Cybersecurity News Hero

Combing the world for the cybersecurity stories you need to know.

Cybersecurity News
AppSec alert fatigue noise
Why 95% of Security Warnings Are Noise
May 06, 2025
Modern application security (AppSec) suffers from a number of issues, one of the main ones being alert fatigue. Human teams do not have the time or resources to verify and investigate every security alert, especially…
Read More >
Erlang OTP SSH
Unpatched Erlang SSH Vulnerability Opens Door to Full System Takeover
May 02, 2025
Erlang/OTP plays a major role in telecom and distributed systems, enabling easy creation of concurrent, fault-tolerant, and robust systems. Erlang/OTP SSH is the most popular protocol for remote access management, and its compromise represents a…
Read More >
Cybersecurity Information Sharing Act
Cybersecurity Sharing at a Crossroads as Senators Push to Extend Key Law
May 01, 2025
A key pillar of the nation’s cyber defense is on the clock. The Cybersecurity Information Sharing Act (CISA) of 2015 is set to expire in September, and lawmakers are scrambling to renew it before the…
Read More >
Halcyon ransomware report
Ransomware Rankings Shake Up: Akira Rises, Hunters Fall, New Threats Emerge
April 29, 2025
The threat landscape is always shifting, requiring organizations to stay on top of current threat trends, and ransomware trends are no exception. Halcyon recently released its Ransomware Malicious Quartile, exploring the top ransomware groups in…
Read More >
GDPR EU deregulation
EU Eyes Deregulation to Boost Global Competitiveness
April 28, 2025
The European Union’s General Data Protection Regulation has been a pillar since its implementation in May 2018, impacting data security and influencing other pieces of legislation worldwide. Although the regulation applies to the EU, the…
Read More >
GreyNoise Palo Alto Networks
Coordinated Login Scanning Targets Palo Alto Networks GlobalProtect Portals
April 24, 2025
Cybersecurity intelligence and analysis company GreyNoise has reported that they have seen a sharp spike in login scanning activity targeting Palo Alto Networks’ PAN-OS GlobalProtect portals, suggesting a planned, sustained effort to test network defenses…
Read More >
identity management day identity security
Identity Is the New Perimeter: Rethinking Security in the Age of Autonomy
April 23, 2025
The cybersecurity world recently recognized Identity Management Day. Held on April 8, Identity Management Day was first established in 2021 in partnership with the National Cybersecurity Alliance and promotes awareness and educates business leaders, IT…
Read More >
spam bomb
How Spam Bomb Attacks Are Evolving to Breach Enterprise Defenses
April 22, 2025
Threat actors are always attempting to devise sophisticated, advanced attack tactics, and they frequently do so by building on tried-and-true methods of old, as demonstrated by a new surge in email spam bomb attacks. Email…
Read More >
Xanthorox AI
A Glimpse into the Next Generation of Malicious Autonomous Cyber Threats
April 21, 2025
In recent years, particularly since the public availability of tools like ChatGPT, AI has taken center stage in many discussions of technology. Using AI can serve a variety of legitimate purposes for businesses and individuals…
Read More >
NIST CVE CVEs
NIST Pauses Enrichment for Pre-2018 CVEs: A Strategic Reset or a Risky Omission?
April 18, 2025
In a pivotal shift that could reshape how cybersecurity teams prioritize vulnerabilities, the National Institute of Standards and Technology (NIST) has announced it will deprioritize enrichment of all Common Vulnerabilities and Exposures (CVEs) published before…
Read More >
AI phishing agents
AI Phishing Agents Now Outsmart Human Red Teams
April 18, 2025
The growth of AI has been in the spotlight in recent years as generative AI tools have become available for individual and business use. As these tools have grown in popularity and taken center stage…
Read More >
2025 Cyberthreat Defense Report
Ransomware’s Dirty Secret: Paying Doesn’t Guarantee Recovery
April 15, 2025
In a stark warning to organizations globally, CyberEdge Group’s 2025 Cyberthreat Defense Report (CDR) has revealed a troubling trend: only 54% of organizations that paid a ransom to cybercriminals in 2024 successfully recovered their data.…
Read More >
AI agent identity security
AI Agents Are Weaponizing at Speed: Gartner Warns of 50% Faster Exploits by 2027
April 10, 2025
The AI arms race has begun. In its new forecast, Gartner now predicts that by 2027, AI agents will cut the time it takes to exploit exposed account credentials in half. It’s a real warning…
Read More >
NSA director Haugh cybersecurity
NSA Leadership Shakeup Sparks Cybersecurity Concerns
April 10, 2025
On Thursday, April 3rd, the highest officials at the National Security Agency were abruptly fired. Air Force Gen. Timothy Haugh had been serving as the head of U.S. Cyber Command and director of the NSA,…
Read More >
Oracle breach data compromise
Oracle’s Breach Denial Under Scrutiny as Millions of Records Surface for Sale
April 08, 2025
CloudSEK recently uncovered a major breach allegedly targeting Oracle Cloud, in which six million records were exfiltrated. A threat actor known as “rose87168” was found attempting to sell this data – from more than 140,000…
Read More >
browser security Menlo Security
How GenAI and Phishing-as-a-Service Are Transforming Cyber Threats in 2025
April 07, 2025
The enterprise web browser as the primary battleground for cybercriminals is the underlying theme of Menlo Security’s State of the Browser Security report. The report highlights the trends around attacks concentrated on exploiting web browser…
Read More >
AbyssWorker EDR API
How Malicious Drivers Are Silencing Endpoint Security
April 03, 2025
Endpoint detection and response (EDR) tools are the first line of defense against malware on modern networks. They monitor system activity in real-time, flag suspicious behavior, and help security teams contain threats before they spread.…
Read More >
KoSpy APT37 North Korea
KoSpy Unmasked: North Korea’s APT37 Expands Mobile Surveillance Operations
April 02, 2025
North Korea’s state-sponsored hackers have added a powerful new tool to their cyber arsenal. According to researchers at Lookout, a newly discovered Android spyware strain called KoSpy is actively being used to spy on mobile…
Read More >
Subscribe for the Latest News
Webinars
Securing the AI Frontier: Defending the Enterprise Ecosystem with Prisma AIRS
Register Now
Scaling Secure Development: Modern Code Security Without Slowing Innovation
Register Now
When Your Cloud Directory Goes Dark: Recovering Entra ID After a Cyberattack
Register Now