Zero-trust is redefining cyber security in 2025
Cyber security has long been likened to building a fortress: thick walls, watchtowers, and a moat separating the inside from the outside. This perimeter-focused approach…
Month: May 2025
Critical Dell PowerStore T Vulnerability Allows Full System Compromise
As part of its ongoing commitment to product security, Dell Technologies has released a significant update for the PowerStore T family, remediating a series of…
Microsoft unveils “centralized” software update tool for Windows
Microsoft is looking to streamline the software updating process for IT admins and users by providing a Windows-native update orchestration platform, and to help organizations…
AI and compliance: Staying on the right side of law and regulation
Regulations and legal frameworks for artificial intelligence (AI) currently lag behind the technology’s uptake. The rise of generative AI (GenAI) has pushed artificial intelligence to…
Victoria’s Secret Website Taken Offline After Cyberattack
Lingerie retailer Victoria’s Secret has fallen victim to a cyberattack that forced it to take its website down on Wednesday. The site remains offline at…
China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware
China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware Pierluigi Paganini May 29, 2025 Google says China-linked group APT41 controlled malware via…
Victoria’s Secret takes down website after security incident
IMAGE: ROWANLOVESCARS (CC BY-SA 4.0) Fashion giant Victoria’s Secret has taken down its website and some store services because of an ongoing security incident. Victoria’s…
CISA Releases Dedicated SIEM & SOAR Guide for Cybersecurity Professionals
Security Information and Event Management (SIEM) platforms are essential for detecting, analyzing, and responding to cybersecurity threats in real time. However, the effectiveness of a…
DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints
The threat actors behind the DragonForce ransomware gained access to an unnamed Managed Service Provider’s (MSP) SimpleHelp remote monitoring and management (RMM) tool, and then…
AI compliance: Dealing with data change and proliferation
In this podcast, we talk to Mathieu Gorge, CEO of Vigitrust, about the compliance risks posed by data during artificial intelligence (AI) processing, and training…
Adidas Data Breach Linked to Third-Party Vendor
Sneaker and sportswear giant Adidas disclosed a data breach this week after hackers accessed a “third-party customer service provider” and stole the contact information of…
The US Is Storing Migrant Children’s DNA in a Criminal Database
The United States government has collected DNA samples from upwards of 133,000 migrant children and teenagers—including at least one 4-year-old—and uploaded their genetic data into…