Cisco's Talos group describes a threat campaign they're calling "Frankenstein," because the hoods behind it stitched their effort together from a bunch of disparate open-source tools. Active between January and April of this year, Frankenstein's operators gained entrance into their targets by phishing with Trojanized documents.

ZDNet says Hollywood's lying to us. In the movies, the hacker scowls, taps vigorously at the keyboard, and says "I'm in!" Bitdefender's look at the Carbanak gang reveals, instead, months of preparation before the crooks hit the bank.

CyberScoop reports that a second member of Congress, Maryland Senator Van Hollen, has joined his House colleague, Representative Ruppersberger, to announce that the Government is confident EternalBlue wasn't involved in the Baltimore ransomware attack.

Huawei's chairman Liang Hua accused the US of "acting inappropriately" toward his company, NPR reports, but then proffered dove with an olive branch: the same kind of no-spy deal Shenzhen has dangled before Germany and the UK. This dove seems unlikely to fly in Washington, given Huawei's reputation with respect to non-disclosure agreements and partners' IP.

The US Government has released its Data Strategy.

Don't believe Microsoft about the importance of patching legacy versions of Windows against the BlueKeep RDP vulnerability? Maybe you'll believe NSA's Central Security Service? They think you should patch, too.

Crescat noticia, vita non excolatur: University of Chicago Medicine has apparently left data of almost 1.7 million donors and prospective donors exposed online, Security Discovery says. The University secured the database and thanked the discoverer for the tip.