Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for Preparing for 2025: ...

 Cyber News

The evolving cyber threat landscape of 2024 has highlighted the urgent need for a proactive and uncompromising security approach. As we transition into 2025, it is evident that nation-state actors and cybercriminals are leveraging automation and advanced infrastructure to refine their attack strategies. An example of   show more ...  

this escalation is the surge in password attacks, which skyrocketed from 579 incidents per second in 2021 to 7,000 per second in 2024. Additionally, adversaries are increasingly exploiting emerging technologies such as artificial intelligence to craft deepfakes and highly targeted phishing campaigns aimed at deceiving individuals into granting unauthorized access. In response to these evolving challenges, organizations must adopt proactive security measures to fortify digital identities and mitigate risks. To address these concerns, Microsoft has launched the Secure Future Initiative (SFI), a long-term commitment to enhancing security standards across the development, testing, and deployment of Microsoft technologies. A key aspect of this initiative involved a thorough review of Microsoft's digital environment, leading to the removal of 730,000 outdated applications and the elimination of 1.7 million obsolete Microsoft Azure Active Directory and Microsoft Entra ID systems from production and test environments. Through engagement with enterprise customers, Microsoft has identified three critical priorities for improving identity and access security in 2025: 1. Prioritize Secure Foundations and Prepare for Evolving Cyber Threats Security vulnerabilities often stem from expanding user bases, outdated security practices, and inconsistently enforced identity protections. While businesses increasingly deploy security measures like multifactor authentication (MFA), adversaries continue to bypass traditional defenses using attacks such as token theft and adversary-in-the-middle phishing. A proactive security strategy begins with a comprehensive assessment of the attack surface, ensuring that vulnerabilities are addressed before exploitation occurs. Organizations should transition from incremental security enhancements to a "Secure by Default" approach, where maximum security settings are enabled from the start and adjusted only when necessary. To promote Secure by Default practices, Microsoft has implemented mandatory MFA for Microsoft Azure, Entra admin center, and Intune admin center users. Additionally, pre-configured Conditional Access policies have been introduced for new tenants, significantly reducing compromised accounts. Key Measures for Strengthening Identity Security: Adopt Phishing-Resistant MFA: Implement passkeys and biometric-based digital employee IDs to enhance authentication security. Deploy Risk-Based Conditional Access Policies: Strengthen access controls by enabling automated risk-based authentication and enforcing just-in-time access for critical resources. Identify and Control Shadow IT: Detect and manage unauthorized applications and tenants to eliminate unmonitored security risks. Secure Non-Human Identities: Replace static credentials with managed identities and enforce strict access policies for workload identities. 2. Extend Zero Trust Security to All Resources Maintaining a secure environment while supporting hybrid work models requires the application of Zero Trust principles across all assets, including on-premises applications, legacy systems, and cloud environments. Organizations must enhance visibility into user activities, enforce stringent access governance, and leverage automation to minimize security gaps. Key Strategies for Expanding Zero Trust: Unify Access Policies: Integrate identity and network security tools to eliminate policy discrepancies and enforce consistent access controls. Modernize Network Security: Transition from traditional VPN solutions to Secure Access Service Edge (SASE) to extend strong authentication and access policies to legacy applications and external resources. Enforce Least Privilege Access: Automate role-based access management to ensure employees have only the necessary permissions, revoking access when no longer required. Implement just-in-time access for high-risk workloads to minimize exposure. 3. Leverage Generative AI for Advanced Threat Mitigation AI-driven security solutions are transforming how organizations detect and respond to threats. Generative AI enhances security operations by identifying vulnerabilities, detecting anomalies, and automating threat responses. Studies indicate that organizations using Microsoft Security Copilot have reduced security incident resolution times by 30.13%. Additionally, IT administrators utilizing AI for identity management have reported a 45.41% reduction in time spent troubleshooting sign-in issues, with accuracy improvements of 46.88%. Key AI-Driven Enhancements: Accelerate Risk Investigations: Use AI to analyze identity compromises, suggest remediation steps, and predict potential threats. Automate Sign-In Troubleshooting: Leverage natural language AI models to diagnose authentication issues and uncover their root causes. Enhance Application Security: Apply AI to evaluate risks associated with application permissions, workload identities, and overall security posture. At Microsoft Ignite 2024, the company introduced Security Copilot within the Microsoft Entra admin center, integrating AI-driven security capabilities to support identity professionals and security analysts. These tools enhance collaboration, accelerate threat detection, and empower organizations to respond swiftly to evolving cyber risks. Final Thoughts Identity security, Zero Trust access controls, and AI-powered threat mitigation are crucial pillars of a resilient cybersecurity strategy. By prioritizing strong authentication, enforcing least privilege access, and leveraging AI for proactive defense, businesses can establish a strong security foundation for the future.

image for Australia Invests $6 ...

 Cyber News

The Australian government has announced a $6.4 million grant to the Critical Infrastructure – Information Sharing and Analysis Centre (CI-ISAC) Australia to establish a new cyber threat information-sharing network for the healthcare sector. This initiative comes in response to the increasing number of cyberattacks   show more ...  

on healthcare organizations in Australia, including hospitals, health funds, and clinics. Cybersecurity has become a major concern for Australia's healthcare industry. Recent data breaches have exposed sensitive medical and financial information, putting millions of Australians at risk. The healthcare sector has reported the most expensive data breaches globally for 13 consecutive years, with an average breach cost of AUD $10.93 million in 2023—almost double that of the financial industry. With over 750 government hospitals, 650 private hospitals, and approximately 6,500 general practitioner clinics in Australia, the sector is vast and highly interconnected. It also relies on numerous third-party vendors and suppliers, further increasing its vulnerability to cyber threats. Introducing the Health Cyber Sharing Network (HCSN) CI-ISAC's newly created Health Cyber Sharing Network (HCSN) will facilitate collaboration within the healthcare sector by enabling faster and more secure sharing of cyber threat intelligence. The goal is to break down information silos and create a more resilient healthcare cybersecurity environment. David Sandell, CEO of CI-ISAC Australia, emphasized the importance of the initiative, stating, “The health and medical sector holds a large amount of incredibly private and personal medical and financial information. We have already seen several high-profile data breaches in the health sector, and the new network can help members reduce their cyber risks. Cyberattacks can also greatly disrupt important health services, and this industry cannot afford interruptions with patients' wellbeing at stake.” The National Cyber Security Coordinator, Lieutenant General Michelle McGuinness CSC, also supported the initiative, calling it a crucial step toward strengthening Australia’s cybersecurity posture. “We have seen in recent years the very real impact that healthcare-related cyberattacks can have on millions of Australians. Increasing threat information sharing contributes to the prevention of cyberattacks and builds resilience,” she said. How HCSN Will Strengthen Healthcare Cybersecurity in Australia By joining the HCSN, healthcare organizations will gain access to threat intelligence shared by CI-ISAC’s existing members, which span across 11 critical infrastructure sectors, including energy, telecommunications, and finance. This cross-sector intelligence exchange will help the healthcare industry identify and mitigate threats more effectively. To encourage participation, CI-ISAC is offering complimentary 12-month memberships to eligible health and medical organizations and their suppliers. Through this membership, participants will receive: Cyber threat intelligence reports from CI-ISAC’s National Intelligence Office (NIO) Cross-industry cyber threat insights Education and training programs on mitigating threats, insider threat detection, and incident response planning Access to a trusted, industry-led information-sharing network CI-ISAC’s existing 100+ members include major organizations such as Google Cloud AU, NBN, NextDC, and Transgrid, among others. The involvement of these entities ensures that shared threat intelligence is backed by high cyber maturity levels. Mixed Reactions from the Industry While the initiative has been widely appreciated, some experts have expressed skepticism. Josh Atlee, an ICT Security Systems Administrator, raised concerns on LinkedIn post, saying, “I hope they don't host it on what they refer to as 'bulletproof' hosting because there is no such thing in reality. $84 million on a firewall filter that failed miserably, so I have very low hope. Does Australian medical practices have to be compliant with HIPAA?” His concerns highlight the importance of ensuring that the initiative is backed by strong cybersecurity measures and compliance with international standards like HIPAA. The Road Ahead With cyberattacks on the rise, the launch of the Health Cyber Sharing Network marks a significant step toward building a more secure and resilient healthcare infrastructure. As participation in the network grows, the effectiveness of this initiative will depend on strong collaboration among healthcare providers, government agencies, and cybersecurity experts. The success of the HCSN could set a precedent for similar initiatives across other sectors, reinforcing Australia’s ambition to become a global leader in cybersecurity by 2030.

image for Apple Fixes Critical ...

 Vulnerabilities

Apple has rolled out a series of software updates to patch several critical vulnerabilities, including a zero-day flaw that had been actively exploited in the wild. The Apple security updates fix various security issues, notably a use-after-free bug affecting the Core Media component of Apple’s operating systems,   show more ...  

which could allow malicious applications to elevate privileges.  Tracked as CVE-2025-24085, this zero-day vulnerability had the potential to be exploited by attackers to gain unauthorized access to a device’s system-level privileges. Apple acknowledged that the flaw had been actively exploited on versions of iOS prior to iOS 17.2, underlining the urgency of the security update. As part of its security efforts, Apple has addressed the flaw by improving memory management and making other vital fixes.   A Comprehensive Apple Security Update  Apple’s security update covers various components, including iOS, iPadOS, macOS, watchOS, and tvOS, with critical patches released for multiple devices. Here is a breakdown of the update timeline and the affected platforms:  visionOS 2.3 (for Apple Vision Pro) - Released on January 27, 2025  iOS 18.3 and iPadOS 18.3 (for compatible iPhones and iPads) - Released on January 27, 2025  macOS Sequoia 15.3 (for Apple computers) - Released on January 27, 2025  macOS Sonoma 14.7.3 (for Apple computers) - Released on January 27, 2025  macOS Ventura 13.7.3 (for older Apple computers) - Released on January 27, 2025  watchOS 11.3 (for Apple Watches) - Released on January 27, 2025  tvOS 18.3 (for Apple TV) - Released on January 27, 2025  Safari 18.3 (for web browsers on macOS) - Released on January 27, 2025  This broad rollout addresses vulnerabilities in various system components, ensuring that a wide range of Apple devices remains secure.  Zero-Day Vulnerability and Memory Management Fixes  One of the most concerning vulnerabilities fixed in this Apple security update is CVE-2025-24085, a use-after-free bug in Core Media. The vulnerability was discovered in earlier versions of iOS and could have been exploited by attackers to elevate privileges on the device. In simpler terms, this flaw allowed a malicious app to bypass security restrictions and execute unauthorized actions with root-level privileges.  Apple’s proactive measures included improved memory management within the affected systems, specifically targeting iPhones, iPads, and Macs running earlier iOS and macOS versions. The company’s security patch effectively neutralized the threat, eliminating the risk of unauthorized access that could compromise user data.  Key Vulnerabilities Fixed  Beyond the zero-day vulnerabilities, this security update addresses several other flaws across Apple’s ecosystem. Here are some of the key areas impacted by the latest fixes:  AirPlay Vulnerabilities  AirPlay, Apple’s wireless streaming protocol, was found to have multiple vulnerabilities, which could have led to issues such as memory corruption, system crashes, and denial-of-service (DoS) attacks. These vulnerabilities, including CVE-2025-24126, CVE-2025-24129, and CVE-2025-24137, were particularly concerning as they could have allowed attackers to disrupt streaming sessions or cause unexpected crashes. Apple has fixed these vulnerabilities by improving input validation and memory management protocols within the AirPlay system.  ARKit and CoreMedia Vulnerabilities  ARKit, which powers augmented reality (AR) experiences, also had vulnerabilities related to file parsing, as seen in CVE-2025-24127. Apple resolved this issue by enhancing validation and error handling during ARKit’s interaction with files, preventing unexpected app terminations.  Similarly, CoreMedia faced a serious flaw in the form of CVE-2025-24085, a zero-day vulnerability that enabled privilege escalation. This was a critical issue that could have been used by malicious actors to elevate their privileges within the system, essentially bypassing normal security restrictions. Apple’s fix ensures better memory handling, preventing unauthorized access to system-level privileges.  ImageIO and WebKit Fixes  Apple also addressed security issues in ImageIO, which processes image files, and WebKit, the rendering engine for web content. In ImageIO, a denial-of-service vulnerability, identified as CVE-2025-24086, was fixed. This vulnerability could have led to app crashes when processing maliciously crafted image files.  WebKit, meanwhile, received a series of fixes for vulnerabilities such as CVE-2025-24143 and CVE-2025-24150. These issues had the potential to allow malicious actors to track users through fingerprinting or inject commands into the system. Apple’s fix ensures a more secure browsing experience, with better memory management and file handling within WebKit.  Kernel and System-Level Fixes  The kernel, a core part of any operating system, was also a target for several vulnerabilities. CVE-2025-24159, a vulnerability in the kernel, was patched to prevent unauthorized execution of arbitrary code with kernel privileges. This critical issue could have led to severe system-level exploits. Apple’s fix fortifies kernel security, ensuring that only authorized applications can execute high-level system functions.  Similarly, vulnerabilities in LaunchServices and AppleMobileFileIntegrity were addressed to prevent unauthorized apps from accessing sensitive user data or bypassing privacy restrictions.  Other Notable Fixes in Apple’s Latest Security Update  Several other components of Apple’s ecosystem also received patches as part of this security update. Notably, vulnerabilities in Safari 18.3 were fixed, particularly a vulnerability that could have allowed attackers to spoof the address bar, misleading users into believing they were on a trusted website when they were not. This fix improves web browser security and ensures that users can trust the URLs displayed in their browser.  Additionally, watchOS 11.3 and tvOS 18.3 received patches for AirPlay and CoreMedia vulnerabilities, preventing potential attacks on Apple Watches and Apple TVs.  Conclusion  By addressing critical vulnerabilities, including CVE-2025-24085, and fixing issues in key components like AirPlay, ARKit, and WebKit, Apple strengthens the security of its ecosystem. Users are urged to install these updates promptly to protect their devices from potential exploits.  With ongoing collaboration with security researchers, Apple continues to protect its users from cyber threats. This update is a crucial step in maintaining the integrity of Apple’s operating systems and reinforces the company’s dedication to security. 

image for What scareware is an ...

 Threats

Imagine: youre calmly working away on your computer, when suddenly a scary message appears on the screen: Your computer is infected with viruses! Install an antivirus immediately! or Your data is at risk! Clean your system immediately! Panic? Thats what the scammers are hoping for. This post explains what scareware is   show more ...  

and why this threat is dangerous. We also give tips for avoiding falling for scarewarers tricks, and protecting you and your family from such attacks. What is scareware? Scareware is a type of digital fraud that weaponizes users fears. The aim is to frighten the victim into visiting a malicious site and downloading something they shouldnt. Scareware usually mimics antiviruses, system optimizers, registry cleaners, and the like. But other, more exotic types also exist. The user is not so subtly informed that no fewer than five viruses have been found on their computer. However, the window header contains a small misprint: Threaths detected Source To display their alarming messages, scammers tend to deploy browser pop-up windows and notifications, banner ads, and on occasion even good-old email. Scareware creators use a variety of social engineering tricks to instill a sense of danger in the user. Often, threatening messages appear at the most unexpected moment — catching the victim off guard. And scammers frequently hurry the victim into taking rash actions — not giving them time to think things over. Then, when the target has been properly prepared (that is, put into a state of panic), the attackers offer a simple solution to the problem: just install such-and-such software and all your troubles will be gone. Fake antiviruses pretend to search for malware in the users system. Source Upon receiving a scareware notification, in the best case scenario the victim will install a useless but harmless program on their device and pay a relatively small sum for the pleasure. But sometimes an attack can have more serious consequences. Under the guise of an antivirus or system optimizer, the victim may be fed proper malware that encrypts data or steals money from online bank accounts. Sextortion scareware Sometimes scammers employ a hybrid scheme: scareware combined with sextortion. It may go as follows: the user receives an intimidating email saying theyve been caught in a compromising video. To see for themselves, the victim is invited to visit a website where they can watch the footage. However, to view the video, they first need to install a special player. This, of course, is malware in disguise. Faulty screen caused by a virus In a new variant of the scareware scheme, the user is told that a virus has infected their smartphone. Nothing unusual so far — mobile versions of scareware have been around for ages. Here, however, the focus is artfully placed on what perhaps all smartphone owners fear the most: a faulty screen: The scareware simulates screen damage caused by a virus that must be removed.Source Curiously, the faulty display — which also blinks for added alarm — is capable of clearly showing the message about the supposed virus infection. How this window is able to float above a damaged screen is a mystery To fix the screen, you just need to tap the button in the box and purchase the offered antivirus. How to protect against scareware Of course, the best defense against fake protection is the real thing. To defeat scareware, install a bona fide antivirus from a reputable developer, keep a close eye on its notifications, and always heed its recommendations. Also bear in mind that its seniors who are most likely to fall victim. So its worth helping your older relatives get the right protection since it can be a challenge for them.

 Feed

The advanced persistent threat (APT) group known as UAC-0063 has been observed leveraging legitimate documents obtained by infiltrating one victim to attack another target with the goal of delivering a known malware dubbed HATVIBE. "This research focuses on completing the picture of UAC-0063's operations, particularly documenting their expansion beyond their initial focus on Central Asia,

 Feed

Broadcom has alerted of a high-severity security flaw in VMware Avi Load Balancer that could be weaponized by malicious actors to gain entrenched database access. The vulnerability, tracked as CVE-2025-22217 (CVSS score: 8.6), has been described as an unauthenticated blind SQL injection. "A malicious user with network access may be able to use specially crafted SQL queries to gain database

 Feed

Cybersecurity researchers are warning that a critical zero-day vulnerability impacting Zyxel CPE Series devices is seeing active exploitation attempts in the wild. "Attackers can leverage this vulnerability to execute arbitrary commands on affected devices, leading to complete system compromise, data exfiltration, or network infiltration," GreyNoise researcher Glenn Thorpe said in an alert

 Feed

Ransomware attacks have reached an unprecedented scale in the healthcare sector, exposing vulnerabilities that put millions at risk. Recently, UnitedHealth revealed that 190 million Americans had their personal and healthcare data stolen during the Change Healthcare ransomware attack, a figure that nearly doubles the previously disclosed total.  This breach shows just how deeply ransomware

 Feed

A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attacker to achieve remote code execution on susceptible instances. The flaw, tracked as CVE-2025-22604, carries a CVSS score of 9.1 out of a maximum of 10.0. "Due to a flaw in the multi-line SNMP result parser, authenticated users can inject

 Feed

Curious about the buzz around AI in cybersecurity? Wonder if it's just a shiny new toy in the tech world or a serious game changer? Let's unpack this together in a not-to-be-missed webinar that goes beyond the hype to explore the real impact of AI on cybersecurity. Join Ravid Circus, a seasoned pro in cybersecurity and AI, as we peel back the layers of AI in cybersecurity through a revealing

 Feed

A team of security researchers from Georgia Institute of Technology and Ruhr University Bochum has demonstrated two new side-channel attacks targeting Apple silicon that could be exploited to leak sensitive information from web browsers like Safari and Google Chrome. The attacks have been codenamed Data Speculation Attacks via Load Address Prediction on Apple Silicon (SLAP) and Breaking the

 Feed

The North Korean threat actor known as the Lazarus Group has been observed leveraging a "web-based administrative platform" to oversee its command-and-control (C2) infrastructure, giving the adversary the ability to centrally supervise all aspects of their campaigns. "Each C2 server hosted a web-based administrative platform, built with a React application and a Node.js API," SecurityScorecard's

 Guest blog

London's world-famous British Museum was forced to partially close its doors at the end of last week, following a serious security breach involving a former IT contractor. Police were called to the museum on Friday after a recently dismissed worker allegedly trespassed onto the museum site and was able to shut   show more ...  

down various systems, including the museum's ticketing platform. Read more in my article on the Hot for Security blog.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: William Mullins via Alamy Stock Photo NEWS BRIEF The Lynx ransomware-as-a-service (RaaS) group has made a name for itself, standing out as a “highly organized platform” complete with a structured affiliate   show more ...  

program and robust encryption methods. Researchers at Group IB investigated Lynx’s operations and […] La entrada Lynx Ransomware Group ‘Industrializes’ Cybercrime With Affiliates – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Source: Ribkhan via Shutterstock A vulnerability that exposed millions of airline customers to potential account takeovers has highlighted the significant risks organizations face from misconfigured OAuth authentication processes. The   show more ...  

vulnerability in this case involved a major provider of online travel services for hotels and car rentals. Many […] La entrada OAuth Flaw Exposed Millions of Airline Users to Account Takeovers – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: Web Pix via Alamy Stock Photo NEWS BRIEF Researchers are highlighting the rise of a new phishing tactic: a campaign that uses PDF documents to trick victims by announcing expired Amazon Prime memberships. Users are   show more ...  

targeted by email and, after clicking on the PDFs, […] La entrada Phishing Campaign Baits Hook With Malicious Amazon PDFs – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Source: Steve Cukrov via Shutterstock Sporting events like the upcoming Super Bowl LIX in New Orleans are prime targets for cyberattacks due to their massive audiences, extensive digital infrastructure, and the potential for high financial   show more ...  

and reputational impact. Experts say organizers should be prepared for an onslaught […] La entrada Super Bowl LIX Could Be a Magnet for Cyberattacks – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Robert Lemos, Contributing Writer Source: bestfoto77 via Shutterstock While disclosure of software vulnerabilities and data breaches has become more accepted over the past three decades, researchers and whistleblowers continue to risk lawsuits and criminal charges depending   show more ...  

on the country in which they live. In April 2022, for example, police in Istanbul […] La entrada Reporting a Breach or Vuln? Be Sure Your Lawyer’s on Call – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cryptographic

Source: www.darkreading.com – Author: Keavy Murphy Source: Sergey Tarasov via Alamy Stock Photo COMMENTARY One of cybersecurity’s major pitfalls is assuming that risks will always stay the same. Failing to consider emerging threats has caused detriment in the security field. When varied threats already   show more ...  

exist that are time-tested and successful, like ransomware, phishing, or business email compromise, […] La entrada Cryptographic Agility’s Legislative Possibilities & Business Benefits – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Actively

Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Source: Lutsenko via Oleksandr via Shutterstock Fortinet has patched an actively exploited zero-day authentication bypass flaw affecting its FortiOS and FortiProxy products, which attackers have been exploiting to gain   show more ...  

super-administrative access to devices to conduct nefarious activities, including breaching corporate networks. Fortinet characterized the flaw, rated as […] La entrada Actively Exploited Fortinet Zero-Day Gives Attackers Super-Admin Privileges – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Comparisons

Source: heimdalsecurity.com – Author: Livia Gyongyoși Endpoint protection software works like a security system for a digital hotel. They equip each ‘room’ – in our case work device – with a lock, alarms, video surveillance, etc. This way they make sure each visitor or hotel employee uses the private   show more ...  

or common spaces safely and legit. […] La entrada Best 8 Endpoint Protection Software in 2025 – Source: heimdalsecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: Marina Briones. At HackerOne, we tackle hacking challenges with a mix of creativity and determination. This mindset goes back to our roots, which started when our two co-founders, Jobert Abma and Michiel Prins, devised a pretty unconventional plan involving cake and a lot of   show more ...  

talent. When Jobert and Michiel started their penetration […] La entrada The HackerOne Cake Story – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: Ilona Cohen. The transition to a new presidential administration and a change in control of the Senate raise questions about how cybersecurity and artificial intelligence (AI) policy and regulation will change and whether such change will be dramatic or more measured.  Much   show more ...  

attention has been paid to the incoming administration’s stated […] La entrada What Will a New Administration and Congress Mean for Cybersecurity and AI Regulation? – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: cyble.com – Author: daksh sharma. Products For Enterprises(B2B) and Governments AI-Driven Threat Intelligence Products Cyble VisionFor Enterprises Award-winning cyber threat intelligence platform, designed to provide enhanced security through real-time intelligence and threat detection. Cyble HawkFor   show more ...  

Federal Bodies Protects sensitive information and assets from cyber threats with its specialized threat detection and intelligence capabilities built […] La entrada phpMyAdmin 5.2.2 Addresses Critical XSS and Library Vulnerabilities – Source:cyble.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: US energy contractor ENGlobal has revealed that sensitive personal data was stolen after it was hit by a cyber-attack in November 2024. In an updated filing to the Securities and Exchange Commission (SEC) dated January 27, 2025, the engineering firm said the   show more ...  

threat actor gained access to a portion of its […] La entrada ENGlobal Cyber-Attack Exposes Sensitive Data – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: The Lynx Ransomware-as-a-Service (RaaS) group has been found operating a highly organized platform, complete with a structured affiliate program and robust encryption methods. Researchers at Group-IB gained access to the group’s affiliate panel, revealing the   show more ...  

inner workings of this sophisticated cyber-threat. Structured Affiliate Program Lynx’s affiliate panel is organized into multiple […] La entrada Lynx Ransomware Group Unveiled with Sophisticated Affiliate Program – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Read the story of Kelly Hon and her decision to establish a SWE endowment. Source Views: 0 La entrada Solidifying Your Legacy With SWE se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1Password

Source: www.techrepublic.com – Author: Luis Millares 1Password is a solid password manager with top encryption and a sleek user interface. In this article, we’ll walk you through how to set up 1Password, how to use it, and how you can maximize its features for your organization. Dashlane Employees per Company   show more ...  

Size Micro (0-49), Small (50-249), […] La entrada How to Use 1Password: A Guide for Beginners – Source: www.techrepublic.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: news.sophos.com – Author: Matt Wixey In November 2023, Sophos X-Ops published research exploring threat actors’ attitudes towards generative AI, focusing on discussions on selected cybercrime forums. While we did note a limited amount of innovation and aspiration in these discussions, there was also a   show more ...  

lot of skepticism. Given the pace at which generative AI […] La entrada Update: Cybercriminals still not fully on board the AI train (yet) – Source: news.sophos.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: news.sophos.com – Author: Sally Adam AI is firmly embedded in cybersecurity. Attend any cybersecurity conference, event, or trade show and AI is invariably the single biggest capability focus. Cybersecurity providers from across the spectrum make a point of highlighting that their products and services   show more ...  

include AI. Ultimately, the cybersecurity industry is sending a clear […] La entrada Beyond the hype: The business reality of AI for cybersecurity – Source: news.sophos.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Expert Insights on Synthetic Data from the Tonic.ai Blog “Is it safe?” Laurence Olivier’s Nazi Dentist from Hell quietly asked this innocent question in the 1976 film Marathon Man. Unprepared civilian Dustin Hoffman could only respond with smart aleck answers to a   show more ...  

question he didn’t understand. The day went downhill rapidly […] La entrada Reverse engineering your test data: It’s not as safe as you think it is – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Expert Insights on Synthetic Data from the Tonic.ai Blog Oh, data synthesis, how we do love thee! (Let us count the ways.) From subsetting to anonymization to continuous generation, there’s so much to appreciate. And for developers of any stripe, it’s a must-have   show more ...  

solution that makes your life so much easier, […] La entrada What is the role of data synthesis in my CI/CD pipeline, anyway? – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: securityboulevard.com – Author: hmeyers David Jemmett, CEO & Founder of CISO Global January 28, 2025 Unlike Western AI systems governed by privacy laws and ethical considerations, DeepSeek operates under a regime notorious for state-sponsored hacking, surveillance, and cyber espionage. With   show more ...  

AI-driven automation at its disposal, China can rapidly scale its cyberattacks, embedding malware, manipulating […] La entrada DeepSeek: The Silent AI Takeover That Could Cripple Markets and Fuel China’s Cyberwarfare – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.schneier.com – Author: Bruce Schneier Jen Easterly is out as the Director of CISA. Read her final interview: There’s a lot of unfinished business. We have made an impact through our ransomware vulnerability warning pilot and our pre-ransomware notification initiative, and I’m really proud of   show more ...  

that, because we work on preventing somebody from having […] La entrada CISA Under Trump – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: security.googleblog.com – Author: Kimberly Samra. Security Blog The latest news and insights from Google on security and safety on the Internet Original Post url: http://security.googleblog.com/2025/01/how-we-estimate-risk-from-prompt.html Category & Tags: – Views: 0 La entrada How we   show more ...  

estimate the risk from prompt injection attacks on AI systems – Source:security.googleblog.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 APT

Source: securelist.com – Author: Evgeny Goncharov Kaspersky Security Bulletin Key global cyberthreat landscape development drivers Hunt for innovations Innovations are changing our lives. Today, the world is on the threshold of another technical revolution. Access to new technologies is a ticket to the future,   show more ...  

a guarantee of economic prosperity and political sovereignty. Therefore, many countries […] La entrada Threat predictions for industrial enterprises 2025 – Source: securelist.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Civil service

Source: www.theguardian.com – Author: Robert Booth UK technology editor The threat of potentially devastating cyber-attacks against UK government departments is “severe and advancing quickly”, with dozens of critical IT systems vulnerable to an expected regular pattern of significant strikes, ministers have   show more ...  

been warned. The National Audit Office (NAO) found that 58 critical government IT systems […] La entrada Threat of cyber-attacks on Whitehall ‘is severe and advancing quickly’, NAO says – Source: www.theguardian.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Artificial Intelligence

Source: www.csoonline.com – Author: A recent study shows that, given the increasing importance of cybersecurity, CISOs are gaining more and more influence on the board. In recent years, CISOs have often felt that their board of directors did not take them seriously. This key issue for cybersecurity, however,   show more ...  

is turning around, with 82% of CISOs now […] La entrada CISOs are moving closer to the board — but budget hurdles remain – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Business IT Alignment

Source: www.csoonline.com – Author: These 10 steps can help CISOs and other cyber pros deal with the inevitable change they will face in an industry constantly challenged by new technology, widening business responsibilities, and an ever-evolving threat landscape. If there’s one thing that’s inevitable in   show more ...  

cybersecurity, it’s change. Ever-evolving technology requires new protections, threats seem […] La entrada Want to be an effective cybersecurity leader? Learn to excel at change management – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.networkworld.com – Author: Admins are urged to scan for possible compromise. Network administrators using routers from Juniper Networks are being urged to scan for possible compromise after the discovery that an unknown threat actor has been installing a backdoor in customer routers since at least   show more ...  

2023. The bad news: According to researchers at Lumen […] La entrada Unknown threat actor targeting Juniper routers with backdoor: Report – Source: www.networkworld.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: News 28 Jan 20254 mins Energy IndustryHealthcare IndustryManufacturing Industry CISA released 11 advisories for serious vulnerabilities in industrial control systems products from Schneider Electric, Rockwell Automation, B&R Industrial, and BD. The US Cybersecurity and   show more ...  

Infrastructure Security Alliance has issued advisories for 11 critical and high-risk vulnerabilities in industrial control systems (ICS) […] La entrada CISA warns of critical, high-risk flaws in ICS products from four vendors – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: No more delegating—when it comes to oversight of cyber risk, boards are tackling it head (and hands) on. Here’s how. As chairman of the board for Cinturion Group, Richard Marshall is intimately involved in ensuring the security of the fiber optic network his company is   show more ...  

constructing from India through the Middle […] La entrada 5 ways boards can improve their cybersecurity governance – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 2322

Source: www.csoonline.com – Author: Obwohl hinter der Funksec-Bande Amateure stecken, haben die Angriffe rasant zugenommen. Ein Beispiel dafür, wie LLMs Ransomware-Gruppen stärken. Die neue Ransomware-Gruppe Funksec scheint bei der Entwicklung ihrer Malware durch die Nutzung von generativer KI zu profitieren.   show more ...  

KDdesign_photo_video – Shutterstock.com Bedrohungsanalysen der Sicherheitsfirma NCC Group von Dezember 2024 zeigen, dass ein Neuling […] La entrada Neue Ransomware-Gruppe Funksec profitiert von LLMs – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: McAfee Labs. Authored by Anuradha, Sakshi Jaiswal  In 2024, scams in India have continued to evolve, leveraging sophisticated methods and technology to exploit unsuspecting individuals. These fraudulent activities target people across demographics, causing financial losses and   show more ...  

emotional distress. This blog highlights some of the most prevalent scams this year, how they […] La entrada Rising Scams in India: Building Awareness and Prevention – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: cyble.com – Author: daksh sharma. Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued two urgent advisories regarding serious ICS vulnerabilities in industrial control systems (ICS) products. These ICS vulnerabilities, identified in Schneider Electric’s RemoteConnect and   show more ...  

SCADAPack x70 Utilities, as well as B&R Automation’s Runtime software, pose online risks to critical infrastructure systems […] La entrada New ICS Vulnerabilities Discovered in Schneider Electric and B&R Automation Systems – Source:cyble.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: cyble.com – Author: daksh sharma. The Australian Government has awarded a $6.4 million grant to CI-ISAC Australia, enabling the establishment of a new Health Cyber Sharing Network (HCSN). This initiative is designed to facilitate the rapid exchange of critical cyber threat information within   show more ...  

Australia’s healthcare industry, which has become a target for cyberattacks. The […] La entrada Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network – Source:cyble.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple Multiple Products Use-After-Free   show more ...  

Vulnerability, tracked as CVE-2025-24085, to its Known Exploited Vulnerabilities (KEV) catalog. This week, Apple released security updates to address 2025’s first […] La entrada U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Aquabot

Source: securityaffairs.com – Author: Pierluigi Paganini A new variant of the Mirai-based botnet Aquabot targets vulnerable Mitel SIP phones to recruit them into a DDoS botnet. Akamai researchers spotted a new variant of the Mirai-based botnet Aquabot that is targeting vulnerable Mitel SIP phones. Aquabot is a   show more ...  

Mirai-based botnet designed for DDoS attacks. Named after […] La entrada Aquabot variant v3 targets Mitel SIP phones – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini A critical flaw in Cacti open-source network monitoring and fault management framework that could allow remote code execution. Cacti is an open-source platform that provides a robust and extensible operational monitoring and fault management framework   show more ...  

for users. A critical vulnerability, tracked as CVE-2025-22604 (CVSS score of 9.1), in the Cacti […] La entrada Critical remote code execution bug found in Cacti framework – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Experts warn that threat actors are actively exploiting critical zero-day vulnerability, tracked as CVE-2024-40891, in Zyxel CPE Series devices. GreyNoise researchers are observing active exploitation attempts targeting a zero-day, tracked as   show more ...  

CVE-2024-40891, in Zyxel CPE Series devices. The vulnerability is a command injection issue that remains unpatched and has not yet […] La entrada Attackers actively exploit a critical zero-day in Zyxel CPE Series devices – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Threat actors exploit recently fixed SimpleHelp RMM software vulnerabilities to breach targeted networks, experts warn. Horizon3 researchers discovered three vulnerabilities, tracked as CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728, that could be   show more ...  

used to compromise a SimpleHelp server, as well as clients machines being managed by SimpleHelp. The first vulnerability, CVE-2024-57727 (CVSS […] La entrada Attackers exploit SimpleHelp RMM Software flaws for initial access – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Avi Load Balancer

Source: securityaffairs.com – Author: Pierluigi Paganini VMware fixed a high-risk blind SQL injection vulnerability in Avi Load Balancer, allowing attackers to exploit databases via crafted queries. VMware warns of a high-risk blind SQL injection vulnerability, tracked as CVE-2025-22217 (CVSS score of 8.6), in   show more ...  

Avi Load Balancer, allowing attackers with network access to exploit databases via […] La entrada VMware fixed a flaw in Avi Load Balancer – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-01
Aggregator history
Wednesday, January 29
WED
THU
FRI
SAT
SUN
MON
TUE
JanuaryFebruaryMarch