News

Cybersecurity jobs available right now: October 28, 2025

Cybersecurity jobs available right now: October 28, 2025 2025-10-28 at 07:12 By Anamarija Pogorelec Analyst, Cybersecurity Threat Intelligence Brookfield Renewable | Canada | On-site – View job details As a Cybersecurity Threat Intelligence Analyst, you will run monthly vulnerability scans across IT and OT environments, track remediation progress, and report results. You will collect and […]

Cybersecurity jobs available right now: October 28, 2025 Read More »

eBook: A quarter century of Active Directory

eBook: A quarter century of Active Directory 2025-10-27 at 16:57 By Help Net Security Active Directory (AD) remains the backbone of enterprise identity and a prime target for attackers. Explore its 25-year history, evolving risks, and how organizations can modernize password security. This eBook shows why AD defenses must evolve and how to stop credential-based

eBook: A quarter century of Active Directory Read More »

Ransomware, extortion groups adapt as payment rates reach historic lows

Ransomware, extortion groups adapt as payment rates reach historic lows 2025-10-27 at 15:12 By Zeljka Zorz Ransomware groups are facing an economic downturn of their own: In Q3 2025, only 23 percent of victims paid a ransom, and for data theft incidents that involved no encryption, the payment rate dropped to just 19 percent, according

Ransomware, extortion groups adapt as payment rates reach historic lows Read More »

72 states sign first global UN Convention against Cybercrime

72 states sign first global UN Convention against Cybercrime 2025-10-27 at 14:32 By Anamarija Pogorelec The world’s first global convention to prevent and respond to cybercrime opened for signature today in Hanoi, Vietnam, and will remain open at United Nations Headquarters in New York until 31 December 2026. Adopted by the UN General Assembly in

72 states sign first global UN Convention against Cybercrime Read More »

Can your earbuds recognize you? Researchers are working on it

Can your earbuds recognize you? Researchers are working on it 2025-10-27 at 09:05 By Mirko Zorz Biometric authentication has moved from fingerprints to voices to facial scans, but a team of researchers believes the next step could be inside the ear. New research explores how the ear canal’s unique acoustic properties can be used to

Can your earbuds recognize you? Researchers are working on it Read More »

DDoS, data theft, and malware are storming the gaming industry

DDoS, data theft, and malware are storming the gaming industry 2025-10-27 at 08:46 By Sinisa Markovic When the pandemic kept people at home in 2020, millions turned to games for an escape. The surge turned every console, PC, and phone into part of a vast online network. More players meant more logins, payments, and personal

DDoS, data theft, and malware are storming the gaming industry Read More »

Dependency-Track: Open-source component analysis platform

Dependency-Track: Open-source component analysis platform 2025-10-27 at 08:46 By Sinisa Markovic Software is a patchwork of third-party components, and keeping tabs on what’s running under the hood has become a challenge. The open-source platform Dependency-Track tackles that problem head-on. Rather than treating software composition as a one-time scan, it continuously monitors every version of every

Dependency-Track: Open-source component analysis platform Read More »

Product showcase: Neo Network Utility makes network checks simple

Product showcase: Neo Network Utility makes network checks simple 2025-10-27 at 08:46 By Anamarija Pogorelec Want to see if a remote server is still alive, or trace the path your data takes across the internet? Network Utility had you covered, until Apple removed it. Network Utility was the go-to macOS app for quick network checks.

Product showcase: Neo Network Utility makes network checks simple Read More »

AI writes code like a junior dev, and security is feeling it

AI writes code like a junior dev, and security is feeling it 2025-10-27 at 08:46 By Anamarija Pogorelec The industry is entering a phase where code is being deployed faster than it can be secured, according to OX Security. Findings from the Army of Juniors: The AI Code Security Crisis report show that AI-generated code

AI writes code like a junior dev, and security is feeling it Read More »

Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors

Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors 2025-10-26 at 11:46 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Most AI privacy research looks the wrong way Most research on LLM privacy has focused on the wrong

Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors Read More »

Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287)

Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287) 2025-10-24 at 15:38 By Zeljka Zorz Microsoft has released an out-of-band security update that “comprehensively” addresses CVE-2025-59287, a remote code execution vulnerability in the Windows Server Update Services (WSUS) that is reportedly being exploited in the wild. About CVE-2025-59287 WSUS is a tool that helps

Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287) Read More »

Microsoft blocks risky file previews in Windows File Explorer

Microsoft blocks risky file previews in Windows File Explorer 2025-10-24 at 15:38 By Zeljka Zorz Along with fixing many code-based vulnerabilities, the October 2025 Windows updates also change how File Explorer handles files downloaded from the internet. The change affects the file management tool’s Preview Pane, which lets users see the contents of a file

Microsoft blocks risky file previews in Windows File Explorer Read More »

What Microsoft’s 2025 report reveals about the new rules of engagement in cyberdefense

What Microsoft’s 2025 report reveals about the new rules of engagement in cyberdefense 2025-10-24 at 10:42 By Anamarija Pogorelec Adversaries are using AI to sharpen attacks, automate operations, and challenge long-standing defenses, according to a new Microsoft report. Researchers describe a year in which criminal and state-backed actors blurred the lines between cybercrime, espionage, and

What Microsoft’s 2025 report reveals about the new rules of engagement in cyberdefense Read More »

Smart helmet tech points to the future of fighting audio deepfakes

Smart helmet tech points to the future of fighting audio deepfakes 2025-10-24 at 10:42 By Sinisa Markovic Voice cloning has become fast, cheap, and convincing. With only a few minutes of recorded speech, generative models can recreate a person’s voice with matching tone, rhythm, and accent. To address that risk, a research team at Texas

Smart helmet tech points to the future of fighting audio deepfakes Read More »

Building trust in AI: How to keep humans in control of cybersecurity

Building trust in AI: How to keep humans in control of cybersecurity 2025-10-24 at 10:42 By Help Net Security In this Help Net Security video, Rekha Shenoy, CEO at BackBox, takes a look at AI in cybersecurity, separating hype from reality. She explains why AI’s true value lies not in replacing human expertise but in

Building trust in AI: How to keep humans in control of cybersecurity Read More »

New infosec products of the week: October 24, 2025

New infosec products of the week: October 24, 2025 2025-10-24 at 10:42 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from Axoflow, Elastic, Illumio, Keycard, Netscout and Rubrik. Axoflow Security Data Layer unifies data pipeline, storage, and analytics for security team Axoflow has launched its Security

New infosec products of the week: October 24, 2025 Read More »

When AI writes code, humans clean up the mess

When AI writes code, humans clean up the mess 2025-10-24 at 10:42 By Anamarija Pogorelec AI coding tools are reshaping how software is written, tested, and secured. They promise speed, but that speed comes with a price. A new report from Aikido Security shows that most organizations now use AI to write production code, and

When AI writes code, humans clean up the mess Read More »

Researchers expose large-scale YouTube malware distribution network

Researchers expose large-scale YouTube malware distribution network 2025-10-23 at 17:37 By Zeljka Zorz Check Point researchers have uncovered, mapped and helped set back a stealthy, large-scale malware distribution operation on YouTube they dubbed the “YouTube Ghost Network.” The network published more than 3,000 videos across compromised or fake channels, luring viewers with game cheats, cracked

Researchers expose large-scale YouTube malware distribution network Read More »

Lanscope Endpoint Manager vulnerability exploited in zero-day attacks (CVE-2025-61932)

Lanscope Endpoint Manager vulnerability exploited in zero-day attacks (CVE-2025-61932) 2025-10-23 at 17:10 By Zeljka Zorz CVE-2025-61932, an “improper verification of source of a communication channel” vulnerability affecting Lanscope Endpoint Manager, has been exploited as a zero-day since April 2025, the Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) warned on Wednesday. According to information received

Lanscope Endpoint Manager vulnerability exploited in zero-day attacks (CVE-2025-61932) Read More »

Wireshark 4.6.0 brings major updates for packet analysis and decryption

Wireshark 4.6.0 brings major updates for packet analysis and decryption 2025-10-23 at 17:10 By Anamarija Pogorelec If you’ve ever used Wireshark to dig into network traffic you know how vital even small upgrades can be. With version 4.6.0 the team behind the open-source network protocol analyzer has added a number of features that could change

Wireshark 4.6.0 brings major updates for packet analysis and decryption Read More »

Scroll to Top