Tag: defense

Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks

Nov 18, 2025 4:49 PM

Tags: attack, backdoor, defense, espionage, google, hacker, iran, malware, mandiant, threat

Suspected espionage-driven threat actors from Iran have been observed deploying backdoors like TWOSTROKE and DEEPROOT as part of continued attacks aimed at aerospace, aviation, and defense industries in the Middle East.The activity has been attributed by Google-owned Mandiant to a threat cluster tracked as UNC1549 (aka Nimbus Manticore or Subtle Snail), which was first documented…
Fortinet’s silent patch sparks alarm as a critical FortiWeb flaw is exploited in the wild

Nov 18, 2025 1:47 PM

Tags: advisory, best-practice, cve, defense, exploit, flaw, fortinet, Internet, reverse-engineering, risk, update, vulnerability

Defense delayed due to silent patching: While Fortinet officially published an advisory for CVE-2025-64446 on November 14, 2025, the vendor’s earlier version release note made no mention of the vulnerability or the fix, leading to criticism that the patch was applied silently.”Silently patching vulnerabilities is an established bad practice that enables attackers and harms defenders,…
Azure blocks record 15 Tbps DDoS attack as IoT botnets gain new firepower

Nov 18, 2025 12:48 PM

Tags: attack, botnet, cctv, ciso, cloud, control, cyber, ddos, defense, infrastructure, iot, mitigation, network, resilience, risk, router, service, strategy

Mitigation strategies: Prabhu said CISOs should now test whether their control planes can withstand attacks above 15 Tbps, how to contain cloud cost spikes triggered by auto-scaling during an incident, and how to keep critical services running if defenses are overwhelmed. “CISOs can stress test these benchmarks through DDoS simulations and evaluation of CSP infrastructure…
Boost your cyber defense with unified cybersecurity and GRC strategies

Nov 18, 2025 11:49 AM

Tags: compliance, cyber, cybersecurity, defense, finance, governance, grc, risk, risk-management, strategy, threat

Cybersecurity is no longer just an IT issue; it is a strategic imperative that touches every aspect of modern business. In today’s digital landscape, organizations face increasingly sophisticated threats that can disrupt operations, tarnish reputations, and lead to significant financial losses. A unified approach that integrates cybersecurity with governance, risk management, and compliance (GRC) strategies…The…
UNC1549 Hackers With Custom Tools Attacking Aerospace and Defense Systems to Steal Logins

Nov 18, 2025 9:49 AM

Tags: attack, cyber, defense, espionage, group, hacker, iran, login, threat, tool

The Iran-nexus cyber espionage group UNC1549 has significantly expanded its arsenal of custom tools and sophisticated attack techniques in an ongoing campaign targeting aerospace, aviation, and defense industries since mid-2024, according to new findings from Mandiant. The threat actor, which overlaps with Tortoiseshell and has suspected links to Iran’s Islamic Revolutionary Guard Corps (IRGC), demonstrates…
Iran APT SpearSpecter Uses Weeks-Long WhatsApp Lures and Fileless TAMECAT Backdoor to Hit Defense

Nov 18, 2025 1:49 AM

Tags: apt, backdoor, defense, iran

The post Iran APT SpearSpecter Uses Weeks-Long WhatsApp Lures and Fileless TAMECAT Backdoor to Hit Defense appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/iran-apt-spearspecter-uses-weeks-long-whatsapp-lures-and-fileless-tamecat-backdoor-to-hit-defense/
Black Friday Bot Warning: The Products to Protect

Nov 18, 2025 12:50 AM

Tags: attack, defense, intelligence, strategy

New intelligence from KasadaIQ and StockX highlights where holiday demand and bot attacks are headed next. Get a quick look at the categories driving shopper frenzy and the defense strategies retailers should prioritize going into Black Friday. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/black-friday-bot-warning-the-products-to-protect/
Shared Intel QA: Viewing CMMC as a blueprint for readiness across the defense supply chain

Nov 17, 2025 8:49 PM

Tags: cybersecurity, defense, supply-chain

Small and mid-sized contractors play a vital role in the U.S. defense industrial base, but too often, they remain the weakest link in the cybersecurity chain. Related: Pentagon enforcing CMMC RADICL’s 2025 DIB Cybersecurity Maturity Report reveals that 85%… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/shared-intel-qa-viewing-cmmc-as-a-blueprint-for-readiness-across-the-defense-supply-chain/
Shared Intel QA: Viewing CMMC as a blueprint for readiness across the defense supply chain

Nov 17, 2025 8:49 PM

Tags: cybersecurity, defense, supply-chain

Small and mid-sized contractors play a vital role in the U.S. defense industrial base, but too often, they remain the weakest link in the cybersecurity chain. Related: Pentagon enforcing CMMC RADICL’s 2025 DIB Cybersecurity Maturity Report reveals that 85%… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/shared-intel-qa-viewing-cmmc-as-a-blueprint-for-readiness-across-the-defense-supply-chain/
5 key ways attack surface management will evolve in 2026

Nov 17, 2025 5:49 PM

Tags: access, ai, api, attack, authentication, business, ceo, cloud, control, cyber, cybercrime, cybersecurity, data, deep-fake, defense, email, firewall, identity, incident, infrastructure, intelligence, iot, malicious, network, phishing, risk, risk-assessment, risk-management, service, social-engineering, software, supply-chain, threat, tool, vulnerability, vulnerability-management, zero-trust

The rise of IoT, which has added significantly more devices to networksThe increasing use of APIs and interconnected microservicesThe shift to remote work, which requires incorporating devices and connections from the homeThe seemingly uncontrollable inflation of shadow ITThe move to decentralized infrastructure management and cloud services, which has made the entire IT ecosystem more complicated…
Iran-Linked SpearSpecter Campaign Leveraging Personalized Social Engineering Against High-Value Officials

Nov 17, 2025 2:49 PM

Tags: cyber, defense, espionage, government, group, intelligence, iran, social-engineering, threat

Iranian threat actors aligned with the Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO) are conducting a sophisticated espionage campaign tracked as SpearSpecter, systematically targeting high-value senior defense and government officials through personalized social engineering tactics. The threat group, operating under multiple aliases including APT42, Mint Sandstorm, Educated Manticore, and CharmingCypress, has demonstrated remarkable patience and…
Iran-Linked SpearSpecter Campaign Leveraging Personalized Social Engineering Against High-Value Officials

Nov 17, 2025 2:49 PM

Tags: cyber, defense, espionage, government, group, intelligence, iran, social-engineering, threat

Iranian threat actors aligned with the Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO) are conducting a sophisticated espionage campaign tracked as SpearSpecter, systematically targeting high-value senior defense and government officials through personalized social engineering tactics. The threat group, operating under multiple aliases including APT42, Mint Sandstorm, Educated Manticore, and CharmingCypress, has demonstrated remarkable patience and…
What impact does Agentic AI have on cloud-native security

Nov 16, 2025 12:49 AM

Tags: ai, cloud, cybersecurity, defense

How Can Organizations Safeguard Non-Human Identities in the Age of Agentic AI? How can robust management of Non-Human Identities (NHIs) and Secrets Security Management tighten your organization’s cybersecurity defenses? While the concept might sound futuristic, the impact is very real, especially in cloud-native environments. Let’s unravel how effective management of NHIs can mitigate potential security……
What impact does Agentic AI have on cloud-native security

Nov 16, 2025 12:49 AM

Tags: ai, cloud, cybersecurity, defense

How Can Organizations Safeguard Non-Human Identities in the Age of Agentic AI? How can robust management of Non-Human Identities (NHIs) and Secrets Security Management tighten your organization’s cybersecurity defenses? While the concept might sound futuristic, the impact is very real, especially in cloud-native environments. Let’s unravel how effective management of NHIs can mitigate potential security……
Northrop Grumman, Ford prep AI infrastructure with OpenShift

Nov 14, 2025 5:49 PM

Tags: ai, defense, identity, infrastructure

The defense contractor leaned on OpenShift AI and GitOps as it installed a 30,000-core GPU farm, while the automaker established workload identity federation across clouds. First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366634397/Northrop-Grumman-Ford-prep-AI-infrastructure-with-OpenShift
Northrop Grumman, Ford prep AI infrastructure with OpenShift

Nov 14, 2025 5:49 PM

Tags: ai, defense, identity, infrastructure

The defense contractor leaned on OpenShift AI and GitOps as it installed a 30,000-core GPU farm, while the automaker established workload identity federation across clouds. First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366634397/Northrop-Grumman-Ford-prep-AI-infrastructure-with-OpenShift
Cybersecurity Snapshot: Refresh Your Akira Defenses Now, CISA Says, as OWASP Revamps Its App Sec Top 10 Risks

Nov 14, 2025 4:49 PM

Tags: access, advisory, ai, antivirus, application-security, attack, authentication, backup, business, chatgpt, cisa, ciso, cloud, compliance, control, corporate, cve, cyber, cybersecurity, data, defense, detection, encryption, endpoint, exploit, finance, firewall, flaw, framework, germany, group, guide, healthcare, infrastructure, injection, Internet, iot, law, malware, mfa, mitigation, phishing, privacy, programming, ransomware, resilience, risk, service, soc, software, supply-chain, tactics, technology, threat, tool, update, vulnerability

Learn why you should revise your Akira ransomware protection plans. Plus, find out what’s new in OWASP’s revamped Top 10 Web Application Risks list. Also, find out about agentic AI’s cognitive degradation risk. And get the latest on AI security trends and CISO compensation. Key takeaways CISA and other agencies are urging organizations, especially in…
Iranian Hackers Launch ‘SpearSpecter’ Spy Operation on Defense & Government Targets

Nov 14, 2025 4:49 PM

Tags: defense, espionage, government, hacker, iran, spy, threat

The Iranian state-sponsored threat actor known as APT42 has been observed targeting individuals and organizations that are of interest to the Islamic Revolutionary Guard Corps (IRGC) as part of a new espionage-focused campaign.The activity, detected in early September 2025 and assessed to be ongoing, has been codenamed SpearSpecter by the Israel National Digital Agency (INDA).”The…
Cybersecurity Snapshot: Refresh Your Akira Defenses Now, CISA Says, as OWASP Revamps Its App Sec Top 10 Risks

Nov 14, 2025 4:49 PM

Tags: access, advisory, ai, antivirus, application-security, attack, authentication, backup, business, chatgpt, cisa, ciso, cloud, compliance, control, corporate, cve, cyber, cybersecurity, data, defense, detection, encryption, endpoint, exploit, finance, firewall, flaw, framework, germany, group, guide, healthcare, infrastructure, injection, Internet, iot, law, malware, mfa, mitigation, phishing, privacy, programming, ransomware, resilience, risk, service, soc, software, supply-chain, tactics, technology, threat, tool, update, vulnerability

Learn why you should revise your Akira ransomware protection plans. Plus, find out what’s new in OWASP’s revamped Top 10 Web Application Risks list. Also, find out about agentic AI’s cognitive degradation risk. And get the latest on AI security trends and CISO compensation. Key takeaways CISA and other agencies are urging organizations, especially in…
Why Cybersecurity Jobs Are Likely To Resist AI Layoff Pressures: Experts

Nov 14, 2025 3:49 PM

Tags: ai, automation, cyber, cybersecurity, defense, jobs

Even as AI-driven automation spreads to nearly all parts of the workforce, including cybersecurity teams, the field of cyber defense is one of the few likely to be spared from major layoffs going forward, according to security experts. First seen on crn.com Jump to article: www.crn.com/news/security/2025/why-cybersecurity-jobs-are-likely-to-resist-ai-layoff-pressures-experts
Fighting AI with AI: Adversarial bots vs. autonomous threat hunters

Nov 14, 2025 12:49 PM

Tags: access, ai, attack, automation, backup, breach, bug-bounty, cloud, credentials, cyber, cybersecurity, data, defense, endpoint, exploit, hacker, healthcare, identity, infrastructure, Internet, iot, least-privilege, malicious, network, phishing, startup, technology, threat, tool, update, vpn, vulnerability, zero-day

While there’s no doubt AI holds great potential for cybersecurity, in practice, it’s mainly being used to automate what we’re already doing. For companies to stand a chance, we need new approaches to AI-powered defense, not optimized ones. Attackers already have systemic advantages that AI amplifies dramatically. While there are some great examples of how…
Fighting AI with AI: Adversarial bots vs. autonomous threat hunters

Nov 14, 2025 12:49 PM

Tags: access, ai, attack, automation, backup, breach, bug-bounty, cloud, credentials, cyber, cybersecurity, data, defense, endpoint, exploit, hacker, healthcare, identity, infrastructure, Internet, iot, least-privilege, malicious, network, phishing, startup, technology, threat, tool, update, vpn, vulnerability, zero-day

While there’s no doubt AI holds great potential for cybersecurity, in practice, it’s mainly being used to automate what we’re already doing. For companies to stand a chance, we need new approaches to AI-powered defense, not optimized ones. Attackers already have systemic advantages that AI amplifies dramatically. While there are some great examples of how…
Press Release: CIO100 and CSO30 ASEAN Awards Gala 2025 Celebrate Regional Excellence in Technology Leadership

Nov 14, 2025 8:49 AM

Tags: ai, business, cio, computer, cyber, cybersecurity, defense, finance, framework, group, healthcare, insurance, intelligence, international, resilience, service, technology

The CIO100 and CSO30 ASEAN and Hong Kong Awards Gala on November 12, 2025, delivered a powerful validation of the region’s technology leadership maturity. CIO ASEAN and CSO ASEAN had the privilege of hosting an evening that brought together the most elite CIO100 and CSO30 award winners, and technology teams from Singapore, Malaysia, Indonesia, Vietnam,…
DDoS Cyberattack Disrupts Danish Government and Defense Websites

Nov 14, 2025 8:49 AM

Tags: attack, country, cyberattack, ddos, defense, government, intelligence, military, monitoring, service

A cyberattack on Danish institutions disrupted several government and defense-related websites on November 13, according to the country’s Civil Protection Agency. The incident, which involved widespread DDoS attacks, caused temporary outages across multiple online services and prompted authorities to intensify monitoring alongside Denmark’s military intelligence service. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cyberattack-on-danish-government-sites/
Press Release: CIO100 and CSO30 ASEAN Awards Gala 2025 Celebrate Regional Excellence in Technology Leadership

Nov 14, 2025 8:49 AM

Tags: ai, business, cio, computer, cyber, cybersecurity, defense, finance, framework, group, healthcare, insurance, intelligence, international, resilience, service, technology

The CIO100 and CSO30 ASEAN and Hong Kong Awards Gala on November 12, 2025, delivered a powerful validation of the region’s technology leadership maturity. CIO ASEAN and CSO ASEAN had the privilege of hosting an evening that brought together the most elite CIO100 and CSO30 award winners, and technology teams from Singapore, Malaysia, Indonesia, Vietnam,…
Protecting mobile privacy in real time with predictive adversarial defense

Nov 14, 2025 7:49 AM

Tags: data, defense, mobile, privacy

Mobile sensors are everywhere, quietly recording how users move, tilt, or hold their phones. The same data that powers step counters and activity trackers can also expose … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/11/14/research-real-time-mobile-privacy-protection/
Los Alamos researchers warn AI may upend national security

Nov 14, 2025 7:49 AM

Tags: ai, defense

For decades, the United States has built its defense posture around predictable timelines for technological progress. That assumption no longer holds, according to researchers … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/11/14/research-ai-national-security-threats/
CISA Warns: Akira Ransomware Has Extracted $42M After Targeting Hundreds

Nov 14, 2025 7:49 AM

Tags: advisory, attack, cisa, crime, cyber, cybersecurity, defense, ransom, ransomware

A newly updated cybersecurity advisory from federal agencies reveals that the Akira ransomware operation has significantly escalated its campaign, compromising organizations worldwide and accumulating massive ransom proceeds through sophisticated attack methods. According to the joint advisory released on November 13, 2025, by the FBI, CISA, Department of Defense Cyber Crime Center (DC3), Department of Health…
Agentic AI opens door to new ID challenges: Report

Nov 14, 2025 5:49 AM

Tags: access, ai, api, attack, awareness, best-practice, breach, cloud, control, credentials, cyber, cyberattack, data, defense, email, exploit, governance, group, iam, identity, incident, infrastructure, network, phishing, resilience, risk, social-engineering, software, strategy, technology, threat, tool, training, vulnerability, zero-trust

Identity Crisis: Understanding & Building Resilience Against Identity-Driven Threats, the result is a surge of both non-human identities (NHIs) and agentic identities.Key findings revealed:89% of organizations have “fully or partially incorporated AI agents into their identity infrastructure, and an additional 10% have plans to.”Of those polled, 58% estimate that, in the next 12 months, half…
Agentic AI opens door to new ID challenges: Report

Nov 14, 2025 5:49 AM

Tags: access, ai, api, attack, awareness, best-practice, breach, cloud, control, credentials, cyber, cyberattack, data, defense, email, exploit, governance, group, iam, identity, incident, infrastructure, network, phishing, resilience, risk, social-engineering, software, strategy, technology, threat, tool, training, vulnerability, zero-trust

Identity Crisis: Understanding & Building Resilience Against Identity-Driven Threats, the result is a surge of both non-human identities (NHIs) and agentic identities.Key findings revealed:89% of organizations have “fully or partially incorporated AI agents into their identity infrastructure, and an additional 10% have plans to.”Of those polled, 58% estimate that, in the next 12 months, half…