Security Theater or Real Defense? The KPIs That Tell the Truth
A critical step in maturing any cybersecurity program is the ability to measure and report on its performance. Yet measuring cybersecurity remains notoriously difficult, often…
Category: SecurityWeek
Marlboro-Chesterfield Pathology Data Breach Impacts 235,000 People
Marlboro-Chesterfield Pathology (MCP), a full service anatomic pathology lab in North Carolina, was recently targeted in a ransomware attack that resulted in many personal information…
Marks & Spencer Expects Ransomware Attack to Cost $400 Million
UK retailer Marks & Spencer (MKS.L) has shared another update on the impact of the recent cyberattack, and the company estimates that the incident will…
Taming the Hacker Storm: Why Millions in Cybersecurity Spending Isn’t Enough
According to the AV-TEST Institute, more than 450,000 new malicious applications are found every day, illustrating the rapid rate of malware spread. Despite substantial investments…
Cisco Patches High-Severity DoS, Privilege Escalation Vulnerabilities
Cisco on Wednesday published 10 security advisories detailing over a dozen vulnerabilities across its products, including two high-severity flaws in its Identity Services Engine (ISE)…
GitLab, Atlassian Patch High-Severity Vulnerabilities
GitLab and Atlassian this week announced the release of patches for over a dozen vulnerabilities across their product portfolios, including multiple high-severity bugs. On Tuesday,…
CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine
The US government’s cybersecurity agency CISA is sounding the alarm over what it calls an “elevated threat” from Russia’s military-intelligence hackers, warning that Unit 26165…
Microsoft Sinkholes Domains, Disrupts Notorious ‘Lumma Stealer’ Malware Operation
Microsoft and global law enforcement agencies on Wednesday announced the takedown of “Lumma Stealer” malware operation, seizing 2,300 domains that formed the infostealer’s command-and-control backbone…
Critical Flaw Allows Remote Hacking of AutomationDirect Industrial Gateway
MB-Gateway devices made by industrial automation firm AutomationDirect are exposed to remote attacks — including directly from the internet — due to a critical vulnerability.…
Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users
When Coinbase said last week that it had refused to pay a $20 million ransom tied to an insider leak, the company estimated the data…
Up to 25% of Internet-Exposed ICS Are Honeypots: Researchers
An analysis conducted by researchers at the Norwegian University of Science and Technology Gjøvik and the Delft University of Technology in the Netherlands showed that…
Wiz Warns of Ongoing Exploitation of Recent Ivanti Vulnerabilities
Cybersecurity firm Wiz says threat actors are actively exploiting in the wild two recently patched Ivanti Endpoint Manager Mobile (EPMM) vulnerabilities. Tracked as CVE-2025-4427 and…