Featured Issues

The conference, Lockbit exposure, an Apple vulnerability, and moreLive Webinar | Scale AppSec with Security Champions – May 15Security Champions programs are a proven way to scale AppSec across dev teams. Join Snyk’s live webinar on May 15 @ 11AM ET where we’ll cover👇✓ Defining the role of security champions✓ Designing a scalable, tailored program✓ Recognizing, rewarding & growing your champions🎓 BONUS: Earn CPE credits for attending!Save Your Spot!#197: RSA Reflections and Password Store InfectionsKnowing the landscape and improving the postureWelcome to another_secpro!For all of you who attended the RSA Conference, we hope you had a great time getting up to scratch with the goings on in this industry. Got something to share? Reply to this email and tell us about your thoughts. This week's issue contains:- RSA Conference 2025 – Navigating the New Cyber Frontier- MITRE ATT&CK Top Ten Breakdown #3: T1555-LockBit Ransomware Group Compromised; Internal Chats Leaked- Berkeley Research Group Breach Exposes Sensitive Data in Catholic Church Abuse Cases- Co-op Data Breach Affects Millions of UK Customers- AirBorne Vulnerability in Apple’s AirPlay Puts Billions at Risk- U.S. Customs and Border Protection Confirms Use of Hacked TeleMessage AppCheck out _secpro premiumCheers!Austin MillerEditor-in-ChiefNew developer products provide a glimpse into the future of app building on HubSpot, including deeper extensibility, flexible UI, modern development tools, and moreHubSpot’s AI-powered ecosystem presents a global opportunity projected to reach $10.2 billion by 2028. To capitalize on that growth potential, we are opening our platform more, starting with expanded APIs, customizable app UI, and tools that better support a unified data strategy.Learn moreMITRE ATT&CK #4: T1555Understanding "Credentials from Password Stores"Read the rest here!RSA Conference 2025 – Navigating the New Cyber FrontierA reflection on this year's eventsRead the rest here!News BytesLockBit Ransomware Group Compromised; Internal Chats Leaked: The notorious LockBit ransomware gang suffered a significant breach, leading to the exposure of internal chat logs and operational details. These leaks provide unprecedented insights into the group's tactics, including their use of known vulnerabilities, adoption of proof-of-concept exploits, and targeting strategies.Berkeley Research Group Breach Exposes Sensitive Data in Catholic Church Abuse Cases: Berkeley Research Group (BRG), involved in managing Catholic Church bankruptcy cases related to sexual abuse lawsuits, experienced a cyberattack that potentially exposed sensitive victim data. The attacker infiltrated BRG's systems by impersonating an IT worker on Microsoft Teams, deployed Chaos ransomware, and demanded payment. Although BRG has not found evidence of data dissemination, the U.S. Justice Department is scrutinizing the firm's delayed disclosure and potential conflicts of interest.Co-op Data Breach Affects Millions of UK Customers: The Co-op experienced a cyberattack where hackers accessed and extracted personal data from one of its systems, affecting a significant number of its more than 6.2 million current and past members. The breach forced the Co-op to temporarily shut down parts of its IT systems. The UK's National Crime Agency and National Cyber Security Centre are investigating the incident.AirBorne Vulnerability in Apple’s AirPlay Puts Billions at Risk: A critical security flaw dubbed "AirBorne" has been discovered in Apple’s AirPlay protocol and SDK, potentially allowing hackers on the same Wi-Fi network to deploy malware, access private data, or eavesdrop on conversations. Public spaces like coffee shops and airports are particularly vulnerable. While Apple has issued security updates, many third-party devices relying on the affected AirPlay SDK may not receive timely patches, leaving users at risk.U.S. Customs and Border Protection Confirms Use of Hacked TeleMessage App: The U.S. Customs and Border Protection (CBP) confirmed its use of a communication application by TeleMessage, which clones popular apps like Signal and WhatsApp with added record-retention archiving. Following the discovery of a cyber incident, CBP suspended its use of TeleMessage while investigating the breach. Significant security vulnerabilities have been identified in TeleMessage’s Android code, prompting U.S. Senator Ron Wyden to urge the Department of Justice to investigate the company, characterizing it as a national security risk.This week's toolsATT&CK Splunk Add-on (as part of Attack Range): This Splunk-supported environment is designed for testing and training based on real-world attack scenarios. It leverages MITRE ATT&CK to simulate threats and includes preconfigured Splunk dashboards and detections for ATT&CK techniques, offering a lab-like setting for defenders to hone their response strategies.ATT&CK Navigator: ATT&CK Navigator is a web-based tool for visualizing and annotating MITRE ATT&CK matrices. It allows analysts to overlay data like detection coverage, threat actor usage, or red/blue team test results to better understand where gaps exist in detection or mitigation strategies.Caldera: Caldera is an automated adversary emulation system designed to evaluate the effectiveness of cyber defense tools and processes. It uses the MITRE ATT&CK framework to model adversary behavior and execute post-compromise techniques, allowing blue teams to validate detection and response capabilities.Detection Rules: Detection Rules is a collection of threat detection rules for use with Elastic Security. These rules are directly mapped to MITRE ATT&CK techniques and tactics, enabling high-fidelity detection of adversarial behavior in environments monitored by the Elastic Stack (Elasticsearch, Kibana, etc.).Upcoming events for _secpros this yearHere are the five conferences we're looking forward to the most this year (in no particular order...) and how you can get involved to boost your posture! Check out next week's issue to find our coverage of CyberUK!CyberUK (6th-7th May): Organised by the UK’s National Cyber Security Centre (NCSC), CyberUK is the government’s flagship cybersecurity event. It brings together security leaders, policymakers, and industry professionals to discuss pressing cybersecurity issues. With a strong focus on collaboration and innovation, CyberUK is a hub for public and private sector expertise.DSEI (9th-12th September): DSEI stands out as a global platform that bridges defence, security, and cybersecurity. With its broad focus on cutting-edge technologies, this event is critical for those involved in national defence, law enforcement, and private security. Cybersecurity is a prominent theme, with sessions addressing both offensive and defensive cyber strategies.Defcon (7th-10th August): Defcon is a legendary event in the hacker and cybersecurity communities. Known for its hands-on approach, Defcon offers interactive workshops, capture-the-flag contests, and discussions on emerging threats. The conference is ideal for those looking to immerse themselves in technical aspects of cybersecurity.Black Hat (2nd-7th August): Black Hat USA is synonymous with advanced security training and research. This premier event features technical briefings, hands-on workshops, and sessions led by global security experts. Attendees can explore the latest trends in penetration testing, malware analysis, and defensive techniques, making it a must-attend for cybersecurity professionals.Wysh Life Benefit allows any financial institution to offer free life insurance directly through their customers’ savings accounts. By embedding micro life insurance into deposit accounts, Life Benefit provides built-in financial protection that grows with account balances. It’s a simple, no-cost innovation that enhances loyalty, encourages deposits, and differentiates institutions in a competitive market. No paperwork. No medical exams. Just automatic coverage that provides peace of mind—without changing how customers bank.Talk to the Team Today*{box-sizing:border-box}body{margin:0;padding:0}a[x-apple-data-detectors]{color:inherit!important;text-decoration:inherit!important}#MessageViewBody a{color:inherit;text-decoration:none}p{line-height:inherit}.desktop_hide,.desktop_hide table{mso-hide:all;display:none;max-height:0;overflow:hidden}.image_block img+div{display:none}sub,sup{font-size:75%;line-height:0} @media (max-width: 100%;display:block}.mobile_hide{min-height:0;max-height:0;max-width: 100%;overflow:hidden;font-size:0}.desktop_hide,.desktop_hide table{display:table!important;max-height:none!important}}

AI, Python, backtesting, and smart strategies for traders who think in code.Subscribe | Submit a tip | Advertise with us📬 Welcome to the First Edition of AlgoFinance Newsletter💫Yourinsight into algorithmic trading, AI, and market strategy.Whether you're a retail trader, a quant enthusiast, or a wealth manager exploring the edge of finance-tech, AlgoFinance is designed to keep you sharp, updated, and trading smarter, not harder.In this first edition, we’re covering the foundational and forward-looking topics shaping today's algorithmic landscape:🔧 Getting Started in Algorithmic Trading🔗 How Algo Trading Works - Understand execution vs. alpha-seeking vs. HFT🔗 Why Python Dominates - Strategy coding, broker APIs, risk tools🔗 Automation Benefits - Precision, speed, emotion-free trading🤖 AI & Machine Learning in Trading🔗 AI in the Markets - From trend prediction to sentiment-driven trades🔗 ML Techniques You Need to Know - Supervised, unsupervised, reinforcement🔗 Systematic AI Review -Insights from 140+ financial research studies🔗 How Platforms Are Adapting - AI-driven alerts, risk tools, and strategy suggestions📊 Backtesting & Strategy Development🔗 Backtesting Essentials -Tools, metrics, pitfalls to avoid🔗 Step-by-Step Strategy Testing - From idea to execution🔗 Avoiding Overfitting - Make your strategy real-world ready🏦 Smarter Portfolio Management🔗 ML for Portfolio Optimization - Adaptive allocation, real-time response🔗 Risk Management with AI - Better forecasts, stronger safeguards🔔 What’s Next?In upcoming editions, we’ll go deeper into:🔸Real-world trading case studies🔸Strategy automation with broker APIs🔸Strategy deployments scenarios🔸Quant tools & libraries reviews (e.g., Zipline, Backtrader, PyAlgoTrade)🔸Community-contributed strategies and interviews🧑‍💻 Have a strategy to share or a topic you'd like us to explore? Hit reply or submit here!Thanks for joining the journey - AlgoFinance starts here. Let’s build and trade better, together. 🚀As promised, here’s your free eBookWe’re excited to share TradeStation EasyLanguage for Algorithmic Trading - a best-seller and now yours, free, as a thank-you for being part of our AlgoFinance newsletter.We’d love to hear what you think.Your feedback helps us shape future editions and deliver what matters most to you.👉 Take the short survey and get your eBook nowCheers,Merlyn ShelleyGrowth Lead, Packt🧠 Algorithmic Trading Strategies 📊🟦 How Do I Get Started in Algorithmic Trading? Get to know how algorithmic trading spans execution, profit-seeking, and high-frequency (HFT) strategies. Quants rely on tools like VWAP, TWAP, and basket algorithms for precision. Black-box models, though powerful, raise accountability concerns. Open-source platforms and crowdsourced algorithms are also shaking things up, blending transparency, speed, and innovation in unexpected ways.🟦 Algorithmic Trading with Python: Explore how Python is transforming algorithmic trading, from strategy creation and backtesting to live execution via broker APIs. Get to know why Python stands out for retail and quant traders: it's simple, powerful, and backed by robust libraries and broker support. Highlights include step-by-step guidance on setting up your trading environment, building your first algo, and managing risk effectively. Advanced sections touch on machine learning, HFT, and sentiment analysis, giving traders tools to scale and refine their strategies. Perfect for anyone ready to move from manual trading to a structured, code-driven approach.🟦 Benefits of Algorithmic Trading in Stock Market: Learn how algorithmic trading automates market decisions using rule-based strategies like moving averages, VWAP, and mean reversion. This guide outlines key strategies, benefits, risks, and technical requirements for beginners looking to turn trading logic into executable code and start using computer programs to trade more efficiently and precisely.🤖 Machine Learning & AI in Trading 🧮🟦 How AI and ML Are Used in Stock Trading? You’ve probably noticed that trading isn’t what it used to be. It’s no longer just charts and gut feelings. With AI and Machine Learning, traders (yes, even beginners) can now analyse data, predict trends, manage risk, and execute trades in milliseconds. These tools aren’t just for large institutions anymore, they’re helping everyday traders make faster, smarter decisions with less stress and more confidence.🟦 ML Techniques used in Trading: This blog dives into how machine learning is changing the way trading works, from analysing huge datasets and predicting market moves to building smarter algorithms and managing risk more effectively. It covers key ML techniques like predictive modeling, sentiment analysis, reinforcement learning, and how they're being applied in real-world trading environments. If you're curious about how tech is shaping the future of finance, this is a great place to start.🟦 Artificial intelligence techniques in financial trading: A systematic literature review. This blog unpacks a detailed review of how Artificial Intelligence, especially Machine Learning and Deep Learning, is being used in financial trading. It explores 143 research studies across markets and assets, highlighting how AI is applied to predict prices, analyse trends, automate strategies, and manage risk. With a strong focus on algorithmic trading, technical analysis, and the most-used AI techniques, the blog offers insights into current practices, key challenges, and research gaps, making it a solid read for anyone interested in the evolving role of AI in modern trading.🟦 Machine Learning in trading: a game changer for markets? This article is your in-depth introduction to how Machine Learning is reshaping trading as we know it. It explains why ML is gaining momentum now, what makes it so effective, and how it’s being used to recognise patterns, refine strategies, manage risk, and adapt to shifting market conditions. Whether you’re already algorithm-savvy or still trading by hand, the piece offers a clear, practical look at how ML impacts price action, from smoother trends to engineered liquidity grabs and what that might mean for all types of traders going forward.🟦 Learning In Trading - What Is It, Types This article introduces how Machine Learning is being applied in trading to help traders and fund managers analyse huge volumes of data, detect hidden patterns, and make faster and more informed decisions. It explains the key types of ML including supervised, unsupervised, and reinforcement learning, and how these models reduce analysis time, support backtesting, and improve the precision of both short and long term trading strategies.🟦 How Trading Platforms Are Incorporating AI and Machine Learning for Smarter Trading? This post explores how AI and Machine Learning are being integrated into modern trading platforms to enhance prediction, automate strategies, improve risk management, and personalise user experience. It highlights key tools, platform examples, benefits, and challenges shaping today’s data-driven trading landscape.🧑‍💻 Backtesting & Strategy Development 🔁🟦 Backtesting and Optimization in Algorithmic Trading: This post explains the importance of backtesting and optimization in algorithmic trading and how tools like QuantConnect help traders refine strategies before going live. It covers how to evaluate performance, adjust key parameters, and use data-driven insights to improve long-term trading outcomes.🟦 A Complete Guide to Backtesting Algo Trading Strategies: This post is a practical guide to backtesting and optimising algorithmic trading strategies. It explains the step-by-step process for evaluating your strategy using historical data, highlights key performance metrics, and introduces advanced techniques like walk-forward optimisation and portfolio-level testing to strengthen real-world readiness.🟦 A Step-by-Step Guide to Backtesting Trading Strategies: This post is a step-by-step guide to backtesting trading strategies, helping traders understand how to evaluate and optimise their systems using historical market data. It covers essential concepts like risk-reward analysis, walk-forward testing, Monte Carlo simulations, and choosing the right backtesting software. You'll also find practical tips on handling emotional bias, integrating backtesting into your trading routine, and transitioning to live trading with confidence. Perfect for those working with algorithmic trading, technical indicators, or building rule-based strategies in dynamic market conditions.🟦 Successful Backtesting of Algorithmic Trading Strategies. This article is a deep dive into the fundamentals and practical realities of backtesting algorithmic trading strategies. It explains what backtesting is, why it matters, and how traders can use it to filter, model, optimise, and verify strategies. It also covers common backtesting biases like look-ahead, survivorship, and optimisation bias, along with the psychological and technical pitfalls traders often overlook. Finally, it compares popular backtesting software options, helping both beginners and advanced quants choose tools suited to their coding skills, trading frequency, and performance needs.🟦 Why Backtesting Strategies Are Crucial in Algo Trading: Key Benefits and Techniques. This post highlights the critical role of backtesting in algorithmic trading, explaining how simulating strategies on historical market data helps traders evaluate risk, refine performance, and build confidence. It covers key benefits like strategy optimization, drawdown analysis, and risk-adjusted metrics, while offering best practices around data quality, realistic assumptions, and forward testing to ensure robust, live-ready strategies.📈 Portfolio Optimization & Risk Management 🏦🟦 Machine Learning for Finance: Portfolio Optimization, Risk Management, and Algorithmic Trading. This post explores how machine learning is reshaping finance by improving portfolio optimization, risk management, and algorithmic trading. Using Python-based tools, it outlines a structured approach to building adaptive, data-driven strategies that enhance returns, reduce risk, and respond to market changes in real time.🟦 Enhanced Portfolio Optimization: Integrating Machine Learning and Risk Management Techniques This article explores how integrating machine learning with traditional portfolio optimization can improve investment strategies. It focuses on enhancing risk management using ML methods like neural networks and reinforcement learning to analyze complex financial data, refine asset allocation, and reduce portfolio risk through dynamic, data-driven approaches.🟦 Backtesting & Optimization: Keys to Algorithmic Trading. This article explains the vital role of backtesting and optimization in algorithmic trading, especially for family offices and wealth managers. It highlights how these techniques assess strategy performance using historical data and refine parameters for better results, while cautioning against overfitting and emphasizing the need for high-quality data and sound statistical practices.🟦 Mastering Algorithmic Trading: Crafting Strategies from Concept to Execution. This tutorial walks you through building a complete algorithmic trading strategy using Python,from data acquisition and hypothesis formulation to strategy development, backtesting, and execution. It focuses on using a moving average crossover system with real financial data to test and refine trading logic.*{box-sizing:border-box}body{margin:0;padding:0}a[x-apple-data-detectors]{color:inherit!important;text-decoration:inherit!important}#MessageViewBody a{color:inherit;text-decoration:none}p{line-height:inherit}.desktop_hide,.desktop_hide table{mso-hide:all;display:none;max-height:0;overflow:hidden}.image_block img+div{display:none}sub,sup{font-size:75%;line-height:0} @media (max-width: 100%;display:block}.mobile_hide{min-height:0;max-height:0;max-width: 100%;overflow:hidden;font-size:0}.desktop_hide,.desktop_hide table{display:table!important;max-height:none!important}}