Human error contributed to 95% of data breaches in 2024, driven by insider threats, credential misuse and user-driven errors, according to a new study by Mimecast. A small fraction of employees contributed disproportionately to these security incidents, with just 8%… Read More "95% of Data Breaches Tied to Human Error in 2024"
Mar 11, 2025The Hacker NewsBreach Simulation / Penetration Testing In cybersecurity, confidence is a double-edged sword. Organizations often operate under a false sense of security, believing that patched vulnerabilities, up-to-date tools, polished dashboards, and glowing risk scores guarantee safety. The… Read More "Adversarial Exposure Validation Exposes Real Threats"
Nation-state involvement is possible While very less is known about the attack, despite a bunch of revelations, experts think a nation-state involvement is indeed possible. “X is under relentless cyberattacks: 24/7/365 and this is far beyond simple DoS attempts,” said… Read More "Musk links cyberattack on X to Ukraine without evidence"
A pro-Palestine group appears to have claimed responsibility for a major DDoS attack on social media site X (formerly Twitter) yesterday. According to data from Downdetector, tens of thousands of users reported outages in several waves, from around 09.30 to 18.20.… Read More "DDoS Blamed as X Suffers Multiple Outages"
Mar 11, 2025Ravie LakshmananICS Security / Vulnerability Taiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees. The vulnerability, tracked as CVE-2024-12297, has… Read More "Moxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches"
Other factors CISOs should consider when building a SOC When building or maintaining an in-house SOC, experts flag other factors that CISOs should keep in mind. One question CISOs should ask themselves is, “have you equipped your analysts to do… Read More "Security operations centers are fundamental to cybersecurity — here’s how to build one"
Mar 11, 2025Ravie LakshmananCyber Espionage / Maritime Security Maritime and logistics companies in South and Southeast Asia, the Middle East, and Africa have become the target of an advanced persistent threat (APT) group dubbed SideWinder. The attacks, observed by Kaspersky… Read More "SideWinder APT Targets Maritime, Nuclear, and IT Sectors Across Asia, Middle East, and Africa"
The most frequently found high-risk vulnerability was CVE-2020-11023, an XSS vulnerability affecting outdated versions of jQuery, but still present in a third of scanned codebases. The supply chain risk from vulnerabilities that originate from third-party and open-source code can be… Read More "Companies are drowning in high-risk software security debt — and the breach outlook is getting worse"
Mar 11, 2025Ravie LakshmananEnterprise Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of… Read More "CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List"
Da Angriffe auf OT-Bereiche zunehmen, sollten CISOs einen Exposure-Management-Ansatz verfolgen. Summit Art Creations – Shutterstock.com Die Bedrohungen gegen die Betriebstechnik (Operational Technology, OT) der kritischen Infrastruktur (KRITIS) verschärfen sich kontinuierlich. China baut offensive Komponenten in amerikanische Militär- und Unternehmensnetzwerke ein.… Read More "CISOs müssen OT-Risiken stärker adressieren"
