News

Mandiant revealed that Chinese espionage actor UNC3886 has deployed modified versions of the TinyShell backdoor across multiple Juniper OS routers

Microsoft has fixed seven zero-days this Patch Tuesday, including one not currently being actively exploited

The UK’s cybersecurity sector added thousands of workers and over £1bn in revenue in 2024

Just 57 CVEs to contend with (plus advisories), but six are already under exploit in the wild

Former CISA Director Jen Easterly writes about a new international intelligence sharing co-op:

Historically, China, Russia, Iran & North Korea have cooperated to some extent on military and intelligence matters, but differences in language, culture, politics & technological sophistication have hindered deeper collaboration, including in cyber. Shifting geopolitical dynamics, however, could drive these states toward a more formalized intell-sharing partnership. Such a “Four Eyes” alliance would be motivated by common adversaries and strategic interests, including an enhanced capacity to resist economic sanctions and support proxy conflicts.

Blind Eagle has been running campaigns targeting the Colombian government with malicious .url files and phishing attacks

New York sues Allstate over data breach, alleging security failures that exposed the driver’s license numbers of nearly 200,000 individuals

Mimecast found that insider threats, credential misuse and user-driven errors were involved in most security incidents last year

The US Cybersecurity and Infrastructure Security Agency (CISA) has added five new flaws in Ivanti and VeraCore products to its Known Exploited Vulnerabilities catalog

More than 14,500 girls from across the UK took part in this year’s CyberFirst Girls competition