today's leftovers

posted by Roy Schestowitz on Aug 20, 2025

• Windows TCO / Windows Bot Nets

  • The Record ☛ Drug development company Inotiv reports ransomware attack to SEC

    Inotiv told regulators at the Securities Exchange Commission that the cybersecurity incident was discovered on August 8 and a subsequent investigation found that threat actors had encrypted certain systems.

  • Krebs On Security ☛ Oregon Man Charged in ‘Rapper Bot’ DDoS Service

    A 22-year-old Oregon man has been arrested on suspicion of operating “Rapper Bot,” a massive botnet used to power a service for launching distributed denial-of-service (DDoS) attacks against targets — including a March 2025 DDoS that knocked Twitter/X offline. The Justice Department asserts the suspect and an unidentified co-conspirator rented out the botnet to online extortionists, and tried to stay off the radar of law enforcement by ensuring that their botnet was never pointed at KrebsOnSecurity.

  • Threat Source ☛ Ransomware incidents in Japan during the first half of 2025

    Figure 1 summarizes the ransomware incidents involving Japanese domestic companies, including overseas branches and subsidiaries, from January 1 to June 30, 2025. According to the Cisco Talos investigation, there were 68 ransomware cases affecting organizations in Japan during this period. Sources include Cisco telemetry, official statements from affected companies, news reports and data from ransomware leak sites. Compared to 48 cases during the same period last year, this represents an approximately 1.4-fold increase. The number of incidents per month ranged from a minimum of 4 to a maximum of 16, with an average of about 11 ransomware attacks per month.

  • Silicon Angle ☛ February ransomware attacks [sic] hit record high as ThreatDown reports 25% annual surge

    A new report out today from ThreatDown, the corporate business unit of Malwarebytes Inc., finds that ransomware attacks jumped 25% year-over-year between July 2024 and June 2025, making it the most active 12-month period on record.

• Debian Family

  • Integrity/Availability/Authenticity

    • Jan Piet Mens ☛ If only I'd known ... Debian repo signing

      Next time I would probably also have a package containing keys only, as Ondřej suggested; this would doubtlessly ease distribution of new keys. I also like his idea of not having this package as a dependency on the actual software I want to distribute, meaning people can decide to install the keys by other means if they prefer.

• Open Hardware/Modding

  • Raspberry Pi ☛ Dedication to digital education in Bangladesh: Meet Shajan

    Discover how Shajan is championing digital literacy in Bangladesh, inspiring young people to build creativity and confidence through coding.