SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances
Dec 17, 2025Ravie LakshmananVulnerability / Network Security SonicWall has rolled out fixes to address a security flaw in Secure Mobile...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks
A new distributed denial-of-service (DDoS) botnet known as Kimwolf has enlisted a massive army of no less than 1.8 million...
Inside the Global Airline that Eliminated 14,600 SaaS Security Issues with AppOmni
SaaS Security Case Studies A leading airline proved what’s possible when SaaS visibility and automation come together. AppOmni helped...
Cybersecurity Crossed the AI Rubicon: Why 2025 Marked a Point of No Return
For years, artificial intelligence sat at the edges of cybersecurity conversations. It appeared in product roadmaps, marketing claims, and...
When Zero-Days Go Active: What Ongoing Windows, Chrome, and Apple Exploits Reveal About Modern Intrusion Risk
A series of actively exploited zero-day vulnerabilities affecting Windows, Google Chrome, and Apple platforms was disclosed in mid-December, according...
Securing the Road Ahead: The Intersection of Cybersecurity and Intelligent Transportation
Securing the Road Ahead: The Intersection of Cybersecurity and Intelligent Transportation Reflecting on the incredible energy from our recent Cybersecurity...
GNV ferry fantastic under cyberattack probe amid remote hijack fears
GNV ferry fantastic under cyberattack probe amid remote hijack fears Pierluigi Paganini December 17, 2025 French prosecutors probe a suspected...
APT28 Targets Ukrainian UKR-net Users in Long-Running Credential Phishing Campaign
Dec 17, 2025Ravie LakshmananEmail Security / Threat Intelligence The Russian state-sponsored threat actor known as APT28 has been attributed to...
New ForumTroll Phishing Attacks Target Russian Scholars Using Fake eLibrary Emails
Dec 17, 2025Ravie LakshmananVulnerability / Malware The threat actor linked to Operation ForumTroll has been attributed to a fresh set...
Google Chrome Extension is Intercepting Millions of Users’ AI Chats
A Chrome extension that promises security and privacy, has received good ratings from users and a “Featured” badge from Google,...
How Passkeys Work (Explained Simply)
Introduction Let’s be honest — passwords are a pain. They’re either too simple and easy to guess, or so complicated...
Merriam-Webster names “slop” the word of the year 2025
Merriam-Webster, the US publisher of some of the world’s best-known encyclopedias, has named “slop” the word of the year for...
Why “Strong Passwords” Aren’t Enough Anymore—and What to Do Instead
Imagine a day where you didn’t have to juggle passwords. No more sticky notes. No more notebooks with dozens of...
Askul data breach exposed over 700,000 records after ransomware attack
Askul data breach exposed over 700,000 records after ransomware attack Pierluigi Paganini December 17, 2025 Askul disclosed that an October...
Russian state hackers targeted Western critical infrastructure for years, Amazon says
Russian state hackers targeted Western critical infrastructure for years, Amazon says Pierluigi Paganini December 17, 2025 Amazon disclosed a years-long...
