General cybersecurity news and analysis
Critical security vulnerabilities found in VMware Tools and CrushFTP; proof of concept (PoC) available for exploitation. Stay informed and secure.
New Android Trojan Crocodilus uses accessibility features to steal banking and crypto information, posing a serious threat to users’ financial security.
Discover effective strategies for enterprises to identify and mitigate the hidden risks of Shadow AI, ensuring data security and compliance.
Cyberattack on a revenue cycle management firm disrupts operations, affecting patient care and client services, raising concerns over data security.
Explore the dual tactics of ransomware attacks, where stealth meets showmanship, revealing the evolving landscape of cyber threats and defenses.
Explore the Digi Bank dilemma of balancing rapid digital transactions with robust security measures to protect customer data and trust.
Nir Zuk critiques Google’s multi-cloud security strategy, highlighting vulnerabilities and challenges that could impact data protection and compliance.
Explore the cybersecurity risks facing solar power infrastructure and learn how to protect against potential threats to ensure energy security.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Discover critical vulnerabilities in Kubernetes controllers exposing 4,000 IPs, highlighting security risks and the need for robust protection measures.
OpenAI is offering $100,000 rewards for discovering critical vulnerabilities, encouraging researchers to enhance AI safety and security.
Discover how vulnerable manufacturing cameras can expose companies to industrial espionage, threatening sensitive data and competitive advantage.
Explore how Phishing-as-a-Service utilizes DNS-over-HTTPS to enhance evasion tactics, making cyber threats more sophisticated and harder to detect.
Microsoft restores the classic Outlook client button in the latest fix, enhancing user experience and accessibility for all Outlook users.
Explore how vulnerabilities in solar power systems can lead to blackouts, highlighting risks and the need for enhanced security measures.
Explore how most healthcare organizations depend on vulnerable IoT devices, highlighting security risks and the need for robust protection measures.
Explore essential manual mitigations for addressing new security bypasses in Ubuntu Linux to enhance system protection and safeguard sensitive data.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Discover 46 critical vulnerabilities in solar inverters from Sungrow, Growatt, and SMA, highlighting security risks in renewable energy systems.
“Learn how a compromised Microsoft domain is spreading spam to SharePoint servers, posing security risks and impacting organizational integrity.”
CoffeeLoader uses GPU-powered Armoury Packer to evade EDR and antivirus systems, enhancing malware delivery and evasion tactics.
Experts warn that Trump’s proposed cuts to CISA could jeopardize the integrity of U.S. elections, raising concerns over cybersecurity and voter protection.
Discover Meerkat PhaaS, a platform that mimics over 100 brands, offering innovative solutions for seamless brand experiences and engagement.
Explore Datto BCDR solutions to enhance business continuity, ensuring data protection and seamless recovery for your organization.
Firefox addresses a vulnerability similar to Chrome’s recent zero-day patch, enhancing security for users amid rising threats targeting Russian entities.
Mozilla fixes a critical Firefox vulnerability, mirroring a recent zero-day issue in Chrome, enhancing user security and browser integrity.