News

Security flaws in government apps go unpatched for years

Application Security, cybersecurity, News, report, software, survey, Veracode /

Security flaws in government apps go unpatched for years 2025-06-13 at 08:02 By Help Net Security 78% of public sector organizations are operating with significant security debt, flaws left unaddressed for more than a year, according to Veracode. 55% are burdened with ‘critical’ security debt, representing long-standing vulnerabilities with severe risk potential. Public sector flaw […]

Security flaws in government apps go unpatched for years Read More »

19 ways to build zero trust: NIST offers practical implementation guide

AppOmni, cybersecurity, News, NIST, strategy, tips, zero trust /

19 ways to build zero trust: NIST offers practical implementation guide 2025-06-13 at 07:32 By Sinisa Markovic The National Institute of Standards and Technology (NIST) has released a new guide that offers practical help for building zero trust architectures (ZTA). The guidance, titled Implementing a Zero Trust Architecture (SP 1800‑35), includes 19 example setups using

19 ways to build zero trust: NIST offers practical implementation guide Read More »

New infosec products of the week: June 13, 2025

Contrast Security, Cymulate, Lemony, News, SpecterOps, Thales, Vanta /

New infosec products of the week: June 13, 2025 2025-06-13 at 07:00 By Sinisa Markovic Here’s a look at the most interesting products from the past week, featuring releases from Contrast Security, Cymulate, Lemony, SpecterOps, Thales, and Vanta. Lemony mitigates privacy and compliance risks associated with cloud-based AI With Lemony, different teams can run their

New infosec products of the week: June 13, 2025 Read More »

LockBit panel data leak shows Chinese orgs among the most targeted

China, cybercriminals, Don't miss, Hot stuff, manufacturing sector, News, Positive Technologies, Ransomware, Russian Federation, Taiwan, Trellix, USA /

LockBit panel data leak shows Chinese orgs among the most targeted 2025-06-12 at 17:17 By Zeljka Zorz The LockBit ransomware-as-a-service (RaaS) operation has netted around $2.3 million USD within 5 months, the data leak stemming from the May 2025 hack of a LockBit affiliate panel has revealed. From that sum, the operators took their 20%

LockBit panel data leak shows Chinese orgs among the most targeted Read More »

Identifying high-risk APIs across thousands of code repositories

API security, cybersecurity, data, Don't miss, Features, Hot stuff, News, opinion, StackHawk /

Identifying high-risk APIs across thousands of code repositories 2025-06-12 at 16:02 By Mirko Zorz In this Help Net Security interview, Joni Klippert, CEO of StackHawk, discusses why API visibility is a major blind spot for security teams, how legacy tools fall short, and how StackHawk identifies risky APIs and sensitive data directly from code before

Identifying high-risk APIs across thousands of code repositories Read More »

Cybercriminals are turning stolen data into a thriving black market

cybercrime, cybersecurity, Europol, law enforcement, News, report /

Cybercriminals are turning stolen data into a thriving black market 2025-06-12 at 09:18 By Help Net Security Cybercriminals are stealing data and running full-scale businesses around it. Europol’s latest Internet Organised Crime Threat Assessment (IOCTA) report reveals how personal data is now a core currency in the underground economy. Data is the product Cybercriminals go

Cybercriminals are turning stolen data into a thriving black market Read More »

Want fewer security fires to fight? Start with threat modeling

CISO, cyber resilience, cybersecurity, Cymulate, Don't miss, Features, Hot stuff, News, Risk Management, security ROI, Silent Push, SpecterOps, strategy, threat modeling, tips /

Want fewer security fires to fight? Start with threat modeling 2025-06-12 at 09:01 By Mirko Zorz CISOs understand that threat modeling helps teams identify risks early and build safer systems. But outside the security org, the value isn’t always clear. When competing for budget or board attention, threat modeling often loses out to more visible

Want fewer security fires to fight? Start with threat modeling Read More »

Build a mobile hacking rig with a Pixel and Kali NetHunter

cybersecurity, Don't miss, hardware, Hot stuff, Kali Linux, mobile devices, News, OffSec, penetration testing /

Build a mobile hacking rig with a Pixel and Kali NetHunter 2025-06-12 at 08:32 By Mirko Zorz A cybersecurity hobbyist has built a compact, foldable mobile hacking rig that runs Kali NetHunter on a Google Pixel 3 XL. It’s called the NetHunter C-deck, and it packs serious functionality into a small, 3D-printed shell. NetHunter C-deck

Build a mobile hacking rig with a Pixel and Kali NetHunter Read More »

CISOs call for operational threat intelligence integration

CISO, cybersecurity, News, report, strategy, Threat Intelligence, Trellix /

CISOs call for operational threat intelligence integration 2025-06-12 at 08:05 By Help Net Security 98% of CISOs face challenges when using threat intelligence, according to Trellix. The biggest problems are keeping up with changing threats, integration difficulties, and regulatory rules. As a result, threat intelligence defaults to a reactive function within a workstream, rather than

CISOs call for operational threat intelligence integration Read More »

Email security risks healthcare IT can’t afford to ignore

cybersecurity, email security, healthcare, News, Paubox, report /

Email security risks healthcare IT can’t afford to ignore 2025-06-12 at 07:32 By Help Net Security 92% of healthcare IT leaders say they’re confident in their ability to prevent email-based data breaches, but according to Paubox, they’re not. Healthcare compliance confidence gap Email remains one of the biggest security risks in healthcare. Outdated systems and

Email security risks healthcare IT can’t afford to ignore Read More »

Infostealer crackdown: Operation Secure takes down 20,000 malicious IPs and domains

arrest, cybercrime, Don't miss, Government, Group-IB, Interpol, Kaspersky, law enforcement, News, Trend Micro /

Infostealer crackdown: Operation Secure takes down 20,000 malicious IPs and domains 2025-06-11 at 20:46 By Help Net Security More than 20,000 malicious IP addresses and domains used by information-stealing malware were taken down during an international cybercrime crackdown led by INTERPOL. Called Operation Secure, the effort ran from January to April 2025 and involved law

Infostealer crackdown: Operation Secure takes down 20,000 malicious IPs and domains Read More »

Connectwise is rotating code signing certificates. What happened?

certificates, ConnectWise, CyberProof, Don't miss, Hot stuff, LUMU, News, security update /

Connectwise is rotating code signing certificates. What happened? 2025-06-11 at 17:48 By Zeljka Zorz Connectwise customers who use the company’s ScreenConnect, Automate, and ConnectWise RMM solutions are urged to update all agents and/or validate that the update has been deployed by Friday, June 13 at 8:00 p.m. ET, or risk disruptions. The reason for the

Connectwise is rotating code signing certificates. What happened? Read More »

Trustwise protects AI deployments from security risks

News, Trustwise /

Trustwise protects AI deployments from security risks 2025-06-11 at 16:17 By Industry News Trustwise introduced Harmony AI, a runtime trust layer and control tower designed for enterprises deploying fleets of generative and agentic AI systems. Harmony AI embeds “trust as code” directly into AI systems, empowering CISOs, developers, and AI leaders to shield their AI

Trustwise protects AI deployments from security risks Read More »

Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)

Adobe, Akamai, Check Point, Don't miss, Hot stuff, magento, Microsoft, MS Office, News, Patch Tuesday, security update, Tenable, Windows, Windows Server /

Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053) 2025-06-11 at 14:16 By Zeljka Zorz For June 2025 Patch Tuesday, Microsoft has fixed 66 new CVEs, including a zero-day exploited in the wild (CVE-2025-33053). Also, Adobe Commerce and Magento Open Source users are urged to update quickly. About CVE-2025-33053 CVE-2025-33053 is a remote code execution vulnerability

Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053) Read More »

OWASP Nettacker: Open-source scanner for recon and vulnerability assessment

cybersecurity, Don't miss, GitHub, News, open source, OWASP, scanning, software, vulnerability assessment /

OWASP Nettacker: Open-source scanner for recon and vulnerability assessment 2025-06-11 at 09:01 By Mirko Zorz OWASP Nettacker is a free, open-source tool designed for network scanning, information gathering, and basic vulnerability assessment. Built and maintained by the OWASP community, Nettacker helps security pros automate common tasks like port scanning, service detection, and brute-force attacks. It

OWASP Nettacker: Open-source scanner for recon and vulnerability assessment Read More »

The path to better cybersecurity isn’t more data, it’s less noise

Artificial Intelligence, cybersecurity, data, Don't miss, News, SOC, strategy, tips /

The path to better cybersecurity isn’t more data, it’s less noise 2025-06-11 at 08:31 By Sinisa Markovic In cybersecurity, there’s an urge to collect as much data as possible. Logs, alerts, metrics, everything. But more data doesn’t necessarily translate to better security. SOCs deal with tens of thousands of alerts every day. It’s more than

The path to better cybersecurity isn’t more data, it’s less noise Read More »

How to build AI into your business without breaking compliance

Artificial Intelligence, automation, CISO, Cloud Security Alliance, cybersecurity, Don't miss, News, strategy, tips /

How to build AI into your business without breaking compliance 2025-06-11 at 08:02 By Mirko Zorz AI is supposed to make businesses faster, smarter, and more competitive, but most projects fall short. The Cloud Security Alliance (CSA) says the real issue is companies cramming AI into old, rigid processes that just can’t keep up. “AI

How to build AI into your business without breaking compliance Read More »

AI forces IT leaders to rethink their network strategies

Artificial Intelligence, Cisco, digital transformation, network, News, report, survey /

AI forces IT leaders to rethink their network strategies 2025-06-11 at 07:42 By Help Net Security As AI assistants, agents, and data-driven workloads reshape how work gets done, they’re creating more latency-sensitive, and more complex network traffic, according to Cisco. Cisco research highlights Combined with the ubiquity of connected devices, 24/7 uptime demands, and security

AI forces IT leaders to rethink their network strategies Read More »

Scroll to Top