Windows JavaScript zero-day, Iran-based hack-and-leak, METRO

Exploited Windows zero-day lets JavaScript files bypass Mark of the Web security warnings According to Bleeping Computer, this has already been seen in ransomware attacks. Windows includes a security feature called Mark-of-the-Web (MoTW) that flags a file as having been downloaded from the Internet

Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers Review

Zero-day exploit (CVE-2018-8453) used in targeted attacks - vulnerability database

Exploited Windows zero-day lets JavaScript files bypass security warnings

Black Basta ransomware - vulnerability database

PoC Exploit For Unpatched Windows 10 Zero-Day Flaw Published Online

Zero-day in Windows Kernel Transaction Manager (CVE-2018-861 - vulnerability database

Exploited Windows zero-day lets JavaScript files bypass security warnings

Hornetsecurity IT Security Incident Center - Hornetsecurity

ALERT! Hackers targeting IoT devices with a new P2P botnet malware - Storcom, Lombard, Illinois, United States of America

Consequential Podcast - Block Center for Technology and Society - Carnegie Mellon University

Ethical hacking for IoT: Security issues, challenges, solutions and recommendations - ScienceDirect

Graham Cluley media appearances - TV, radio and news