Putting a vulnerability debt figure together involves work, but having vulnerability debt figures lets you measure real-world values against your overall security posture. – Read More
A China-linked threat actor known as Mustang Panda has been attributed to a new cyber espionage campaign directed against the Tibetan community. The spear-phishing attacks leveraged topics related to Tibet,…
Cyber operations have become critical to national security, but the United States has fallen behind in one significant area — exploit production — while China has built up a significant…
Drucker und Scanner werden dank einer Schwachstelle in der Microsoft 365 Direct Send-Funktion zunehmend zu Mitteln für Hacker, um Phishing-Angriffe durchzuführen. FabrikaSimf – shutterstock.com Das Forensik-Team von Varonis hat eine…
Andrew Lloyd, Managing Director at Search Acumen, comments on May’s HMRC property transactions data, published today. The post Search Acumen comments on HMRC property transactions in May appeared first on…
As generative artificial intelligence (genAI) redefines enterprise operations, governance, risk and compliance (GRC) functions sit at the intersection of transformation and accountability. The common narrative focuses on “effort reduction” —…
Security operations centers (SOCs) are under pressure from both sides: threats are growing more complex and frequent, while security budgets are no longer keeping pace. Today’s security leaders are expected…
A new campaign has been observed leveraging fake websites advertising popular software such as WPS Office, Sogou, and DeepSeek to deliver Sainbox RAT and the open-source Hidden rootkit. The activity…
Legal background aggravating factor A personal injury lawyer who falsely claimed his vehicle was damaged by potholes for insurance payouts, twice, has been found guilty of fraud following a local…
Threat intelligence firm GreyNoise is warning of a “notable surge” in scanning activity targeting Progress MOVEit Transfer systems starting May 27, 2025—suggesting that attackers may be preparing for another mass…
The extended detection and response (XDR) market is experiencing significant growth, driven by escalating cybersecurity threats and the need for enterprises to integrate disparate security technologies into one platform. By…
Cybersecurity researchers have detailed a new campaign dubbed OneClik that leverages Microsoft’s ClickOnce software deployment technology and bespoke Golang backdoors to compromise organizations within the energy, oil, and gas sectors.…
As tensions in the Middle East rise, hacktivist groups are coming out of the woodwork with their own agendas, leading to notable shifts in the hacktivist threat landscape. – Read…
Printers and scanners are increasingly becoming ways for cyber crooks to deliver phishing attacks, thanks to a flaw in the Microsoft 365 Direct Send feature. The Varonis forensics team has…
CSOs are being urged to quickly patch multiple vulnerabilities in Cisco Systems Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could allow an unauthenticated, remote attacker…