Month: April 2025

 Commvault, a leading provider of data protection solutions, has confirmed that a nation-state threat actor breached its Azure environment in February by exploiting a zero-day vulnerability. The company disclosed that…

 The FBI has released a comprehensive list of 42,000 phishing domains connected to the dismantled LabHost phishing-as-a-service (PhaaS) platform. This disclosure aims to provide cybersecurity professionals with valuable intelligence on…

 Phishing kits have changed the game and not in a good way for businesses. Today, attackers don’t need to be tech experts to launch a convincing phishing attack. Ready-made phishing kits…

As the field of artificial intelligence (AI) continues to evolve at a rapid pace, new research has found how techniques that render the Model Context Protocol (MCP) susceptible to prompt injection attacks could be used to develop security tooling or identify malicious tools, according to a new report from Tenable. MCP, launched by Anthropic in November 2024, is a framework designed to connect

[[{"value":"The OpenEoX model proposes a shared data format that can be integrated into SBOMs, security advisories, and other ecosystem tools.  The post Tech Giants Propose Standard For End-of-Life Security Disclosures…

Dan Gorecki and Scott Brammer's interactive session during RSAC Conference 2025 encourages security professionals to rethink their security postures and address evolving and emerging risks. Read More  

Opportunistic threat actors targeted Portuguese and Spanish speakers by spoofing Portugal's national airline in a campaign offering compensation for delayed or disrupted flights. Read More  

 A critical security flaw (CVE-2024-6198) in widely deployed Viasat satellite modems allows unauthenticated attackers to execute arbitrary code on affected devices via a stack buffer overflow in the “SNORE” web…

 Hybrid work has become a permanent fixture in the modern enterprise, blending remote and in-office operations to enhance flexibility and productivity. However, this model introduces complex cybersecurity challenges, from unsecured…

Secretary Noem asks the cybersecurity community to get in touch with CISA to help reshape the agency to focus on finding efficiencies. Read More  

 The Co-operative Group, one of the UK’s largest retailers, has been forced to shut down parts of its IT infrastructure after detecting an attempted cyber attack, just days after a…

 Ascension Healthcare, one of the largest private healthcare systems in the United States, has disclosed a significant data breach after sensitive patient information was compromised through a third-party business partner.…

Leaders at federal research organizations DARPA, ARPA-I, and ARPA-H discussed the myriad obstacles in addressing critical infrastructure security at RSAC Conference 2025. Read More  

 A significant security vulnerability has been identified in the SonicWall Connect Tunnel Windows Client, affecting both 32-bit and 64-bit versions.  This vulnerability, designated as CVE-2025-32817, involves an Improper Link Resolution…