Silver Spring, Maryland, 3rd June 2025, CyberNewsWire
CISOs should demand more of their vendors and use regulation as an ally to persuade board members to accelerate the transition to post-quantum safety
A healthcare giant with dozens of facilities across Ohio is still recovering after shutting down nearly all its operations following a ransomware attack.
Google has revealed that it will no longer trust digital certificates issued by Chunghwa Telecom and Netlock citing "patterns of concerning behavior observed over the past year." The changes are...
A recently disclosed data breach at Coinbase has been linked to India-based customer support representatives from outsourcing firm TaskUs, who threat actors bribed to steal data from the crypto...
The U.S. Department of Homeland Security issued a 30-day notice that the Transportation Security Administration (TSA) has submitted... The post TSA seeks OMB approval to extend pipeline security...
The Food and Ag-ISAC has released its updated Cybersecurity Guide for Small and Medium-Sized Enterprises, incorporating findings from... The post Food and Ag-ISAC updates cybersecurity guide for...
The new Wyze Bulb Cam replaces light bulbs and offers extra security coverage built into a motion-activated smart light.
Malware campaign used fake DocuSign pages to deploy NetSupport RAT through clipboard manipulation
Microsoft and CrowdStrike have announced that they are teaming up to align their individual threat actor taxonomies by publishing a new joint threat actor mapping. "By mapping where our knowledge...
Over 50% of Wiz customers have reduced their cloud risk by reaching Zero Critical Issues
As GenAI continues to shape modern cybersecurity with its powerful advantages for strengthening defense mechanisms, it simultaneously introduces new risks as threat actors increasingly exploit the...
Europol has identified over 2,000 extremist links exploiting minors, focusing on dismantling grooming, abuse, and online radicalization networks.
Microsoft is testing a dedicated page in Windows Settings for quick machine recovery, which will provide users with additional configuration options. [...]
Two malicious RubyGems packages posing as popular Fastlane CI/CD plugins redirect Telegram API requests to attacker-controlled servers to intercept and steal data. [...]
2025-05-27 • Trend Micro • Joseph C Chen • win.cobalt_strike, win.juicy_potato, win.stowaway, win.vshell Open article on Malpedia
The domino effect of CVE disruption is something all cybersecurity practitioners must be aware of, a Morphisec executive argues. The post Future-ready cybersecurity: Lessons from the MITRE CVE...
The domino effect of CVE disruption is something all cybersecurity practitioners must be aware of, a Morphisec executive argues. The post Future-ready cybersecurity: Lessons from the MITRE CVE...
Mozilla has developed a new security feature for its add-on portal that helps block Firefox malicious extensions that drain cryptocurrency wallets. [...]
Scattered Spider isn't one group — it's an identity-first threat model evolving fast. From vishing to AiTM phishing, they're exploiting MFA gaps to hijack the cloud. Watch the Push Security...
Kaspersky expert shares insights on how to determine whether an attack was first launched in a container or on the host itself when an organization’s logs lack container visibility.
We discovered an Azure OpenAI misconfiguration allowing shared domains, potentially leading to data leaks. Microsoft quickly resolved the issue. The post Lost in Resolution: Azure OpenAI's DNS...
The 20-year bureau pro wants to see what it’s like to fight ransomware from the private sector. The post Top FBI cyber official Cynthia Kaiser exits for Halcyon appeared first on CyberScoop.
Abnormal AI found that engagement rates with VEC attacks globally is “worrisomely high”, overtaking BEC in the EMEA region
CISA is alerting federal agencies in the U.S. of hackers exploiting a recently patched ScreenConnect vulnerability that could lead to executing remote code on the server. [...]
Google on Monday released out-of-band fixes to address three security issues in its Chrome browser, including one that it said has come under active exploitation in the wild. The high-severity...
Fashion retail giant Victoria's Secret has delayed its first quarter 2025 earnings release because of ongoing corporate system restoration efforts following a May 24 security incident. [...]
Crucial for applying Active Directory Group Policy Objects, client-side extensions (CSEs) are powerful but also present a significant, often overlooked, attack vector for persistent backdoors....
Risk Ledger found that 90% of UK professionals view supply chain cyber incidents as a top concern for 2025
Google has released an emergency security update to fix the third Chrome zero-day vulnerability exploited in attacks since the start of the year. [...]