Repeated Firmware Key-Management Failures Undermine Intel Boot Guard and UEFI Secure Boot
13
May
2025

Repeated Firmware Key-Management Failures Undermine Intel Boot Guard and UEFI Secure Boot

The security of fundamental technologies like Intel Boot Guard and UEFI Secure Boot has been seriously questioned due to persistent…

cybernewswire
13
May
2025

INE Security Alert: Top 5 Takeaways from RSAC 2025

Cary, North Carolina, May 13th, 2025, CyberNewsWire Comprehensive Training Platform Delivers Solutions for AI Security, Cloud Management, and Incident Response…

Evidence reveals Post Office scandal victims short-changed in compensation payouts
13
May
2025

Evidence reveals Post Office scandal victims short-changed in compensation payouts

Victims of the Post Office Horizon scandal who settled their financial redress claims without legal advice have received £137,000 more…

EUVD vulnerability database
13
May
2025

EU Vulnerability Database Officially Launches

The European Union’s vulnerability database, under development since the release of the NIS2 Directive in December 2022, has officially launched….

Recurring Supply‑Chain Lapses Expose UEFI Firmware to Pre‑OS Threats
13
May
2025

Recurring Supply‑Chain Lapses Expose UEFI Firmware to Pre‑OS Threats

A disturbing pattern of security failures in the firmware supply chain continues to expose millions of devices to pre-OS threats,…

Cobalt Strike 4.11.1 Released With SSL Checkbox Fix
13
May
2025

Cobalt Strike 4.11.1 Released With SSL Checkbox Fix

Cobalt Strike has announced the release of version 4.11.1, an out-of-band update addressing several critical issues discovered in the previous…

NHS trust cloud plans hampered by Trump tariff uncertainty
13
May
2025

NHS trust cloud plans hampered by Trump tariff uncertainty

A plan by Essex-based Princess Alexandra Hospital NHS Trust (PAH) to move some capacity to Nutanix cloud-based services is blocked…

F5 BIG-IP Command Injection Vulnerability Let Attackers Execute Arbitrary System Commands
13
May
2025

F5 BIG-IP Command Injection Vulnerability Let Attackers Execute Arbitrary System Commands

F5 Networks has disclosed a high-severity command injection vulnerability (CVE-2025-31644) in its BIG-IP products running in Appliance mode.  The vulnerability…

Attackers Leverage Unpatched Output Messenger 0‑Day to Deliver Malicious Payloads
13
May
2025

Attackers Leverage Unpatched Output Messenger 0‑Day to Deliver Malicious Payloads

A Türkiye-affiliated espionage threat actor, tracked by Microsoft Threat Intelligence as Marbled Dust (also known as Sea Turtle and UNC1326),…

A practitioner’s guide to classifying every asset in your attack surface
13
May
2025

A practitioner’s guide to classifying every asset in your attack surface

TLDR: This article details methods and tools (from DNS records and IP addresses to HTTP analysis and HTML content) that…

Malaysia urged to curb power theft by cryptocurrency miners with tougher laws
13
May
2025

Malaysia urged to curb power theft by cryptocurrency miners with tougher laws

More than US$100 million in losses incurred by Malaysia over the past five years due to power theft by illegal…

Researchers Uncover Remote IT Job Fraud Scheme Involving North Korean Nationals
13
May
2025

Researchers Uncover Remote IT Job Fraud Scheme Involving North Korean Nationals

The United States indicted fourteen North Korean nationals for orchestrating a sophisticated scheme to secure remote IT jobs at American…