Tag: cybersecurity
-
Insider Research im Gespräch – Die Zukunft der Agentic Cybersecurity
Tags: cybersecurityFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-agenten-fuer-cybersicherheit-proaktiver-ansatz-a-b7401d04c4066cec644856af27473954/
-
Orca Security Acquires Opus to Gain AI Agent Orchestration Technology
Orca Security this week revealed it has acquired Opus to gain access to technologies capable of orchestrating artificial intelligence (AI) agents that are trained to automate a range of cybersecurity tasks. Opus previously has been employing that core capability to drive a vulnerability management platform that Orca Security now plans to sunset. Orca Security CEO..…
-
Linux Foundation Shares Framework for Building Effective Cybersecurity Teams
The Linux Foundation this week made available a customizable reference guide intended to help organizations identify critical cybersecurity skills requirements. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/linux-foundation-shares-framework-for-building-effective-cybersecurity-teams/
-
Duje Frano Bozinovic verstärkt Vertrieb beim ITDistributor Sysob
Tags: cybersecurityMit Duje Frano Bozinovic nimmt Sysob einen erfahrenen Vertriebsprofi an Bord. In seiner neuen Position als Channel-Account-Manager beim VAD verantwortet der 53-Jährige fortan die Betreuung und den Ausbau des Partnerstamms. Im Sysob-Lösungsportfolio betreut Bozinovic neben den Herstellern Forescout, Reiner SCT und Threatdown den europäischen Cybersecurity-Spezialisten Stormshield und steht hier Resellern, Fachhändlern und Systemhäusern als Ansprechpartner…
-
Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attacks
Cybersecurity researchers have shed light on a new malware campaign that makes use of a PowerShell-based shellcode loader to deploy a remote access trojan called Remcos RAT.”Threat actors delivered malicious LNK files embedded within ZIP archives, often disguised as Office documents,” Qualys security researcher Akshay Thorve said in a technical report. “The attack chain leverages…
-
Hackers Leveraging PowerShell to Bypass Antivirus and EDR Defenses
Cybersecurity researchers have uncovered a growing trend in which threat actors are exploiting Microsoft PowerShell a legitimate Windows command-line interface to bypass advanced antivirus and Endpoint Detection and Response (EDR) defenses. This technique, often termed as “Living off the Land” (LotL), allows attackers to leverage built-in system utilities, reducing their reliance on external malicious payloads…
-
Researchers Replicate Advanced Tactics and Tools of VanHelsing Ransomware
Cybersecurity researchers at AttackIQ have meticulously emulated the intricate tactics, techniques, and procedures (TTPs) of the VanHelsing ransomware, a potent ransomware-as-a-service (RaaS) operation that surfaced in March 2025. This cyber threat has rapidly gained notoriety within the cybercriminal underworld for its advanced cross-platform capabilities and aggressive double extortion model. VanHelsing targets a wide array of…
-
Proofpoint Buys Hornetsecurity, A Microsoft 365 Security Specialist For $1 Billion
Cybersecurity giant Proofpoint has announced its agreement to acquire Hornetsecurity Group, a leading European provider of AI-powered Microsoft 365 security solutions. The deal, reportedly valued at $1 billion, is expected to close in the second half of 2025, although exact financial terms were not publicly disclosed in the announcement. This strategic move significantly strengthens Proofpoint’s…
-
Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed
The Linux Foundation, in collaboration with OpenSSF and Linux Foundation Education, has released the Cybersecurity Skills Framework, a global reference guide that helps … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/16/cybersecurity-skills-framework-linux-foundation/
-
RSA 2025: AI’s Promise vs. Security’s Past”Š”, “ŠA Reality Check”
Tags: ai, automation, cloud, conference, cyberattack, cybersecurity, data, detection, edr, endpoint, infrastructure, mobile, resilience, soar, tool, update, windows, zero-trustRSA 2025: AI’s Promise vs. Security’s Past”Š”, “ŠA Reality Check Ah, RSA. That yearly theater (Carnival? Circus? Orgy? Got any better synonyms, Gemini?) of 44,000 people vaguely (hi salespeople!) related to cybersecurity “¦ where the air is thick with buzzwords and the vendor halls echo with promises of a massive revolution”Š”, “Ševery year. Gemini imagines RSA 2025 (very tame!)…
-
How working in a stressful environment affects cybersecurity
Tags: cybersecurityStressful work environments don’t just erode morale, they can quietly undermine cybersecurity. When employees feel overworked, unsupported, or mistreated, their judgment and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/16/stressful-environment-cybersecurity/
-
Proofpoint buying Hornetsecurity in a play to expand email security scope
One of many big purchases in the industry: While the terms are confidential, sources have reported the price of the Hornetsecurity purchase, which is expected to close in the second half of 2025, to be well over $1 billion. This would make it Proofpoint’s largest acquisition, and also one of the biggest cybersecurity deals in…
-
Is Your Cloud Truly Safe from Invisible Threats?
Why Do Cloud Security Gaps Exist? Can we confidently claim to have sealed all potential breaches? The truth is, despite significant investments in cybersecurity measures, gaps continue to exist. Many professionals overlook the importance of Non-Human Identities (NHIs) management. NHIs, machine identities combined with a “Secret””, an encrypted password, token, or key”, are powerful tools……
-
Building Confidence in Your Cybersecurity Strategy
Why is a Comprehensive Cybersecurity Strategy Essential? A robust cybersecurity strategy is no longer a luxury but a necessity. Whether it is financial services, healthcare, or travel, organizations are making significant shifts to the digital domain. It has become critical to safeguard sensitive data from threats and risks. But how can businesses build confidence in……
-
Proofpoint to acquire Hornetsecurity for over $1 billion
Proofpoint has entered into an agreement to acquire Hornetsecurity Group, a Germany-based provider of Microsoft 365 security services, in a deal reportedly valued at more than $1 billion. The acquisition, described as the largest in Proofpoint’s history, comes amid accelerating consolidation in the cybersecurity industry as companies seek to broaden their offerings to enterprise customers…
-
UK NHS Rolls Out Voluntary Cyber Charter for IT Suppliers
Urges Companies to Regularly Patch Their Products. The British National Health Service is prodding suppliers to commit to voluntary cybersecurity measures in a bid to prevent disruptive hacks. Among the proposed measures are regularly patching IT systems, instituting multifactor authentication and requiring IT suppliers to monitor and log their systems to allow prompt incident response.…
-
Nova Scotia Power discloses data breach after March security incident
Nova Scotia Power confirmed a data breach involving the theft of sensitive customer data after the April cybersecurity incident. Nova Scotia PowerInc. is a vertically integrated electric utility serving the province of Nova Scotia, Canada. Headquartered in Halifax, it is a subsidiary of Emera Inc. The company provides electricity to over 500,000 residential, commercial, and…
-
New Cybersecurity Skills Framework seeks to bolster enterprise talent readiness
First seen on scworld.com Jump to article: www.scworld.com/brief/new-cybersecurity-skills-framework-seeks-to-bolster-enterprise-talent-readiness
-
AI, Cloud, Cybersecurity Driving Channel M&A in April and May
First seen on scworld.com Jump to article: www.scworld.com/news/channel-ma-for-may
-
Proofpoint CEO On ‘Monumental’ Hornetsecurity Deal, MSP Growth In US
Proofpoint’s acquisition deal for Hornetsecurity positions the company for major growth with MSPs and SMBs in the U.S. market, making it a ‘big strategic leap forward’ for the cybersecurity vendor, Proofpoint CEO Sumit Dhawan tells CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2025/proofpoint-ceo-on-monumental-hornetsecurity-deal-msp-growth-in-us
-
Fast Reaction by Co-op Blocked Ransom Fallout, Hackers Claim
Expect Attackers to Expand Their Focus to US Targets, Cybersecurity Expert Warns. A trio of British High Street retailers are continuing to recover from cyberattacks that disrupted online orders or in-store card payments, resulting in lower earnings alerts and stock shortages across supermarkets. Expect the attackers to set their sights on U.S. targets, an expert…
-
Coinbase Data Breach Customers Personal Info, Government”‘ID Transaction Data Exposed
Coinbase, the largest cryptocurrency exchange in the United States, has disclosed a significant cybersecurity incident that could cost the company up to $400 million. The breach, revealed in a regulatory filing and confirmed by company officials, stemmed from a sophisticated insider campaign targeting the firm’s overseas support contractors and employees. Coinbase Data Breach On May…
-
A Unified Approach to Exposure Management: Introducing Tenable One Connectors and Customized Risk Dashboards
Unified visibility and context are the keys to an effective exposure management program. Learn how the new Tenable One connectors and unified dashboards give you a comprehensive view of your attack surface, help you streamline decision-making and empower your teams to uncover hidden risks, prioritize critical exposures and respond to threats with confidence. In 2022,…
-
Proofpoint to acquire European cloud security firm Hornetsecurity for over $1 billion
In a deal set to close later this year, cybersecurity giant Proofpoint is acquiring German firm Hornetsecurity, which specializes in protecting companies from risks associated with Microsoft 365. First seen on therecord.media Jump to article: therecord.media/proofpoint-hornetsecurity-acquisition
-
Cryptohack Roundup: Celsius CEO’s 12-Year Prison Sentence
Also: Prison Time for an Irish Crypto Launderer, an ISIS Financier. Every week, ISMG rounds up cybersecurity incidents in digital assets. This week, prison sentences for Celsius CEO, Irish crypto launderer and an ISIS supporter, exCH and Haowang close, a Parisian kidnapping attempt on crypto CEO’s family and Sinaloa Cartel leaders charged in U.S. federal…
-
Nova Scotia Power confirms hackers stole customer data in cyberattack
Nova Scotia Power confirms it suffered a data breach after threat actors stole sensitive customer data in a cybersecurity incident discovered last month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/nova-scotia-power-confirms-hackers-stole-customer-data-in-cyberattack/
-
CISA Alerts on Five Active Zero-Day Windows Vulnerabilities Being Exploited
Tags: cisa, cyber, cybersecurity, exploit, infrastructure, kev, microsoft, mitigation, network, risk, vulnerability, windows, zero-dayCybersecurity professionals and network defenders, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five newly identified Windows 0-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities, currently exploited in the wild, present significant risks for organizations relying on Microsoft Windows environments. The CISA urges all stakeholders to prioritize immediate mitigation efforts…
-
Hackers Exploit Google Services to Send Malicious Law Enforcement Requests
Tags: cyber, cybersecurity, exploit, google, hacker, infrastructure, law, malicious, phishing, serviceCybersecurity researchers have uncovered a sophisticated phishing campaign where malicious actors exploit Google services to dispatch fraudulent law enforcement requests. This audacious scheme leverages the trust associated with Google’s infrastructure, specifically Google Forms and Google Drive, to craft and distribute highly convincing requests that appear to originate from legitimate law enforcement entities. The primary objective…
-
CISA Alerts on Active Exploitation of Zero-Day Vulnerability in Multiple Fortinet Products
Tags: cisa, communications, cve, cyber, cybersecurity, detection, email, exploit, fortinet, infrastructure, network, vulnerability, zero-dayThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding five zero-day vulnerabilities affecting multiple Fortinet products, after evidence emerged of active exploitation in the wild. The vulnerabilities, tracked as CVE-2025-32756, impact Fortinet’s FortiVoice, FortiMail, FortiNDR, FortiRecorder, and FortiCamera platforms, widely used in enterprise environments for unified communications, email, network detection,…