Report: Addressing cybersecurity burnout in 2025
The consequences of this burnout are far-reaching, affecting productivity, incident response times, and employee retention.
Antoneta Roussi and Hannah Roberts report: Nothing about the sand-colored façade of the palazzo tucked behind Milan’s Duomo cathedral suggested that inside it a team of computer engineers were building a database to gather private and damaging information about Italy’s political elite — and use it to try to control them. The platform, called Beyond,……
Russell Kinsaul reports a serious situation in St. Louis, Missouri: A cyberattack has caused a nationwide outage of the Code Red emergency notification system, leaving cities and counties across the St. Louis region unable to use the popular system to send tornado warnings and other emergency alerts directly to residents’ phones. Code Red has been……
North Korean threat actors have been attributed to a coordinated cyber espionage campaign targeting diplomatic missions in their southern counterpart between March and July 2025. The activity manifested in the form of at least 19 spear-phishing emails that impersonated trusted diplomatic contacts with the goal of luring embassy staff and foreign ministry personnel with convincing…
Oracle is urging customers to apply its January 2025 Critical Patch Update (CPU) to address 318 new security vulnerabilities spanning its products and services. The most severe of the flaws is a bug in the Oracle Agile Product Lifecycle Management (PLM) Framework (CVE-2025-21556, CVSS score: 9.9) that could allow an attacker to seize control of…
Yesterday, DataBreaches commented on age data in a new report by Orange Cyberdefense. The report was based on a dataset of 418 arrests or publicly available legal cases, and I suggested that it underestimated the number and age of children and young teenagers because most countries are loath to legally charge young people. When they……
Jessica Lyons reports: The call came into the help desk at a large US retailer. An employee had been locked out of their corporate accounts. But the caller wasn’t actually a company employee. He was a Scattered Spider criminal trying to break into the retailer’s systems – and he was really good, according to Jon…