Juvenile Nabbed By Cops Tied To The Threat Actor Known As Scattered Spider

Posted in Commentary with tags on September 25, 2025 by itnerd

Last week, the Las Vegas Metropolitan Police Department arrested a juvenile suspected of involvement in cyberattacks against multiple Las Vegas casinos attributed to the hacking group Scattered Spider. The teenager was booked on identity theft, extortion, and computer intrusion charges, representing the third suspected Scattered Spider member arrested over the past week following two UK arrests. US authorities have charged one UK suspect, Thalha Jubair, over his alleged involvement in over 120 cyberattacks that received over $115 million in ransom payments.

Adrian Culley, Senior Sales Engineer at SafeBreach had this comment on this arrest:

“We will continue to learn a lot more about the members of Scattered Spider, as additional members are apprehended and their court cases progress. However, we can’t expect to be done with this threat just yet. Despite the arrests of a number of the group’s members, their operations have remained largely unhindered. This is due in large part to their:

  • Less-than-traditional organizational structure as a disparate group of individuals who coordinate attacks on underground forums and chat apps, which has allowed them to carry on with their activities even when specific members are taken out of commission.
  • Reliance on social engineering, which means traditional endpoint security tools often miss their initial entry point. They are logging on, not breaking in, so their malicious activity is often carried out using legitimate credentials and tools.
  • Increasing use of ransomware-as-a-service and malware-as-a-service platforms, which has enabled them to quickly and easily execute sophisticated attacks against global enterprises with mature security teams.

Organizations still need to remain vigilant, especially when it comes to identity and access management. This includes adopting phishing-resistant, multi-factor authentication that features:

  • A move away from SMS to simple push notifications.
  • Stronger implementation of phishing-resistant methods like number matching.
  • Multi-factor authentication of physical security keys.
  • Help desk hardening.
  • Strict verification protocols that go beyond basic, personally identifiable information.
  • Continuous education that includes regular training of employees on social engineering tactics.

And, of course, it’s also critical for organizations to simulate attacks against their internal network infrastructure to continuously validate their security controls against the TTPs of threat actors like Scattered Spider. We know a huge amount about how Scattered Spider operates across the kill chain, from infiltration and host level to living-off-the-land lateral movement and exfiltration. Organizations should select a proven exposure validation vendor that can help them use this to their advantage to identify and fix gaps before an attacker can exploit them.”

One has to assume that more arrests are coming. And when they happen, it will be interesting to get more intel on this group of threat actors as that would be handy in terms of fighting similar groups.

Leave a comment »

Mattamy Homes can now leverage AI-driven robotics to meet Alberta’s growing housing demands with Promise Robotics 

Posted in Commentary with tags on September 24, 2025 by itnerd

Promise Robotics today announced a multi-year strategic commercial partnership with the Alberta Division of Mattamy Homes, North America’s largest family-owned homebuilder. This partnership marks a major milestone for Promise Robotics as it moves to scale its technology and partnership across North America.

Promise Robotics’ technology will support Mattamy Homes in delivering single-family, semi-detached and multi-family residences across two master-planned communities in Alberta, Canada. By integrating Promise Robotics’ AI and robotics-powered automation technology with Mattamy’s Alberta operations, the partnership will help establish new milestones in industrialized home delivery with greater capital efficiency. The commercial partnership will showcase how advanced technology can enhance scalable, high-quality construction amid ongoing housing and labour shortages.

Promise Robotics’ Factory-as-a-Service™ platform gives builders like Mattamy Homes’ Alberta Division the ability to adopt “push-button” home manufacturing for faster build times, greater efficiency and reduced costs. Integrating advanced robotics and AI directly into Mattamy’s home products in Alberta shows how automated construction is evolving from niche applications to high-volume homebuilding.

Promise Robotics’ facility is staffed by skilled local workers and supported by local supply chains and breakthrough AI. It will serve as a flagship hub for next-generation homebuilding while providing a scalable model that can be replicated in U.S. markets. The facility will serve as a production hub for new Calgary communities, while also offering local builders access to advanced homebuilding capabilities — allowing them to scale faster without investing in costly automation or specialized manufacturing expertise.

Promise Robotics is pioneering the technology platforms that will enable builders to integrate robotics and AI into construction – lowering barriers to adoption and making automation accessible at scale. Through its partnership with Mattamy’s Alberta Division, Promise Robotics is demonstrating how leading builders can integrate advanced technologies to enhance operational efficiency and stay ahead of evolving housing demands. With a forward-looking roadmap, Promise Robotics is laying the foundation for widespread adoption of industrialized homebuilding in communities across North America.

With its North American expansion roadmap, Promise Robotics is enabling leading builders to embrace automation and stay ahead of rapidly evolving housing demands.

Leave a comment »

Hackers Exploit Pandoc CVE to Steal EC2 IAM Credentials

Posted in Commentary with tags on September 24, 2025 by itnerd

Wiz has disclosed that attackers are actively exploiting CVE-2025-51591, an SSRF flaw in the Linux utility Pandoc, to target AWS Instance Metadata Service (IMDS). The vulnerability allows attackers to abuse iframe rendering to extract IAM credentials from IMDSv1, potentially enabling access to AWS services like S3, RDS, and DynamoDB.

Wade Ellery, Chief Evangelist and IAM Strategy Officer, Radiant Logic has this to say:

     “What we have seen from the most recent breaches is that attackers keep finding ways to compromise account access.  Token hijacking, credential stuffing, phishing, and now iframe rendering to extract valid IAM credentials.  The conclusion we can draw is that the week link in the defenses remains the Authentication Layer.  Given the likelihood of a successful compromise at the AuthN layer the next line of defense is the Authorization Layer.  If an intruder gains access but is blocked from exploiting the compromised account, escalating privileges, or moving east to west then the attack is thwarted at the second wall.  Security is strongest when it is layered.  A robust, comprehensive, and real-time observability platform focused on identity data at the core of all Authorization decisions is critical to detect, obstruct, and remediate attacks that get past the Authentication layer.  The screen door has been proven vulnerable, this mandate a steal door backing it up to protect the enterprise.”

There are prevention tips that are in the Wiz article. They are worth implementing if you are affected by this.

Leave a comment »

KnowBe4 and Carahsoft Announce Partnership to Strengthen Public Sector Human Risk Management

Posted in Commentary with tags on September 24, 2025 by itnerd

KnowBe4 the world-renowned platform that comprehensively addresses human and agentic AI risk management, and Carahsoft Technology Corp., the Trusted Government IT Solutions Provider®, today announced a strategic partnership to address the human element of cybersecurity with AI-driven, behavior-based intelligence. Under the agreement, Carahsoft will serve as KnowBe4’s Public Sector distributor, making the company’s Human Risk Management offerings available to the Public Sector through Carahsoft’s reseller partners and NASA Solutions for Enterprise-Wide Procurement (SEWP) V contract.

KnowBe4’s AI-driven Human Risk Management (HRM+) platform integrates security awareness training, phishing simulation, email security and real-time coaching capabilities. KnowBe4 maintains a robust partner program and takes an innovative approach to help global organizations strengthen their security culture and transform their workforce from a potential vulnerability into a security asset. KnowBe4’s HRM+ platform is FedRAMP authorized and trusted by nearly 4,000 U.S. Federal, State and Local Government agencies.

KnowBe4 Government customer Hossam Reziqa, chief information officer for the City of Daytona Beach finds KnowBe4’s HRM+ platform especially helpful: “Any fault in our technology or error from our staff could impact thousands of city residents. KnowBe4 is, hands down, one of the best platforms to train users on emerging threats. KnowBe4 became not only a training platform, but also a tool for us to retract emails, identify risks and examine details. It’s an integral toolkit for our team to fight cybercrime.”

KnowBe4’s platform is available through Carahsoft’s SEWP V contracts NNG15SC03B and NNG15SC27B. For more information, contact the Carahsoft Team at (844) 445-5688 or KnowBe4@Carahsoft.com; or learn more about KnowBe4’s platform here. 

Leave a comment »

Half of Canadian employees now use AI – who’s guiding them? 

Posted in Commentary with tags on September 24, 2025 by itnerd

Today, CDW Canada released Unlocking AI’s Potential: How to Build Trust and Capability in the Canadian Workplace, a report revealing that AI adoption in Canadian workplaces has reached a tipping point. Half of employees now report using AI tools for work, up from 33% in 2024, yet most organizations still lack the formal policies and training needed to ensure safe and effective use.

AI is reshaping Canadian workplaces, with significant implications for productivity, employee confidence, and competitiveness. But without stronger training and governance, organizations and workers could face risks such as data security gaps and inconsistent access to AI’s benefits.

Key findings from the report include:

  • Support drives confidence: Employees with access to AI training or policies feel more confident using AI (75% vs. 41%)
  • Limited support systems: Just 39% of employees with work-approved AI say their organization has AI-use policies, and only 20% report access to formal training
  • Persistent concerns: Employees remain worried about job loss (44%), overdependence on AI (60%), and data security (36%)

You can read the report here: https://www.cdw.ca/content/cdwca/en/reports/modern-workspace-report.html?utm_campaign=21657744-FY25%E2%80%A6

Leave a comment »

A Fashion Week Essential Meets Cutting-Edge Tech: Galaxy Z Flip7

Posted in Commentary with tags on September 24, 2025 by itnerd

As global Fashion Weeks roll out, one standout accessory is catching the eyes of both tech insiders and style leaders alike — the new Galaxy Z Flip7.

Blending sophisticated design with powerful innovation, the Galaxy Z Flip7 isn’t just a smartphone — it’s a fashion statement. With its sleek clamshell silhouette, customizable Flex Window, and bold colourways, the Z Flip7 fits effortlessly into the front row — or your front pocket. Whether capturing street style moments or coordinating your look with Gemini AI, this device is designed to keep up with your lifestyle, and elevate it.

Key tech-meets-style highlights:

  • Style-Driven Design: A polished, durable finish in trend-forward shades — compact enough to fit into micro bags and jacket pockets.
  • AI Styling Assistant: With Gemini built into the cover screen, users can get outfit ideas, styling prompts, or fashion inspo in real-time.
  • Expressive Flex Window: The 4.1″ customizable cover screen functions as a mood board, smartwatch, selfie cam, or even a mini runway monitor.
  • Camera for the Front Row: Capture every angle with a 50MP wide lens, 12MP ultra-wide, and 10MP selfie cam — perfect for runway looks, GRWMs, or street style snapshots.
  • Hands-Free Utility: Flex Mode lets the phone hold its own — ideal for content creation on the go, mirror selfies, or vlogging behind the scenes.
Device NameKey SpecsPricingColour Options
Galaxy Z Flip7188g, 4.1″ Flex Window, FlexCam, Galaxy AI, Samsung Exynos 250256GB – $1,462.99
512GB – $1,642.99		Blue Shadow, Jet Black, Coral Red

Leave a comment »

New Study from Sage and IDC Reveals How High-Performing Channel Partners Win with AI and Specialization

Posted in Commentary with tags on September 24, 2025 by itnerd

A new study from IDC, commissioned by Sage, that examines how high-performing channel partners are leveraging AI to deliver powerful customer outcomes and shape the future of the channel.  

The study found that a new wave of high-performing partners is redefining the channel by scaling faster, adopting AI sooner, and delivering measurable customer outcomes. 

IDC surveyed 2,000 software resellers globally, including Canadian partners for the study. Key Canadian findings include:  

  • 70% of Canadian channel partners say they have an AI practice. 
  • Canadian partners face unique challenges
    • Almost half (49%) citing budget constraints are a top barrier to technology investment. 
    • 44% say lack of skilled resources is the top internal barrier to achieving high performance. 
  • 76% of Canadian partners are embracing a more strategic role in the channel, positioning themselves as trusted advisors rather than transactional sellers. 

You can read the study here: https://www.sage.com/en-ca/news/press-releases/2025/09/idc-study-reveals-how-high-performing-partners-win-with-ai-and-specialisation/

Leave a comment »

CData Launches Connect AI to Transform How AI Accesses Business Data in Real-Time

Posted in Commentary with tags on September 24, 2025 by itnerd

At its second annual Foundations conference, CData Software announced Connect AI, the first managed Model Context Protocol (MCP) platform that integrates AI assistants, agent orchestration platforms, AI workflow automation, and embedded AI applications with more than 300 enterprise data sources. With governed, in-place access to enterprise data, Connect AI preserves data semantics and relationships, giving AI complete understanding of the context. The solution also inherits user permissions and authentication directly from the source and can be deployed in the cloud or embedded within software products in minutes with point-and-click configuration.

Connect AI takes the same enterprise-grade connectivity technology already embedded by top technology companies including Palantir, SAP, Salesforce Data Cloud, and Google Cloud into their offerings, and reimagines it specifically for AI workloads with real-time semantic integration capabilities.

The solution builds on the momentum of the company’s MCP Servers, which have already seen thousands of users connect hundreds of data sources to AI assistants. The adoption validates AI’s need for governed enterprise data integration that understands context and relationships.

Breaking the Enterprise AI Deployment Barriers

Connect AI solves two core challenges MIT identified in its recent research. MIT reported that despite $30-40 billion in enterprise AI investment, 95% of AI pilots fail to deliver measurable business impact, primarily due to data access and governance challenges.

First, through data-in-place access, Connect AI preserves the rich contextual relationships that AI agents need for intelligent decision-making, delivering both immediate data access and meaningful data understanding.

Second, Connect AI inherits existing security and authentication protocols set in the source system ensuring AI access remains aligned with organizational controls. Data access is logged under the identity of the authenticated user or agent for comprehensive governance. Additional AI controls can be layered and managed within Connect AI.

Immediate Impact on Enterprises’ and Software Providers’ Use of AI

Enterprises use Connect AI with AI apps to get contextually-aware answers from business data in seconds; work that previously required days or weeks of report building. Its ability to handle complex queries across diverse systems with semantic understanding enables sales teams to use Claude for pipeline insights, marketing teams to prompt ChatGPT for campaign analysis, and finance teams to rely on Copilot for real-time budget updates and financial reports. IT and AI Engineering teams can also power agents built through AI workflow automation and agent orchestration platforms with direct, scalable access to semantically-rich enterprise data.

ISVs embed Connect AI directly within their products to provide their end-users with self-service integration between their data sources and the ISV’s agentic capabilities. The white-label offering gives tech companies an edge in the race for AI users because their agents can operate on the full semantic context of their end-users’ business, and not just on data brought directly into their products.

Industry Validation and Market Opportunity

This proven connectivity technology validates CData’s critical role in enterprise data connectivity and the company’s expansion into AI-native integration.

Availability

Connect AI is immediately available. More details are available here: www.cdata.com/ai

Leave a comment »

Guest Post: Summer 2025 wrap up: From airport Wi-Fi to shared Netflix logins — the digital habits of the season

Posted in Commentary with tags on September 24, 2025 by itnerd

How carefree summer habits put personal data at risk — and what to do before autumn begins

As the summer sun sets, cybersecurity experts look back at how people stayed connected during their holidays — and where security slipped through the cracks.

This year, travel and technology were more intertwined than ever. Many vacationers relied on airport Wi-Fi to quickly check work emails, logged into airline apps with the same old password, or shared streaming accounts during rainy evenings abroad. While these habits made summer easier, they also exposed common security pitfalls.

“One recurring pattern was the rise of “workations.” Employees working from Mediterranean beaches or Alpine chalets often connected to company accounts via unsecured networks, creating easy opportunities for cybercriminals. Meanwhile, families on group trips frequently admitted to reusing the same password across multiple booking apps to keep it simple,” says Karolis Arbaciauskas, head of product at NordPass.

When convenience meets risk

The risks are far from theoretical. Fake Wi-Fi hotspots set up in airports, hotels, or even beach cafés can look identical to the real thing. Once connected, cybercriminals can monitor traffic and capture login details. If your credit card information is stored in one of those accounts for “quick checkouts,” your summer getaway could quickly turn into a nightmare — with bank alerts cutting your vacation short.

Summer is all about carefree living, but the digital traces we leave behind don’t disappear with the season. A single weak password or unsafe connection can undo months of careful planning — whether it’s for a holiday or a work trip.

Connectivity choices played a big role in these digital risks. Many travelers admitted that they connected to whichever Wi-Fi popped up first — often without checking if it was genuine. That convenience, while tempting, can be what opens the door to attackers.

“We’ve seen how travelers lean on quick connections to stay in touch with home, work, or entertainment,” said Vykintas Maknickas, CEO of Saily. “But not all networks are created equal. Choosing a secure, reliable connection can make the difference between a smooth trip and one filled with unexpected cyber troubles.”

5 tips to carry into autumn

  • Audit your passwords: Replace any that are weak, reused, or shared over the summer.
  • Think twice about Wi-Fi: Public hotspots are a hacker’s favorite playground — use mobile data or a VPN.
  • Keep accounts personal: Sharing logins may seem harmless, but it weakens your digital defenses.
  • Secure work accounts: If you worked on the road, reset critical passwords now.
  • Use tools that do the heavy lifting: A password manager helps generate and store strong, unique passwords effortlessly.

As summer ends, there is a reminder for everyone: your digital security and connectivity should travel with you — whether you’re heading back to the office, campus, or planning the next holiday.

ABOUT NORDPASS

NordPass is a password manager for both business and consumer clients. It’s powered by the latest technology for the utmost security. Developed with affordability, simplicity, and ease of use in mind, NordPass allows users to access passwords securely on desktop, mobile, and browsers. All passwords are encrypted on the device, so only the user can access them. NordPass was created by the experts behind NordVPN — the advanced security and privacy app. For more information: nordpass.com.

Leave a comment »

BlueCat appoints Kevin Shone as Chief Financial Officer

Posted in Commentary with tags on September 24, 2025 by itnerd

BlueCat today announced the appointment of Kevin Shone as its new Chief Financial Officer (CFO). Shone, who joined the company in August, will lead BlueCat’s financial strategy and oversee the company’s accounting, financial planning and analysis, legal, treasury, and IT functions.

With over two decades of financial leadership, Shone has held CFO positions at both public and private high-growth technology companies. Most recently, he served as CFO of Definitive Healthcare, where he guided the company through its successful IPO. His prior CFO experience includes Data Intensity, NextG Networks, and Unica. He spent a decade in senior leadership roles at Cognos Corporation, which IBM acquired for $4.9 billion in 2008. Shone began his career in corporate and tax law at Deloitte Touche and Riemer & Braunstein.

Over the past three years, BlueCat has made three strategic acquisitions while more than doubling its revenue and customer base. The Men & Mice, Indeni, and LiveAction additions have strengthened BlueCat’s portfolio and enabled the company to offer a comprehensive suite of Intelligent NetOps solutions to its customers.

Leave a comment »

« Older Entries
Newer Entries »