Auction house Sotheby’s disclosed a July data breach
Auction house Sotheby’s disclosed a July data breach Pierluigi Paganini October 17, 2025 Sotheby’s reported a July 24 breach exposing...
Month: October 2025
Email Bombs Exploit Lax Authentication in Zendesk
Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with...
Differences Between Secure by Design and Secure by Default
Introduction: The Rising Importance of Proactive Security Okay, so, proactive security – it's kinda a big deal now, right? I...
Evaluating the Best Passwordless Authentication Options
The Rise of Passwordless Authentication: Why Now? Okay, so passwords, right? We all hate 'em, and honestly, they're not even...
Attack Surface Management vs. Vulnerability Management — What’s Changed
For years, vulnerability management (VM) has been a cornerstone of cybersecurity services. Managed Security Providers (MSPs) and Managed Security...
Azure B2C Alternative for Startups
I once spent three solid days chasing a bug in Azure B2C’s custom policy engine — a mismatch in claim...
Samba WINS Command Injection Vulnerability (CVE-2025-10230) Notice
Overview Recently, NSFOCUS CERT detected that Samba released a security update to fix the Samba WINS command injection vulnerability (CVE-2025-10230);...
Identity Security: Your First and Last Line of Defense
Oct 17, 2025The Hacker NewsArtificial Intelligence / Identity Security The danger isn't that AI agents have bad days — it's...
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices
Oct 17, 2025Ravie LakshmananVulnerability / VPN Security Cybersecurity researchers have disclosed details of a recently patched critical security flaw in...
Microsoft’s Patch Tuesday: 172 Flaws Fixed
Image: EV_Korobov/Adobe Stock Microsoft has released its October 2025 Patch Tuesday updates, addressing 172 security flaws, including six zero-day vulnerabilities....
How Ransomware’s Data Theft Evolution is Rewriting Cyber Insurance Risk Models
When most business leaders think of ransomware, they picture the classic scenario: Hackers encrypt files, demand payment and promise to...
Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign
Oct 17, 2025Ravie LakshmananMalware / Cybercrime Microsoft on Thursday disclosed that it revoked more than 200 certificates used by a...
Operation Zero Disco: Threat actors targets Cisco SNMP flaw to drop Linux rootkits
Operation Zero Disco: Threat actors targets Cisco SNMP flaw to drop Linux rootkits Pierluigi Paganini October 16, 2025 Hackers exploit...
How Votiro Turns Threat Prevention Into Intelligence
October 16, 2025 Most organizations view file sanitization as the final step, a gatekeeper that prevents malware from entering the...
SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025
Vaguely magical and quadranty thing (Gemini) It’s not every day you get to reflect on a journey that started as an...
