Cybersecurity
General cybersecurity news and analysis
Microsoft WSUS Critical Flaw: Exclusive Exploitation Alert
Imagine the service you rely on to push security updates becoming a vehicle for remote code execution — that’s the urgent reality for WSUS admins after Microsoft issued an out‑of‑band patch for CVE-2025-59287 (CVSS 9.8) amid public proof‑of‑concept and active exploitation. Apply the emergency update now and verify your WSUS and recovery workflows to stop attackers from turning your update pipeline into an attack vector.
Microsoft WSUS flaw Exclusive: Critical exploit active
Your update server shouldnt be the thing that unpatches you. Microsoft rushed an emergency patch for a critical Windows Server Update Service (WSUS) RCE after public proof‑of‑concept code and active exploitation surfaced — inventory and patch your WSUS servers now.
Cybersecurity Perception Gap: Exclusive Best Practices
When leaders count policies and vendors while security teams tally alerts and fatigue, real risk gets lost — the Bitdefender 2025 assessment warns this perception gap is widening into dangerous blind spots. Closing it with continuous monitoring, smarter tooling, and honest incident reporting shrinks dwell time and keeps small problems from turning catastrophic.
Cybersecurity Perception Gap: Stunning Critical Divide
Think your board believes the company is secure while the security team quietly braces for the next breach? The Bitdefender 2025 Cybersecurity Assessment exposes a growing cybersecurity perception gap—fueled by concealment pressures, alert fatigue and tool sprawl across cloud and remote environments—that could turn routine incidents into systemic failures unless organizations invest in zero-trust, consolidated telemetry and stronger detection and response.
North Korean Hackers: Exclusive Dangerous Drone Job Scam
North Korean hackers are posing as recruiters for “exclusive” drone jobs that could put applicants in real danger — here’s how to spot the scam and protect yourself.
North Korean Hackers Exclusive Drone Espionage Threat
Imagine a calendar invite from a colleague that’s actually a spy. North Korean threat actors are exploiting trusted collaboration tools and clever social engineering to steal drone designs and supplier data from European defense contractors.
ThreatsDay Exclusive: Critical Security Risks $176M Fine
When abused OAuth tokens, unpatched libraries, and lax segmentation make breaches easy, attackers dont need cleverness—just opportunity—and regulators are now handing out fines in the hundreds of millions. Tighten hygiene, authentication, and monitoring before convenience becomes an expensive lesson.
Jingle Thief Exclusive: Hackers Devastate Gift Cards
Exclusive: Hackers are turning gift cards into easy targets—our deep dive reveals how gift card fraud works, who’s at risk, and simple steps to protect your balance.
Managed Identities: Must-Have Effortless Alternative
As machine identities start to outnumber human users, the real question becomes: who holds the keys to the kingdom — and how do we stop them from walking out the door? Managed identities make that worry disappear, giving you effortless, secure control over who (or what) gets access.
Managed Identities: A Must-Have, Effortless Security Shift
Ditch brittle, hard‑coded secrets and give your apps platform‑native managed identities that auto‑rotate—security that just works. The payoff: fewer breaches, less ops overhead, and faster developer velocity.
Managed Identities: Must-Have Fix to Risky Static Secrets
Imagine never leaving API keys on sticky notes again. Managed identities give workloads platform‑issued, short‑lived tokens that slash exposure windows, simplify operations, and force attackers onto harder, noisier paths.
Magento Exclusive: Critical Flaw Hits 250+ Stores Overnight
A single flaw prompted 250+ attack attempts against Magento-based stores in just 24 hours, forcing merchants to weigh sales against safety. Adobe’s emergency patches — plus quick steps like MFA and session token rotation — need to be applied now to stop fraud, skimming, and account takeovers.
Jingle Thief Exclusive: Alarming Gift Card Theft
Think gift cards are harmless holiday fun? Jingle Thief uses simple phishing and cloud misconfigurations to siphon stored value from retailers, turning promos into cash for criminals — shoppers and merchants need to wake up and tighten defenses.
Jingle Thief Exclusive: Costly Cloud Hack Steals Millions
Imagine criminals turning your retailer’s cloud into a holiday ATM—Unit 42 warns the Jingle Thief gang uses phishing and smishing to steal credentials and exploit misconfigured cloud systems to issue and redeem millions in gift cards. Stronger identity controls, logging and vendor oversight are urgent fixes before consumers and merchants are left cleaning up the mess.
Lanscope Endpoint Manager Exclusive Critical Bug Alert
If you use Lanscope Endpoint Manager, treat this as urgent—CISA has added CVE-2025-61932 to its Known Exploited Vulnerabilities list and says it’s being actively exploited. Act now: inventory on‑prem Clients, apply patches or mitigations, tighten admin access, and hunt for signs of compromise.
Magento Exclusive: Critical Hack Hits 250+ Stores Overnight
If you run Magento Open Source, update now — a critical CVE-2025-54236 flaw has been weaponized and saw exploitation attempts against 250+ stores, letting attackers hijack sessions, execute code, or install skimmers. This emergency forces merchants to balance urgent patching with the real risk of breaking live sites—learn how to protect your store without losing sales.
Lanscope Endpoint Manager Exclusive: Critical Bug Exploited
A critical, actively exploited flaw in Motex Lanscope Endpoint Manager (CVE-2025-61932) — now on CISA’s KEV list — can turn your endpoint manager into an attacker’s shortcut. If you run on‑prem Lanscope Client, act now: patch immediately, isolate affected hosts, and hunt for suspicious activity.
Ukraine Aid Groups Hit by Exclusive Fake Zoom PDF Attacks
Who do you trust when the envelope itself is the weapon? A campaign called PhantomCaptcha disguised malware inside a Zoom-related PDF, giving attackers stealthy, long-term access to Ukraine aid groups and risking donor data, credentials and field operations.
MPs urge tech measures to halt Britain’s phone theft wave
Imagine the phone in your pocket becoming instantly useless the moment it’s stolen — MPs want manufacturers to build standardised kill‑switches and anti‑reset tech so thieves can’t profit and victims don’t lose access to banking and ID.
3 Urgent Challenges for Modern C2 Centers
The war in Ukraine turned a once-hypothetical risk into a harsh reality: modern C2 centers must now urgently sustain resilient communications in contested electromagnetic and cyber environments, turn massive data flows into fast, trusted decisions, and deliver secure, seamless interoperability across coalitions and diverse systems.
Mermaid exploit in Microsoft 365 Copilot steals user data
What if your AI assistant could be quietly coaxed into handing over secrets? Researchers used a clever Mermaid prompt-injection to make Microsoft 365 Copilot leak tenant data — Microsoft patched the flaw, but it’s a wake-up call to lock down defenses like phishing-resistant MFA, least-privilege access, and stronger monitoring.
Digital ID now targets personal data, not illegal work
When a government pivots a digital ID from an anti-illegal-work tool to a convenience, citizens are left asking who — and what — it really protects. Slogans won’t fix the real risks: mission creep, exclusion, and centralised personal-data vulnerabilities that only careful design and legal limits can address.
Kryptos Part Four: Inside the Unsolved Cipher
Who owns an unsolved riddle — the artist, the public, or the stranger who now holds the clues? Two researchers say they found Kryptos’s elusive fourth passage in Jim Sanborn’s archived notes, now headed to auction, touching off a legal and cultural tug-of-war over the sculpture’s final secret.
Inside Europe’s Race to Build a Drone Wall
Europe is racing to build a drone wall — not of stone but of sensors, software and beams of light — to blunt swarms of cheap, lethal drones made painfully real over Kyiv and Kharkiv. A patchwork of emergency programs, private innovation and military improvisation is rethinking air defenses for a world where small, smart, low‑cost unmanned aircraft can swarm, loiter and strike with impunity.