Why Huntress’ 2025 Managed ITDR Report should be required reading for every security team.
RSA is always a good opportunity to reconnect with industry friends2025 was no exception. Beneath the marketing avalanche of AI-enabled everything, one theme stuck out in conversations with CISOs...
Wiz Threat Research has confirmed active in-the-wild exploitation of a vulnerability chain in Ivanti Endpoint Manager Mobile (EPMM), comprising CVE-2025-4427 (authentication bypass) and...
One Port, Two Lanes: The Express Route to Smarter Connectivity with a Multi-service Port Every business relies on a network to keep things running smoothly, but not all traffic moves at the same...
The SFQ Qdisc system in Linux distributes fair packet throughput between different network data flows. If the packet amount exceeds the limit, it's dropped. Eventually, a type confusion occurs...
Another rushed app launch and another set of horrific vulnerabilities. Writing secure code is hard, takes time and lots of effort to get right. This is a prime example of what can go wrong. In...
The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility. "Robware.net and RVTools.com are currently offline. We are...
Serviceaide data leak exposes sensitive health info of 500K Catholic Health patients due to misconfigured database; risk of ID theft and fraud.
While spending on cybersecurity continues to increase, it’s not clear to what degree that level of spending is sustainable.
Several ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control over compromised hosts. "Skitnet has...
The UK’s National Health Service (NHS) is asking its IT suppliers to commit to better cybersecurity by signing a public charter. In a May 15 open letter to suppliers, top UK and NHS cyber...
The Take It Down Act requires platforms to remove instances of “intimate visual depiction” within two days. Free speech advocates warn it could be weaponized to fuel censorship.
The top bidder in the DNA testing firm's bankruptcy auction, Regeneron vows to prioritize the privacy, security, and ethical use of customer data.
DDoSecrets indexes 410GB of breached TeleMessage data, including messages and metadata, from hack tied to unsecured Signal clone used by US government officials.
More than 100 groups and individuals banded together today to oppose any changes to the EU’s landmark General Data Protection Regulation (GDPR). Potential GDPR changes for simplifying the data...
OpenAI is planning to combine multiple products (features or models) into its next foundational model, which is called GPT-5. [...]
The UK Legal Aid Agency has suffered a major cyberattack, with “significant” sensitive data, including criminal records, stolen.…
ESET Chief Security Evangelist Tony Anscombe highlights key findings from the latest issue of the ESET APT Activity Report
Threat actors have been distributing trojanized versions of the KeePass password manager for at least eight months to install Cobalt Strike beacons, steal credentials, and ultimately, deploy...
Eric Council Jr. sentenced for 2024 SIM swap that led to fake Bitcoin ETF tweet from SEC’s X account, briefly impacting crypto markets.
Sequoia Capital partner Shaun Maguire said in a webinar hosted by Israel’s Defense Ministry that he connected the IDF with SpaceX’s Starlink satellite internet far sooner than believed.
Continuous Threat Exposure Management (CTEM) has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors...
The legislation comes amid DOGE-fueled cuts to CISA and warnings from lawmakers that Trump administration policies will cripple federal cyber recruiting. The post Federal cyber workforce training...
The trio of spyware apps — hacked earlier this year — no longer work.
Mozilla has released security updates to address two critical security flaws in its Firefox browser that could be potentially exploited to access sensitive data or achieve code execution. The...
Microsoft anounced support for the AI data connection standard across its platform at Build 2025.
Malicious dbgpkg package on PyPI poses as a debugging utility but acts as a delivery mechanism for a stealthy backdoor
Cybersecurity leaders aren’t just dealing with attacks—they’re also protecting trust, keeping systems running, and maintaining their organization’s reputation. This week’s developments highlight a...
A flaw in O2 UK's implementation of VoLTE and WiFi Calling technologies could allow anyone to expose the general location of a person and other identifiers by calling the target. [...]
RomethemeKit for Elementor has released a patch addressing an RCE vulnerability exposing 30,000 sites