CISOs are juggling security, responsibility, and burnout
This article gathers excerpts from multiple reports, presenting statistics and insights that may be valuable for CISOs, helping them with informed decision-making, risk management, and…
Month: January 2025
Coles’ people and culture GM moves on – Leadership
Coles’ people and culture operations general manager, Tammy Ryder, has shifted to shopping centre operator Vicinity Centres after nearly eight years with the retail giant.…
Australian Unity is ramping up an enterprise automation drive – Financial Services – Software
Australian Unity has created a library of reusable services that it is leveraging to develop a series of applications to improve processes and create better…
Critical zero-days impact premium WordPress real estate plugins
The RealHome theme and the Easy Real Estate plugins for WordPress are vulnerable to two critical severity flaws that allow unauthenticated users to gain administrative…
organizers awarded $382,750 for 16 zero-days
Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero-days Pierluigi Paganini January 22, 2025 Trend Micro’s Zero Day Initiative (ZDI) announced that $380K…
Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizations
Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizations Pierluigi Paganini January 22, 2025 Two ransomware groups exploiting Microsoft 365…
Cloudflare CDN flaw leaks user location data, even through secure chat apps
A security researcher discovered a flaw in Cloudflare’s content delivery network (CDN), which could expose a person’s general location by simply sending them an image on…
Telegram captcha tricks you into running malicious PowerShell scripts
Threat actors on X are exploiting the news around Ross Ulbricht to direct unsuspecting users to a Telegram channel that tricks them into run PowerShell…
Zendesk’s Subdomain Registration Exposed to Phishing, Pig Butchering Scams
CloudSEK uncovers a Zendesk vulnerability allowing cybercriminals to exploit subdomains for phishing and investment scams. Learn about the risks and needed fixes. Cybersecurity researchers at…
LinkedIn sued for disclosing customer information to train AI models – Software
Microsoft’s LinkedIn has been sued by Premium customers who said the business-focused social media platform disclosed their private messages to third parties without permission to…
Meta backs data analytics firm Databricks – Software
Databricks said Meta Platforms had joined as an investor in a US$10 billion (A$16 billion) funding round intended to fuel the data analytics startup’s expansion…
Security Vendor Account Credentials Found On Dark Web
Account credentials from some of the biggest cybersecurity vendors can be purchased on dark web marketplaces, according to a Cyble report published today. While most…