Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware
Oct 02, 2025Ravie LakshmananRansomware / Threat Intelligence Google Mandiant and Google Threat Intelligence Group (GTIG) have disclosed that they are...
Year: 2025
How to Close Threat Detection Gaps: Your SOC’s Action Plan
Running a SOC often feels like drowning in alerts. Every morning, dashboards light up with thousands of signals; some urgent,...
Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro
Cybersecurity researchers have discovered two Android spyware campaigns dubbed ProSpy and ToSpy that impersonate apps like Signal and ToTok to...
China-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectors
China-linked APT Phantom Taurus uses Net-Star malware in espionage campaigns against key sectors Pierluigi Paganini October 02, 2025 China-linked APT...
OpenSSL patches 3 vulnerabilities, urging immediate updates
OpenSSL patches 3 vulnerabilities, urging immediate updates Pierluigi Paganini October 01, 2025 OpenSSL updates addressed 3 flaws enabling key recovery,...
Smashing Security podcast #437: Salesforce’s trusted domain of doom
Researchers uncovered a security flaw in Salesforce’s shiny new Agentforce. The vulnerability, dubbed “ForcedLeak”, let them smuggle AI-read instructions in...
Qualcomm defeats Arm’s final legal arguments in licensing trial
Sag added, “while I don’t believe we will ever know all the facts of this case, it has fundamentally changed...
Proofpoint is a Proud Participant in the Microsoft Security Store Partner Ecosystem
SUNNYVALE, Calif. – October 1, 2025 – Proofpoint, Inc., a leading cybersecurity and compliance company today announced its inclusion in...
What Does the Government Shutdown Mean for Cybersecurity?
Image: Bill Chizek/Adobe Stock On Oct. 1, the US federal government shut down after Congress failed to pass funding for...
The AI Exchange: Innovators in Payment Security Featuring Elavon Inc.
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
CISA Ends Funding for MS-ISAC Program for State and Local Governments
CISA ended a 21-year agreement with CIS to run MS-ISAC, a cyberthreat resource and information-sharing program that local and state...
New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer
Oct 01, 2025Ravie LakshmananEncryption / Hardware Security In yet another piece of research, academics from Georgia Institute of Technology and...
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps
Oct 01, 2025Ravie LakshmananVulnerability / API Security A high-severity security flaw has been disclosed in the One Identity OneLogin Identity...
Google Adds AI-Powered Ransomware Protection and Recovery to Drive for Desktop
Image: nicescene/Adobe Stock Google is deploying an update to Drive for desktop that uses AI to analyze files for abnormal...
UK Police Convicts Pair in £5.5 Billion Bitcoin Launder Case
Source: Adobe Stock Two people have been convicted in connection with a multibillion-pound Bitcoin laundering scheme tied to what police...
