The Latest
-
Financial gain still drives majority of cyber threat activity
Stolen credentials are becoming a more prevalent form of initial access, a report from Mandiant shows.
-
AI impact on data breach outcomes remains ‘limited’: Verizon
While AI-generated text in malicious emails has doubled, the rate of successful phishing breaches is stable.
-
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
CISA’s Secure by Design initiative in limbo after key leaders resign
Companies have been urging CISA to scale back its software security pressure campaign. Two new resignations from the agency could accelerate that shift.
-
Conduent warns January breach impacted a ‘significant’ number of people
The company incurred a material amount of nonrecurring expenses during Q1 related to potential notification requirements.
-
Banks gear up to boost cybersecurity, cloud and data spending
In the race to scale generative AI capabilities, executives plan to increase foundational technology investments, according to Broadridge.
-
Microsoft strengthens in-house cyber governance, training
The technology giant, as part of its Secure Future Initiative program, has overhauled security practices following a series of crippling nation-state-linked cyberattacks.
-
Researchers warn of critical flaw found in Erlang OTP SSH
The CVE could allow unauthenticated attackers to gain full access to a device. Many of these devices are widely used in IoT and telecom platforms.
-
Opinion
Gartner: How to build a secure enterprise cloud environment
There are plenty of frameworks, tools and strategies to help map out a risk-resilient cloud infrastructure.
-
Ahold Delhaize confirms data stolen after threat group claims credit for November attack
A highly active threat group says it will release stolen information, months after an attack disrupted e-commerce operations at the grocer’s U.S. business.
-
Lemonade says applicant driver’s license numbers exposed
The company is notifying about 190,000 people after certain information used for car insurance quotes was left unencrypted.
-
CISA warns companies to secure credentials amid Oracle Cloud breach claims
The agency is asking organizations to come forward if they detect suspicious activity or other evidence of a compromise.
-
Older SonicWall SMA100 vulnerability exploited in the wild
CISA added the high-severity flaw, initially disclosed in 2021, to its known exploited vulnerabilities catalog this week.
-
Bill extends cyber threat info-sharing between public, private sector
The Cybersecurity Information Sharing Act of 2015, set to expire in September, “moved the needle.”
-
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
CISA launches new wave of job cuts
Critics warn that drastic downsizing of the DHS unit will threaten the nation’s ability to counter cyber adversaries.
-
Mitre CVE program regains funding as renewal deal reached
The information security industry feared a lapse would lead to industrywide exposures of software vulnerabilities.
-
Hertz says personal data breached in connection with Cleo file-transfer flaws
The company is the latest organization to investigate or disclose an incident linked to a monthslong attack spree.
-
DaVita hit by ransomware attack
The kidney dialysis firm doesn’t have an estimate for how long disruption from the attack will last, though it stressed patients are still receiving care.
-
Attackers exploit zero-day flaw in Gladinet CentreStack file-sharing platform
Critical vulnerability affects both CentreStack and Gladinet’s on-premises file-sharing server, Triofox.
-
Over 14K Fortinet devices compromised via new attack method
Fortinet warned last week that a threat actor was using a novel post-exploitation trick to maintain access to devices after they were patched.
-
Aviation sector faces heightened cyber risks due to vulnerable software, aging tech
A report calls on federal authorities to conduct comprehensive risk assessments and take steps to modernize the air traffic control system.
-
Remote access tools most frequently targeted as ransomware entry points
Supply chain risk via third-party vendors increased sharply last year, according to a report by At-Bay.
-
Fortinet warns of threat activity against older vulnerabilities
Researchers discovered a technique that allows threat actors to maintain read-only access to vulnerable FortiGate devices after they are patched.
-
Windows CLFS zero-day exploited in ransomware attacks
A threat actor tracked as Storm-2460 has used PipeMagic malware to facilitate the attacks.
-
CISA adds Ivanti Connect Secure vulnerability to KEV catalog
CVE-2025-22457 is a critical stack buffer-overflow vulnerability. Ivanti had initially assessed as a low-level product bug that could not be exploited remotely.
-
Sam’s Club investigating attack claim linked to Clop ransomware
The prolific gang is linked to the exploitation of critical flaws in Cleo file transfer software.