Tariffs could cost Meta $8bn in extra datacentre costs
As the company boosts its investment in infrastructure for artificial intelligence (AI), Meta’s latest earnings call has painted a bleak picture for software developers. The…
Month: May 2025
Securing Multi-Cloud Environments – CISO Resource Blueprint
The multi-cloud landscape has transformed enterprise IT, with over 87% of organizations now operating across multiple cloud platforms. This distributed approach delivers flexibility and resilience…
95% of AppSec Fixes Don’t Reduce Risk
For over a decade, application security teams have faced a brutal irony: the more advanced the detection tools became, the less useful their results proved…
The year of the ESL in UK retail
The need to find efficiencies, drive staff productivity and boost the in-store customer experience – not to mention ongoing efforts to try new things in…
Ruby on Rails Vulnerability Let Bypass CSRF Protections
Security experts revealed a critical vulnerability in Ruby on Rails that allows attackers to bypass Cross-Site Request Forgery (CSRF) protections. The flaw, disclosed on April…
The Quantum Threat Is Closer Than You Think: Why Critical Infrastructure Must Act Now
For decades, our digital world has relied on cryptography to keep secrets safe. From the passwords we type into banking apps to the encrypted communications…
Is the Investigatory Powers Tribunal powerless?
According to a recent finding by a panel of five tribunal judges, the Investigatory Powers Tribunal (IPT) has no statutory powers to impose financial sanctions…
Hive0117 group targets Russian firms with new variant of DarkWatchman malware
Hive0117 group targets Russian firms with new variant of DarkWatchman malware Pierluigi Paganini May 01, 2025 Hive0117 targets Russian firms in multiple sectors with phishing…
Oracle VirtualBox Vulnerability Exposes Systems to Privilege Escalation Attacks
A critical security flaw in Oracle VM VirtualBox (CVE-2024-21113) has been patched after researchers discovered it could allow local attackers to escalate privileges and compromise…
Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach
May 01, 2025Ravie LakshmananZero-Day / Threat Intelligence Enterprise data backup platform Commvault has revealed that an unknown nation-state threat actor breached its Microsoft Azure environment…
Two SonicWall SMA100 flaws actively exploited in the wild
Two SonicWall SMA100 flaws actively exploited in the wild Pierluigi Paganini May 01, 2025 SonicWall confirmed that threat actors actively exploited two vulnerabilities impacting its…
How CISOs Can Balance Innovation and Security in a Digital-First World
In today’s fast-paced digital landscape, CISOs play a pivotal role in organizational success, navigating the critical balance of innovation vs security in a digital-first world.…