Security News > 2025

Security pros baited with fake Windows LDAP exploit traps
2025-01-09 13:16

Tricky attackers trying yet again to deceive the good guys on home territory Security researchers are once again being lured into traps by attackers, this time with fake exploits of serious...

IPVanish VPN Review: Is It Really as Secure as Claimed?
2025-01-09 13:00

Read our comprehensive review of IPVanish VPN. Discover its features, pricing, and more to determine if it meets your online security and privacy needs.

Ivanti Connect Secure zero-day exploited since mid-December (CVE-2025-0282)
2025-01-09 12:14

The zero-day attacks leveraging the Ivanti Connect Secure (ICS) vulnerability (CVE-2025-0282) made public on Wednesday were first spotted in mid-December 2024, Mandiant researchers have shared....

Product Walkthrough: How Reco Discovers Shadow AI in SaaS
2025-01-09 11:55

As SaaS providers race to integrate AI into their product offerings to stay competitive and relevant, a new challenge has emerged in the world of AI: shadow AI.  Shadow AI refers to the...

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan
2025-01-09 10:44

Japan's National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accused a China-linked threat actor named MirrorFace of orchestrating a...

Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions
2025-01-09 10:44

Ransomware isn’t slowing down—it’s getting smarter. Encryption, designed to keep our online lives secure, is now being weaponized by cybercriminals to hide malware, steal data, and avoid...

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection
2025-01-09 09:35

Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve...

Wireshark 4.4.3 released: Updated protocol support, bug fixes
2025-01-09 08:58

Wireshark, the popular network protocol analyzer, has reached version 4.4.3. Wireshark offers deep inspection across hundreds of protocols, live and offline analysis, and display filters. With...

The ongoing evolution of the CIS Critical Security Controls
2025-01-09 07:33

For decades, the CIS Critical Security Controls (CIS Controls) have simplified enterprises’ efforts to strengthen their cybersecurity posture by prescribing prioritized security measures for...

E.U. Commission Fined for Transferring User Data to Meta in Violation of Privacy Laws
2025-01-09 07:13

The European General Court on Wednesday fined the European Commission, the primary executive arm of the European Union responsible for proposing and enforcing laws for member states, for violating...