Independent security experts have welcomed what’s billed as the first standardized set of SaaS (software as a service) security controls. The SaaS Security Capability Framework (SSCF), launched this week and backed by the Cloud Security Alliance, is designed to close long-standing gaps in third-party risk management. The framework is designed …
Read More »
In 2025, cyberattacks are increasing in frequency and scale, and 2026 will likely see no relief. New technologies like agentic AI and quantum computing present risks and benefits. Ultimately, humans remain the weakest link and the strongest defense. Experts predict that by 2026, cybercrime could become the world’s third-largest economy …
Read More »
A critical vulnerability with a perfect 10.0 CVSS score in Fortra’s GoAnywhere Managed File Transfer (MFT) solution was exploited as a zero-day for at least a week before a patch was released. CVE-2025-10035 is a command injection vulnerability enabling remote code execution without authentication. Security firm watchTowr noted evidence of …
Read More »
The UK’s National Crime Agency (NCA) has arrested a man in the UK as part of an investigation into a cyber incident impacting Collins Aerospace. The incident, which was reported on 19 September, affected flights at Heathrow and other European airports over the weekend. NCA officers, supported by the South …
Read More »
Cisco Talos researchers have discovered an ongoing espionage campaign since 2022, targeting telecom and manufacturing sectors in Central and South Asia. The campaign uses a new variant of the PlugX backdoor, closely related to the RainyDay and Turian malware families linked to Chinese-speaking APT groups. According to the report, “Cisco …
Read More »
A submarine cable project will enhance the digital infrastructure of the Asia-Pacific region. Covering around 8,000 kilometers underwater, it’s set to be completed by 2028 and will link Japan, Malaysia, Singapore, Indonesia, the Philippines, and Taiwan. This project aims to meet the growing need for data transmission due to the …
Read More »
The U.S. Secret Service dismantled a network of electronic devices located throughout the New York tristate area that were used to conduct multiple telecommunications-related threats directed towards senior U.S. government officials, which represented an imminent threat to the agency’s protective operations. This protective intelligence investigation led to the discovery of …
Read More »
Microsoft has announced a new $4 billion investment in Wisconsin for a second hyperscale AI data center. This adds to the $3.3 billion already committed to its first facility, bringing the total investment to over $7 billion. CEO Satya Nadella stated this center will be “the most powerful AI data …
Read More »
A new proof-of-concept tool named EDR-Freeze has been developed, capable of placing Endpoint Detection and Response (EDR) and antivirus solutions into a suspended “coma” state. Zero Salarium’s technique uses a built-in Windows feature, providing a stealthy option compared to the rising trend of Bring Your Own Vulnerable Driver (BYOVD) attacks …
Read More »
AI-driven malware called ‘MalTerminal’ utilizes OpenAI’s GPT-4 to create harmful code like ransomware and reverse shells, indicating a major change in threat creation and deployment. The discovery was part of SentinelLABS’ “LLM-Enabled Malware In the Wild” research presented at the LABScon 2025 security conference. PromptLock: An Academic Proof-of-Concept: In August …
Read More »
InfoSecBulletin Cybersecurity for mankind