Cybersecurity dominated headlines throughout 2025, with a year marked by high-profile breaches, evolving attack techniques and major shifts in industry practices. From critical zero-day vulnerabilities and supply chain threats to AI-driven risks and vendor shake-ups, the security landscape has been… Read More "Infosecurity’s Top 10 Cybersecurity Stories of 2025"
A major data breach at a leading password management provider in 2022 has enabled hackers to drain victims’ digital wallets of millions in crypto, according to TRM Labs. The blockchain analytics company said it traced several waves of cryptocurrency theft… Read More "Experts Trace $35m in Stolen Crypto to LastPass Breach"
Europe’s space agency has issued a brief statement appearing to confirm reports that hackers compromised data in an incident last month. The European Space Agency (ESA) said it is “aware” of a recent issue involving servers outside its corporate network and… Read More "European Space Agency Confirms Server Breach"
Researchers warn that a critical vulnerability patched this week in BeyondTrust Remote Support is being exploited in the wild to compromise self-hosted deployments, including Bomgar remote support appliances, which included affected versions of the impacted software. Bomgar, a provider of… Read More "Critical BeyondTrust RS vulnerability exploited in active attacks"
The New Zealand government is undertaking a review into a large-scale data breach that affecting Manage My Health, an online patient health portal used across the country to access medical records and manage general practice (GP) appointments. The cyber-attack was… Read More "New Zealand Orders Review of Manage My Health Breach"
Smart organizations have spent the last three years protecting their AI tools from skilled prompt injection-style attacks. The assumption has been that poisoning the foundational model, the real brains behind AI systems, requires technical expertise, privileged access, or a coordinated… Read More "The democratization of AI data poisoning and how to protect your organization"
A Python-based malware family known as VVS stealer has been observed using advanced obfuscation and stealth techniques to target Discord users and extract sensitive data. The malware, also styled as VVS $tealer, was previously marketed for sale on Telegram and… Read More "VVS Stealer Uses Advanced Obfuscation to Target Discord Users"
As organizations migrate critical applications to the cloud, cloud-based DDoS attacks and defenses have become a growing concern amid the increasing number of cyber threats. Unlike traditional threats, these attacks are increasingly targeted, sophisticated, and capable of disrupting services in… Read More "Cloud-Native DDoS Defense: Architecture & Best Practices"
AI agents are increasingly seen as a way to reinforce the capabilities of cybersecurity teams — but which can do the best job? Wiz has developed a benchmark suite of 257 real-world challenges spanning five offensive domains: zero-day discovery, CVE… Read More "Battling bots face off in cybersecurity arena"
A former cryptocurrency hacker convicted over the 2016 Bitfinex exchange breach has been released from prison earlier than expected, according to public statements and federal records. Ilya Lichtenstein, sentenced to five years in November 2024 for money laundering tied to… Read More "Ilya Lichtenstein Released Early After Bitfinex Hack Conviction"
