Here’s a look at cybersecurity stories that moved the needle, raised the alarm, or offered vital lessons in July 2025 31 Jul 2025 With another month behind us, it’s time for ESET Chief Security Evangelist Tony Anscombe to look at… Read More "This month in security with Tony Anscombe – July 2025 edition"
A threat actor has been observed “patching” a vulnerability post exploitation, likely in a bid to lock out other adversaries and secure exclusive access. The novel tactic was detected by Red Canary researchers in a cluster of activity targeting a… Read More "Attacker “Patches” Vulnerability Post Exploitation to Lock Out Competi"
Data leak detection software identifies an organization’s data leaks – the accidental public exposure of sensitive data due to software misconfigurations and poor network security. Data leaks quickly become data breaches when cybercriminals identify and exploit this exposed data. The… Read More "What is Data Leak Detection Software?"
After two decades of developing increasingly mature security architectures, organizations are running up against a hard truth: tools and technologies alone are not enough to mitigate cyber risk. As tech stacks have grown more sophisticated and capable, attackers have shifted… Read More "Why Your Security Culture is Critical to Mitigating Cyber Risk"
“You almost never see that sort of tenure in security leadership. Honestly, I wouldn’t be shocked if she simply decided it was the right moment to step aside,” Marley said. More likely, however, is that Oracle is now undergoing a… Read More "Surprise departure of Oracle security chief as company shifts focus to AI"
Restricting end-to-end encryption on a single-country basis would not only be absurdly difficult to enforce, but it would also fail to deter criminal activity 01 Aug 2025 • , 5 min. read The UK Government wants access, when requested, to… Read More "Why the tech industry needs to stand firm on preserving end-to-end encryption"
A Canadian financial regulator has disclosed a cybersecurity incident, which has breached the personal information of member firms and their employees. The Canadian Investment Regulatory Organization (CIRO), a national self-regulatory organization covering all investment dealers, mutual fund dealers and trading… Read More "Canadian Financial Regulator Hacked, Exposing Personal Data from Membe"
Vendors are essential for running a modern organization, but each is a potential entry point to sensitive data. Vendor risk assessments enable your security and compliance teams to evaluate which third parties should receive access and help verify adherence to… Read More "Vendor Risk Assessments: An Ultimate Guide"
A United States Senate investigation has identified more than 500 credible reports of human rights abuses in US immigration detention since January, including alarming allegations of mistreatment of pregnant women and children. As of late last month, the investigation—led by… Read More "Senate Probe Uncovers Allegations of Widespread Abuse in ICE Custody"
Aug 19, 2025Ravie LakshmananLinux / Malware Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called DripDropper. But in an unusual twist, the unknown attackers have… Read More "Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems"
