Aligning with a NIST framework is a strategic initiative for any organization serious about cybersecurity. It provides a clear roadmap to defending against sophisticated supply chain attacks, meeting evolving regulatory demands, and managing growing cyber risk exposure from third-party vendors.… Read More "NIST compliance in 2025: A complete implementation guide"
Srestha Roy Srestha is a cybersecurity expert and passionate writer with a keen eye for detail and a knack for simplifying intricate concepts. She crafts engaging content and her ability to bridge the gap between technical expertise and accessible language… Read More "Top Enterprise Cloud Security Trends for 2026"
.png?w=1140&resize=1140,855&ssl=1 "Preparing for NIS2: A Compliance Guide For Covered Entities")
In January 2023, the European Commission (EC) released the second version of the European Union (EU) Network and Information Security Directive (NIS2) to enhance cybersecurity risk management across Europe. NIS2 builds upon the original NIS directive and emphasizes regulations on… Read More "Preparing for NIS2: A Compliance Guide For Covered Entities"
Dec 19, 2025Ravie LakshmananCybersecurity / Cloud Security A suspected Russia-aligned group has been attributed to a phishing campaign that employs device code authentication workflows to steal victims’ Microsoft 365 credentials and conduct account takeover attacks. The activity, ongoing since September… Read More "Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers"
Operation RoundPress targets webmail software to steal secrets from email accounts belonging mainly to governmental organizations in Ukraine and defense contractors in the EU 15 May 2025 ESET researchers have discovered a cyberespionage operation that abuses cross-site scripting (XSS) vulnerabilities,… Read More "Sednit abuses XSS flaws to hit gov’t entities, defense companies"
In an age of increasingly complex cyber threats, New Zealand has implemented robust cybersecurity standards to secure the online environment for individuals, businesses, and government entities. New Zealand’s cybersecurity approach is unique and effective, from the overarching strategies laid out… Read More "A Guide to New Zealand’s Cybersecurity Standards"
The resolved versions are 2025.1.4, 12.11.6, 12.5.15 (T15 & T35 models), and 12.3.1_Update4 (B728352) for the FIPS-certified release. There is no fix for 11.x, which is considered end of life. Importantly, WatchGuard warned, patching may not be enough: “If the… Read More "WatchGuard fixes ‘critical’ zero-day allowing firewall takeover"
ESET APT Activity Report Q4 2024–Q1 2025 summarizes notable activities of selected advanced persistent threat (APT) groups that were documented by ESET researchers from October 2024 until the end of March 2025. The highlighted operations are representative of the broader… Read More "ESET APT Activity Report Q4 2024–Q1 2025"
The Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) is an important legislation that outlines how critical infrastructure sectors should deal with cybersecurity threats. CIRCIA strengthens cyber defenses by establishing comprehensive reporting requirements for cyber incidents and ransomware payments. This… Read More "How to Comply With CIRCIA"
ESET Chief Security Evangelist Tony Anscombe highlights key findings from the latest issue of the ESET APT Activity Report 19 May 2025 Today, the ESET research team released its latest issue of the APT Activity Report that details the operations… Read More "ESET APT Activity Report Q4 2024–Q1 2025: Key findings"
