Inherent risks (IR) are vulnerabilities within an organization before a set of controls or auditing procedures have been implemented. IR management is a large part of enterprise risk management, which examines an entire company’s risk factors that could disrupt business… Read More "What is Inherent Risk? You Could Be at Risk of a Data Breach"
Do you have online accounts you haven’t used in years? If so, a bit of digital spring cleaning might be in order. 02 Jun 2025 • , 5 min. read The longer our digital lives, the more online accounts we’re… Read More "Don’t let dormant accounts become a doorway for cybercriminals"
Humans are often regarded as the weakest link in a cybersecurity program. Whether resulting from manipulative cybersecurity tactics or limited cybersecurity awareness, human errors remain the most prevalent attack vectors in every information security program, no matter how sophisticated your… Read More "Human Factors in Cybersecurity in 2025"
Insurance companies are among the businesses more reliant than ever on technology and information systems for daily processes. Insurance technology, or insurtech, improves the efficiency of the insurance industry but can also increase attack surfaces, making the data insurers collect… Read More "How Cybersecurity Affects the Insurance Industry"
Security misconfigurations are a common and significant cybersecurity issue that can leave businesses vulnerable to data breaches. According to the latest data breach investigation report by IBM and the Ponemon Institute, the average cost of a breach has peaked at… Read More "Top 5 Security Misconfigurations Causing Data Breaches"
An infostealer strain known as ‘Acreed’ could become the new market leader in credential theft malware, according to ReliaQuest. The cybersecurity company’s threat research team investigated Russian Market, one of the most popular platforms for selling and buying stolen credentials… Read More "Acreed Emerges as Dominant Infostealer Threat Following Lumma Takedown"
The HECVAT (Higher Education Community Vendor Assessment Toolkit) was developed by the Higher Education Information Security Council (HEISC) as an initiative to help higher education institutions better protect their data, prevent the risk of data breaches, and measure the cyber… Read More "Most Common HECVAT Violations (And How to Avoid Them)"
Jun 02, 2025Ravie LakshmananSpyware / Vulnerability Qualcomm has shipped security updates to address three zero-day vulnerabilities that it said have been exploited in limited, targeted attacks in the wild. The flaws in question, which were responsibly disclosed to the company… Read More "Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU"
“Cybercriminals don’t just create malware; they perfect it for maximum destruction,” said the release, citing FBI Houston Special Agent in Charge Douglas Wiliams. “By leveraging counter antivirus services, malicious actors refine their weapons against the world’s toughest security systems to… Read More "FBI cracks down on crypting crew in a global counter-antivirus service disruption"
Researchers claim to have discovered the first case of threat actors using misconfigured HashiCorp Nomad deployments as an attack vector. The popular DevOps platform, which enables firms to deploy and manage containers and non-containerized applications, is being targeted alongside other… Read More "Cryptojacking Campaign Targets DevOps Servers Including Nomad"
