Stop waiting on NVD — get real-time vulnerability alerts now
In today’s fast-paced digital environment, cybersecurity is no longer optional – it’s essential. Vulnerability management has become a core component of every security strategy and…
Month: September 2025
Microsoft Fixes Windows 11 24H2 Audio Issue that Stops Bluetooth Headsets and Speakers Working
Microsoft has resolved a significant audio bug in Windows 11 version 24H2 that prevented Bluetooth headsets and speakers from functioning correctly on certain devices. The…
Phishing Campaigns Exploit RMM Tools to Sustain Remote Access
A sophisticated phishing operation in which attackers deploy remote monitoring and management (RMM) tools—ITarian (formerly Comodo), PDQ Connect, SimpleHelp, and Atera—to gain persistent remote access…
MI5 unlawfully monitored the phone of BBC journalist Vincent Kearney
The Security Service MI5 has admitted to unlawfully spying on the phone of former BBC investigative journalist Vincent Kearney. The Investigatory Powers Tribunal (IPT) heard…
When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise
Earlier this week, Aikido Security disclosed what is being described as the largest npm supply chain compromise to date. Attackers successfully injected malicious code into…
Microsoft fixes Windows 11 audio issues confirmed in December
Microsoft has removed a safeguard hold that prevented some users from upgrading their systems to Windows 11 24H2 due to compatibility issues that were causing…
Hackers Using Generative AI ‘ChatGPT’ to Evade Anti-virus Defenses
In mid-July 2025, a novel campaign emerged in which cybercriminals weaponized generative AI to fabricate deepfake images of government IDs, embedding them within spear-phishing messages…
Sidewinder Hackers Weaponize Nepal Protests to Spread Cross-Platform Malware
Sidewinder, a well-known advanced persistent threat (APT) group, has adapted its tactics to exploit the ongoing protests in Nepal, deploying a coordinated campaign of mobile…
Terra Security Raises $30 Million for AI Penetration Testing Platform
Israeli cybersecurity startup Terra Security today announced raising $30 million in a Series A funding round that brings the total raised by the company to…
Microsoft says Windows September updates break SMBv1 shares
Microsoft has confirmed that the September 2025 Windows security updates are causing connection issues to Server Message Block (SMB) v1 shares. The list of platforms…
AI Red Teaming Tool “Red AI Range” Discovers, Analyze, and Mitigate Vulnerabilities
Red AI Range (RAR), an open-source AI red teaming platform, is transforming the way security professionals assess and harden AI systems. Designed to simulate realistic…
Preparing for the EU’s DORA amidst Technical Controls Ambiguity
The financial sector is bracing for a significant shift in its digital landscape as the EU’s Digital Operational Resilience Act (DORA) prepares to take effect…