Tag: cyber
-
AI is Redefining Cyber Risk Quantification: Here’s What Every CISO Needs to Know
For years, security leaders have been stuck in a reporting loop: patch volumes, CVSS scores, and red-yellow-green dashboards. These are useful”¦ until they hit the boardroom. That’s when things fall apart. “What does a CVSS score of 9.8 mean for our revenue?” “How exposed are we to real-world loss?” “How much should we budget for……
-
Congress Introduces Bill to Strengthen Healthcare Cybersecurity
The legislation aims to expand the federal government’s role in helping healthcare providers protect and respond to cyber-attacks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/congress-bill-healthcare/
-
Apache Kafka Arbitrary File Read and SSRF Vulnerability (CVE-2025-27817)
Overview Recently, NSFOCUS CERT detected that Apache issued a security bulletin to fix the arbitrary file read and SSRF vulnerabilities in Apache Kafka (CVE-2025-27817); Because the Apache Kafka client does not strictly validate and restrict user input, an unauthenticated attacker can elevate the file system/environment/URL access rights of the REST API by constructing malicious configurations…The…
-
How AI agents could revolutionize the SOC, with human help
AI agents aren’t foolproof, but they could soon replace some of the most common tasks for cyber defenders. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/artificial-intelligence-ai-agents-security-operations-center-gartner/750370/
-
The critical role that partnerships play in shrinking the cyber skills gap
Building the cyber talent pipeline through partnerships: a real-world example: Fortinet’s work in Morocco offers an example of how uniquely crafted partnerships can help develop cyber-talent pipelines, particularly in under-resourced regions. Through the “Code 212” initiative, Fortinet works with two ministries and 12 Moroccan universities, integrating hands-on cybersecurity training for students across many disciplines. We…
-
Windows Task Scheduler Flaw Allows Attackers to Escalate Privileges
A critical elevation of privilege vulnerability has been identified in the Windows Task Scheduler service, tracked as CVE-2025-33067. Officially published on June 10, 2025, by Microsoft as the assigning CNA (CVE Numbering Authority), this flaw allows attackers to potentially gain elevated privileges on affected systems, bypassing normal user restrictions and compromising the integrity of the…
-
Windows Common Log File System Driver Flaw Allows Attackers to Escalate Privileges
Microsoft addressed a critical security flaw (CVE-2025-32713) in the Windows Common Log File System (CLFS) driver during its June 2025 Patch Tuesday. The heap-based buffer overflow vulnerability enables local attackers to escalate privileges to SYSTEM-level access, posing significant risks to enterprise environments. Anatomy of CVE-2025-32713 The vulnerability stems from improper memory handling in the CLFS…
-
Huntress Unveils Immersive Cybersecurity Training That Puts Users in the Shoes of Hackers
In an effort to overhaul traditional security awareness training (SAT), cybersecurity firm Huntress has introduced Threat Simulator, a new feature of its Managed Security Awareness Training (SAT) platform, designed to immerse users in the tactics, techniques, and mindset of cyber attackers. Old-school SAT methods are falling short, according to Huntress, which cites passive, oversimplified video content and one-size-fits-all…
-
Multiple Microsoft Office Vulnerabilities Enable Remote Code Execution by Attackers
Microsoft has disclosed four critical remote code execution (RCE) vulnerabilities in its Office suite as part of the June 2025 Patch Tuesday updates, posing significant risks to organizations and individuals who depend on the widely used productivity software. The vulnerabilities, tracked as CVE-2025-47162, CVE-2025-47953, CVE-2025-47164, and CVE-2025-47167, each received a CVSS v3.1 base score of…
-
Trump Guts Biden-Era Cyber Order, Ends Sanctions for Domestic Hackers
President Donald Trump has also significantly amended Executive Order 14144, which former President Joe Biden signed. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-trump-ends-sanctions-domestic-hackers/
-
Huntress Unveils Immersive Cybersecurity Training That Puts Users in the Shoes of Hackers
In an effort to overhaul traditional security awareness training (SAT), cybersecurity firm Huntress has introduced Threat Simulator, a new feature of its Managed Security Awareness Training (SAT) platform, designed to immerse users in the tactics, techniques, and mindset of cyber attackers. Old-school SAT methods are falling short, according to Huntress, which cites passive, oversimplified video content and one-size-fits-all…
-
CybaVerse Acquires SecureAck to Expand Next-Gen Security Operations Platform for SMEs and MSPs
CybaVerse has today announced it has acquired SecureAck, a scalable automation platform designed to simplify security across IT and OT environments. The acquisition will accelerate the development of CybaVerse’s proprietary platform, CybaVerse AI, and expand support for small to mid-sized enterprises (SMEs) and managed service providers (MSPs), who are seeking flexible, resilient cyber security solutions, whether…
-
China-linked hackers target cybersecurity firms, governments in global espionage campaign
Tags: access, awareness, china, ciso, cyber, cybersecurity, defense, detection, espionage, government, hacker, infrastructure, intelligence, Internet, monitoring, threatDeployed PurpleHaze for broader espionage: Researchers reported that in October 2024, they detected and mitigated a reconnaissance operation targeting SentinelOne, which they identified as part of a broader activity cluster known as PurpleHaze.As noted earlier, this PurpleHaze activity shared infrastructure with the campaign behind the re-compromise of the South Asian government entity, suggesting a stronger…
-
CoreDNS Vulnerability Allows Attackers to Exhaust Server Memory via Amplification Attack
A high-severity vulnerability (CVE-2025-47950) in CoreDNS’s DNS-over-QUIC (DoQ) implementation enables remote attackers to crash DNS servers through stream amplification attacks. Patched in v1.21.2, this flaw highlights risks in modern protocol adoption for cloud-native systems Goroutine Proliferation in DoQ Implementation The vulnerability stems from CoreDNS’s handling of QUIC streams in its server_quic.go component. For every incoming…
-
Why DNS Security Is Your First Defense Against Cyber Attacks?
In today’s cybersecurity landscape, much of the focus is placed on firewalls, antivirus software, and endpoint detection. While these tools are essential, one critical layer often goes overlooked: the Domain Name System (DNS). As the starting point of nearly every online interaction, DNS is not only foundational – it’s increasingly a target. When left unsecured,…
-
Cyber Bill at risk of becoming a missed opportunity, say MPs
An APPG report warns that the government’s flagship cyber security legislation is too narrow in its scope and risks missing opportunities to embed resilience at the heart of the British economy First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625838/Cyber-Bill-at-risk-of-becoming-a-missed-opportunity-say-MPs
-
Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)
For June 2025 Patch Tuesday, Microsoft has fixed 66 new CVEs, including a zero-day exploited in the wild (CVE-2025-33053). Also, Adobe Commerce and Magento Open Source users … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/11/microsoft-fixes-zero-day-exploited-for-cyber-espionage-cve-2025-33053/
-
Apache CloudStack Flaw Allows Attackers to Execute Privileged Actions
Apache CloudStack, a leading open-source cloud management platform, has announced the immediate availability of new Long-Term Support (LTS) releases”, version 4.19.3.0 and 4.20.1.0″, to address multiple critical security vulnerabilities. The advisory, published by PMC member Pearl Dsilva on June 10, 2025, highlights five distinct vulnerabilities, two of which are rated critical and pose significant risks…
-
Hands-On Skills Now Key to Landing Your First Cyber Role
An ISC2 study found that 90% of security hiring managers would consider entry-level candidates with only previous IT work experience First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/hands-on-skills-first-cyber-role/
-
Cyber-Angriffe auf Reiseveranstalter und Reisebüros nehmen drastisch zu
Angriffe wie die genannten zeigen: Die Reisebranche ist für Cyberkriminelle ein lukratives Ziel und die Bandbreite reicht von Kriminellen bis hin zu staatlich gelenkten Gruppen. IT-Sicherheit ist längst nicht mehr nur eine technische Aufgabe, sondern ein zentrales Element unternehmerischer Resilienz. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cyber-angriffe-auf-reiseveranstalter-und-reisebueros-nehmen-drastisch-zu/a41120/
-
Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)
For June 2025 Patch Tuesday, Microsoft has fixed 66 new CVEs, including a zero-day exploited in the wild (CVE-2025-33053). Also, Adobe Commerce and Magento Open Source users … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/11/microsoft-fixes-zero-day-exploited-for-cyber-espionage-cve-2025-33053/
-
8 things CISOs have learned from cyber incidents
Tags: apt, attack, authentication, backup, breach, business, ciso, compliance, cyber, data, defense, detection, endpoint, exploit, incident, incident response, infection, insurance, jobs, malicious, malware, metric, network, ransom, ransomware, RedTeam, risk, skills, tool, training, update, virus, vulnerability, vulnerability-management, zero-trust2. You’ll need shift from defense to offence: The role and the CISO won’t be the same after an incident.”My job on December 11 was very different from my job on December 12 and beyond, says Brown.Following an incident, some organizations need to change to such an extent that they need a different CISO with…
-
Insyde UEFI Flaw Enables Digital Certificate Injection via NVRAM Variable
A critical vulnerability (CVE-2025-4275) in Insyde H2O UEFI firmware allows attackers to bypass Secure Boot protections by injecting malicious digital certificates via an unprotected NVRAM variable. Dubbed Hydroph0bia, this flaw enables pre-boot execution of unsigned code, posing severe risks to enterprise and consumer devices. Insecure NVRAM Variable Handling The vulnerability stems from the improper use…
-
Multiple Chrome Flaws Enable Remote Code Execution by Attackers
Google Chrome’s Stable channel is being updated to version 137.0.7151.103 for Windows and Mac, with Linux receiving version 137.0.7151.103 as well. The rollout will take place gradually over the coming days and weeks, ensuring smooth deployment and minimal disruption for users. The official changelog provides a detailed breakdown of all modifications and enhancements included in…
-
E-Commerce kämpft zunehmend gegen Cyber-Attacken
Im ersten Quartal 2025 ist ein deutlicher Anstieg gezielter Cyberangriffe auf den Onlinehandel zu verzeichnen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/e-commerce-kaempft-cyber-attacken
-
E-Commerce kämpft zunehmend gegen Cyber-Attacken
Angriffe auf den Onlinehandel haben sich verdoppelt, dominiert das Netz. Die Edge-Cloud-Plattform Fastly hat seinen Threat Insights Report für das erste Quartal 2025 veröffentlicht. Der Bericht gibt einen Überblick über Sicherheitstrends, Angriffsvektoren und Bedrohungen im Bereich der Anwendungssicherheit. Die Ergebnisse zeigen: Angriffe auf den Onlinehandel haben sich von 15″¯ Prozent im ersten Quartal 2024… First…
-
House Homeland Chairman Mark Green’s departure could leave congressional cyber agenda in limbo
Green, R-Tenn., has championed legislation on the cyber workforce, renewal of a cyber threat information sharing bill and more. First seen on cyberscoop.com Jump to article: cyberscoop.com/mark-green-house-homeland-chairman-cybersecurity-agenda/
-
Behavior Data Now Key to Cyber Risk Posture
Frost & Sullivan’s Stahnke on How Human Risk Insights Drive Better Threat Response. Legacy cybersecurity training often fails because users skip the content or treat it as a compliance task. Forward-looking organizations now recognize that human behavior is a critical piece of their security posture, said Claudio Stahnke, industry analyst at Frost & Sullivan. First…