Industry experts with over a decade of cybersecurity experience recognize that the old ways of doing risk assessment just don’t work anymore. You know what I mean? Those quarterly checklists and vulnerability scans that made us feel secure? They’re practically… Read More "What Makes an Asset Risk Assessment Effective in a Threat-Driven World?"
But it’s not just the description field that can hold malicious instructions, the attack surface extends to all the information generated by MCP servers, which includes items like function names, parameters, parameter defaults, required fields and types. MCP servers also… Read More "Top 10 MCP vulnerabilities: The hidden risks of AI integrations"
A data leak occurs when sensitive data exposures are overlooked, either due to a security vulnerability or stolen data being unknowingly published on the dark web. Because digital transformation is rapidly expanding attack surfaces, these events are getting harder to… Read More "How to Detect Data Leakage (Full Guide)"
Jul 23, 2025Ravie LakshmananVulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on July 22, 2025, added two Microsoft SharePoint flaws, CVE-2025-49704 and CVE-2025-49706, to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.… Read More "CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks"
Supplier risk is a top contributor to data breaches. On average, a single data breach costs companies $4.9 million, according to the 2024 Cost of a Data Breach Report by IBM. To counteract this growing threat, many organizations are investing… Read More "11 Best Vendor Risk Management Software Solutions (2025 Edition)"
However, he added, “policies that penalize victims will inadvertently lead to underreporting of incidents, driving payments underground, and hindering intelligence gathering and law enforcement efforts. It’s also a punitive measure on victims already suffering financial loss.” Robin Brattel, CEO of… Read More "UK proposal would forbid ransom payments by gov’t agencies, but will it meaningfully decrease ransomware attacks?"
Australia’s financial regulator has launched legal action against financial services firm Fortnum Private Wealth for allegedly exposing its clients to unacceptable cybersecurity risks. The Australian Securities and Investments Commission (ASIC) filed proceedings against the financial advisory company in the New… Read More "Australian Regulator Alleges Financial Firm Exposed Clients to Unaccep"
A threat actor claiming to have launched a new ransomware-as-a-service (RaaS) venture is leveraging AI chatbots in its negotiation panel to automate communication and apply psychological pressure on victims. In June 2025, a ransomware actor known by the alias $$$… Read More "Ransomware Group Uses AI Chatbot to Intensify Pressure on Victims"
Mexican organizations are still being targeted by threat actors to deliver a modified version of AllaKore RAT and SystemBC as part of a long-running campaign. The activity has been attributed by Arctic Wolf Labs to a financially motivated hacking group… Read More "Credential Theft and Remote Access Surge as AllaKore, PureRAT, and Hijack Loader Proliferate"
Living Security, the global leader in Human Risk Management (HRM), today released the 2025 State of Human Cyber Risk Report, an independent study conducted by leading research firm Cyentia Institute. The report provides an unprecedented look at behavioral risk inside organizations and reveals… Read More "New Report Reveals Just 10% of Employees Drive 73% of Cyber Risk"
