The trend lines are clear: Just as applications and data are moving to the cloud, data protection is moving to the cloud as well, due to the scalability, flexibility, and accessibility that the cloud provides. The total global data protection… Read More "What to look for in a data protection platform for hybrid clouds"
Security teams have struggled for far too long with a patchwork of siloed security tools, static compliance checks, and an increasingly adversarial threat landscape to continue down that path, especially when each of these challenges is making their organizations more… Read More "UpGuard’s Future: The Strategic Edge Your Security Team Needs"
Mark your calendars for the CIO100 ASEAN Awards 2025 Gala Night on 12 November 2025, in Singapore – this region’s most prestigious technology leadership celebration that brings together the brightest minds in digital innovation. Join us for an evening where… Read More "CIO100 and CSO30 ASEAN 2025 Team Awards Finalists: Celebrating Technology and Cybersecurity Excellence Across the Southeast Asia region"
Oct 12, 2025Ravie LakshmananVulnerability / Threat Intelligence Oracle on Saturday issued a security alert warning of a fresh security flaw impacting its E-Business Suite that it said could allow unauthorized access to sensitive data. The vulnerability, tracked as CVE-2025-61884, carries… Read More "New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login"
Oct 11, 2025Ravie LakshmananCloud Security / Network Security Cybersecurity company Huntress on Friday warned of “widespread compromise” of SonicWall SSL VPN devices to access multiple customer environments. “Threat actors are authenticating into multiple accounts rapidly across compromised devices,” it said.… Read More "Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts"
Oct 11, 2025Ravie LakshmananNetwork Security / Vulnerability Threat actors are abusing Velociraptor, an open-source digital forensics and incident response (DFIR) tool, in connection with ransomware attacks likely orchestrated by Storm-2603 (aka CL-CRI-1040 or Gold Salem), which is known for deploying… Read More "Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks"
Research published this week indicates that North Korean scammers are trying to trick US companies into hiring them for architectural design work, using fake profiles, résumés, and Social Security numbers to pose as legitimate workers. The hustle fits into longstanding… Read More "‘Happy Gilmore’ Producer Buys Spyware Maker NSO Group"
Only days ago, a message on the BreachForums extortion site threatened to leak one billion records allegedly stolen from the Salesforce systems of 39 of the largest companies in the world, including Disney, Toyota, Adidas, McDonalds, IKEA, and Home Depot.… Read More "FBI seizes BreachForums servers as threatened Salesforce data release deadline approaches"
Memory Integrity Enforcement aims to severely complicate the exploitation of memory corruption vulnerabilities, particularly buffer overflows and use-after-free memory bugs. It makes use of the CPU Arm Memory Tagging Extension (MTE) specification published in 2019 and the subsequent Enhanced Memory… Read More "Apple bumps RCE bug bounties to $2M to counter commercial spyware vendors"
Apple on Friday announced significant updates to its bug bounty program and the company is now offering up to $2 million for complex exploit chains. Since the launch of its public bug bounty program in 2020, Apple has awarded a… Read More "Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date"
