeting, its summary is treated as impartial evidence.
• Cybercriminals Targeting Payroll Sites
  November 4, 2025
  Microsoft is warning of a scam involving online payroll systems. Criminals use social engineering to steal people’s credentials, and then divert direct deposits into accounts that they control. Sometimes they do other things to make it harder for the victim to realize what is happening.

• ACCA Student Design Contest: $200 Prize!! In celebration of ACCA’s 60th anniversary year, the organization is sponsoring a STUDENT DESIGN CONTEST! Details about the contest are in the attached flyer and also on the ACCA Website here: https://accachicago.org/acca-student-design-contest/
  
  Deadline for submission: January 31, 2026.
  The winning designer will receive a $200 cash prize and have their design printed on t-shirts for the 2026 ACCA Student Symposium!
  
  
• 2025SMART Scholarship for STEM Students - The Science, Mathematics, and Research for Transformation (SMART) Scholarship-for-Service Program is now accepting applications. SMART offers a unique opportunity for science, technology, engineering, and mathematics (STEM) students to advance their education and jumpstart their careers. More than a scholarship, SMART scholars receive full tuition, annual stipends, internships, mentorship, and opportunities for research funding. After graduation, they begin their civilian career with the Department of Defense working as nonmilitary government employees solving complex national security challenges in their fields. SMART scholars, whether pursuing a bachelor's, master's, or doctoral degree, or working as a DoD civilian, are part of a dynamic community of driven individuals advancing research and innovation in SMART STEM disciplines. Through mentorship, training, and innovation award opportunities, SMART helps scholars build the foundations to excel in STEM and contribute to a highly skilled DoD STEM workforce dedicated to enhancing thenation’s security and technological edge. High school seniors and current undergraduate and graduate students who meet the eligibility criteria are encouraged to apply. SMART Benefits - Full Tuition, Annual Stipend, Summer Internships and DoD Civilian Employment Application deadline is December 5, 2025. View the SMART videos and visit: https://www.smartscholarship.org/smart to learn more and apply today.

• Lewis University Cybersecurity Club - Open to all majors, the Lewis University Cybersecurity Club is an opportunity for students to delve deeper into computers and cybersecurity.
• NICCS - Cybersecurity CISA Resources and Tools, Cybersecurity Training Resources, Education Resources.
• CYBER.ORG - Cybersecurity curricula and resources for K-12 teachers, educators, students and parents including classroom materials, career profiles, event information and more.
• Workforce Management Guidebook - Cybersecurity is Everyone's Job - A publication that talks about cybersecurity from every business function and aspect of an organization's operation. It is written for a general audience who may not be knowledgeable about cybersecurity.
• CyberMission.tech - A Department of Defense (DoD) cyber initiative with high-tech, hands-on opportunities for military personnel, veterans, and the public.
• CyberSeek - To help close the cybersecurity skills gap, CyberSeek provides detailed, actionable data around supply and demand in the cybersecurity job market.
• STOP. THINK. Connect.™ - The STOP. THINK. CONNECT.™ (STC) Campaign is a national public awareness campaign aimed at increasing the understanding of cyber threats and empowering the American public to be safer and more secure online.
• CISA Cybersecurity Resources - Telework guidance and best practices, assessments, prevention, and response resources, cybersecurity awareness and best practices resources, misinformation, disinformation, and mal-information resources, mitigating cyber risks to the nation's critical infrastructure.
• DHS Science and Technology - Cybersecurity resources, DHS Science and Technology Directorate, cybersecurity publications and more.

• Office of Technology
• Connect Your Computer to Network
• Password Reset
• Acceptable Usage Agreement
• Password Policy
• Technology Governance
• SANS Internet Storm Center Dashboard