Singapore’s top performers in cybersecurity ratings, with 100% A grades, were Agriculture, Energy, and Healthcare, the report added. The Financial sector followed closely, with 90% rated A, outperforming Europe’s 39%. Still, none of these A graders could actually avoid supply… Read More "Singapore’s cybersecurity paradox: Top firms rated A, yet all breached"
Jul 24, 2025Ravie LakshmananCybersecurity / Web Security Cybersecurity researchers have uncovered a new stealthy backdoor concealed within the “mu-plugins” directory in WordPress sites to grant threat actors persistent access and allow them to perform arbitrary actions. Must-use plugins (aka mu-plugins)… Read More "Hackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin Access"
Der mutmaßliche Betreiber einer großen Plattform für Cyberkriminalität wurde festgenommen. Skrypnykov Dmytro – shutterstock.com Der mutmaßliche Betreiber einer großen russischsprachigen Plattform für Cyberkriminalität ist in der Ukraine festgenommen worden. Das Forum sei seit 2013 aktiv gewesen und einer der zentralen… Read More "Mutmaßlicher Betreiber von großem Cybercrime-Forum geschnappt"
An active campaign is exploiting various vulnerabilities and misconfigurations across cloud environments to deploy cryptominers, according to research from Wiz. The campaign has been dubbed Soco404 due to the attackers embedding payloads in fake 404 error message pages hosted on… Read More "Active Campaign Exploits Cloud Flaws for Cryptomining"
Europol on Monday announced the arrest of the suspected administrator of XSS.is (formerly DaMaGeLaB), a notorious Russian-speaking cybercrime platform. The arrest, which took place in Kyiv, Ukraine, on July 222, 2025, was led by the French Police and Paris Prosecutor,… Read More "Europol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime Marketplace"
“No matter the size of an organization, there should be a seamless process to feed threat intelligence into the defensive technology stack,” Denning says. “This requires the system to be architected, configured, and designed to consume intelligence. Equally important is… Read More "5 challenges CISOs face in using threat intel effectively"
Aus der Zeit gefallen? Sergio Delle Vedove | shutterstock.com Schlechte Angewohnheiten abzustellen (oder bessere zu entwickeln), ist ein Prozess, der Geduld, Selbstbeherrschung und Entschlossenheit erfordert. Das gilt sowohl auf persönlicher als auch auf Security-technischer Ebene. In diesem Artikel haben wir… Read More "7 Security-Praktiken zum Abgewöhnen"
Promote secure-by-design AI technologies and applications: The plan says the US government “has a responsibility to ensure the AI systems it relies on — particularly for national security applications — are protected against spurious or malicious inputs” and that “promoting… Read More "White House AI plan heavy on cyber, light on implementation"
Hundreds of organizations around the world suffered data breaches this week, as an array of hackers rushed to exploit a recently discovered vulnerability in older versions of the Microsoft file-sharing tool known as SharePoint. The string of breaches adds to… Read More "Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage"
Jul 23, 2025Ravie LakshmananMalware / Cryptocurrency The threat actor behind the exploitation of vulnerable Craft Content Management System (CMS) instances has shifted its tactics to target Magento CMS and misconfigured Docker instances. The activity has been attributed to a threat… Read More "Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware"
