SolarWinds Web Help Desk Vulnerability Enables Unauthenticated RCE
SolarWinds has released an urgent security advisory for a critical vulnerability in its Web Help Desk software that could allow an unauthenticated attacker to achieve…
Month: September 2025
Microsoft Publishes Guide for Certificate-Based Authentication in Windows Admin Center
Microsoft has released comprehensive guidance for implementing certificate-based authentication in Windows Admin Center (WAC), providing administrators with enhanced security through smart card integration and Active…
2/3 Orgs Extremely Concerned About Identity Attacks Yet Major Blind Spots Persist
Austin, Texas, USA, September 23rd, 2025, CyberNewsWire New SpyCloud 2025 Identity Threat Report reveals dangerous disconnect between perceived security readiness and operational reality. SpyCloud, the…
Digital ID risks turning UK into ‘Checkpoint Britain’
Proposals for mandatory digital ID have gained traction with alarming speed, with Keir Starmer now confirming he is considering implementing a digital ID scheme as…
All Microsoft Entra Tenants Were Exposed to Silent Compromise via Invisible Actor Tokens: Researcher
The strength of responsible disclosure is that it can solve problems before they are actioned. The weakness is that it potentially generates a false sense…
A suspected Scattered Spider member suspect detained for casino network attacks
A suspected Scattered Spider member suspect detained for casino network attacks Pierluigi Paganini September 23, 2025 A suspected Scattered Spider member linked to cyber attacks…
EV Charging Provider Confirm Data Breach
Digital Charging Solutions GmbH (DCS), a leading provider of white-label charging services for automotive OEMs and fleet operators, has confirmed a data breach affecting a…
How to Use 1Password’s Travel Mode at the Border (2025)
Enter VeraCrypt. It’s a free, open source encryption app that can encrypt full drives, as well as operating system partitions, similar to BitLocker or FileVault.…
Zloader Malware Used as Gateway for Ransomware Deployment in Corporate Networks
Zloader, a sophisticated Zeus-based modular trojan that first emerged in 2015, has undergone a significant transformation from its original banking-focused purpose to become a dangerous…
Inc Ransomware Claims 5.7 TB of Data Theft at Pennsylvania Attorney General
The notorious Inc ransomware group has taken responsibility for an August 2025 data breach at the Pennsylvania Attorney General’s office. According to cybersecurity researchers at…
Blackdot Videris Automate uses AI to speed OSINT, risk detection, and decision-making
Blackdot Solutions unveiled Videris Automate, a platform that delivers new AI capabilities to automate investigations and screening processes. The launch marks a step-change in how…
‘Our worst day’: The untold story of the Electoral Commission cyber attack
Your worst day can begin so innocuously – you leave home, you stop to pick up your coffee order, you catch your train, or maybe…