Security News

41% of Attacks Bypass Defenses: Adversarial Exposure Validation Fixes That
2025-04-16 14:02

Your dashboards say you're secure—but 41% of threats still get through. Picus Security's Adversarial Exposure Validation uncovers what your stack is missing with continuous attack simulations and...

New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks
2025-04-16 10:37

Cybersecurity researchers have unearthed a new controller component associated with a known backdoor called BPFDoor as part of cyber attacks targeting telecommunications, finance, and retail...

Attack Flow: Learn how cyber adversaries combine and sequence offensive techniques
2025-04-16 05:00

MITRE’s Attack Flow project aims to translate complex cyber operations into a structured language. By describing how adversaries sequence and combine offensive techniques to reach their...

Browser extensions make nearly every employee a potential attack vector
2025-04-16 04:00

Despite being present on virtually every employee’s browser, extensions are rarely monitored by security teams or controlled by IT, according to LayerX. Most extensions have access to sensitive...

China names alleged US snoops over Asian Winter Games attacks
2025-04-15 18:02

Beijing claims NSA went for gold in offensive cyber, got caught in the act China's state-run press has taken its turn in trying to highlight alleged foreign cyber offensives, accusing the US...

Where it Hertz: Customer data driven off in Cleo attacks
2025-04-15 11:31

Car hire biz takes your privacy seriously, though Car hire giant Hertz has confirmed that customer information was stolen during the zero-day data raids on Cleo file transfer products last year.…

Kidney dialysis firm DaVita hit by weekend ransomware attack
2025-04-14 14:20

Kidney dialysis firm DaVita disclosed Monday it suffered a weekend ransomware attack that encrypted parts of its network and impacted some of its operations. [...]

Old Fortinet flaws under attack with new method its patch didn't prevent
2025-04-14 05:35

PLUS: Chinese robodogs include backdoor; OpenAI helps spammer; A Dutch data disaster; And more! Infosec In Brief Fortinet last week admitted that attackers have found new ways to exploit three...

Microsoft Defender will isolate undiscovered endpoints to block attacks
2025-04-11 19:13

Microsoft is testing a new Defender for Endpoint capability that will block traffic to and from undiscovered endpoints to thwart attackers' lateral network movement attempts. [...]

Ransomware attack cost IKEA operator in Eastern Europe  $23 million
2025-04-11 12:24

Fourlis Group, the operator of IKEA stores in Greece, Cyprus, Romania, and Bulgaria, has informed that the ransomware attack it suffered just before Black Friday on November 27, 2024, caused...