A sophisticated and widespread Request for Quote (RFQ) scam using net financing terms has been uncovered by threat researchers. The scam targets businesses with fake procurement requests to fraudulently obtain high-value electronics, medical devices and other goods. According to an advisory… Read More "Widespread Net RFQ Scam Targets High-Value Goods"
Jul 22, 2025Ravie LakshmananVulnerability / Threat Intelligence Microsoft has formally tied the exploitation of security flaws in internet-facing SharePoint Server instances to two Chinese hacking groups called Linen Typhoon and Violet Typhoon as early as July 7, 2025, corroborating earlier… Read More "Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups"
What follows is the CISO Code of Conduct. It’s not a checklist, but a mindset. If you recognize yourself in it, good. If you don’t, maybe it’s time to ask why. Either way, this is the bar. Let’s hold it.… Read More "The CISO code of conduct: Ditch the ego, lead for real"
A new wave of targeted phishing attacks exploiting Microsoft 365’s OAuth workflows has been uncovered by cybersecurity experts. These campaigns, observed by Volexity since March 2025, involve Russian-linked threat actors impersonating European diplomats and Ukrainian officials. The emails try to… Read More "Russian Threat Actors Target NGOs with New OAuth Phishing Tactics"
Jul 22, 2025Ravie LakshmananNetwork Security / Vulnerability Cisco on Monday updated its advisory of a set of recently disclosed security flaws in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) to acknowledge active exploitation. “In July 2025, the… Read More "Cisco Confirms Active Exploits Targeting ISE Flaws Enabling Unauthenticated Root Access"
Popular configuration packages for integrating Prettier with ESLint, the widely used code formatting tools within JavaScript and TypeScript projects, were hijacked after a maintainer fell victim to a phishing scheme. According to a Socket observation, packages like eslint-config-prettier and eslint-plugin-prettier… Read More "Prettier-ESLint npm packages hijacked in a sophisticated supply chain attack"
Microsoft has confirmed three Chinese-based threat groups have been actively exploiting CVE-2025-53770 and CVE-2025-53771, two critical and high-severity vulnerabilities in internet-facing SharePoint servers. The chained exploitation of these two bugs has been dubbed ‘ToolShell’ by the cybersecurity community. In a… Read More "SharePoint ‘ToolShell’ Vulnerabilities Exploited by Chinese Hackers"
Making the move from managing a security operations center (SOC) to being a chief information security officer (CISO) is a significant career leap. Not only do you need a solid foundation of tech knowledge but also leadership skills and business… Read More "How to Advance from SOC Manager to CISO?"
Evolution from ransomware to pure extortion World Leaks represents a significant shift in the ransomware ecosystem, moving away from file encryption toward pure data extortion. The group is a rebrand of Hunters International, which launched in late 2023 and claimed… Read More "Dell demonstration platform breached by World Leaks extortion group"
The UK government has confirmed it is pressing ahead with a proposed ban on ransomware payments by public sector and critical national infrastructure (CNI) organizations. This follows three-quarters of respondents showing support for the proposals during a public consultation that… Read More "UK Confirms Ransomware Payment Ban for Public Sector and CNI"
