The Evolution of Exposure Management Most security teams have a good sense of what’s critical in their environment. What’s harder to pin down is what’s business-critical. These are the assets that support the processes the business can’t function without. They’re not always the loudest or most exposed. They’re the ones tied to revenue, operations, and…
Divya reports: A security vulnerability has been discovered in the popular 7-Zip file compression utility that could allow attackers to write arbitrary files to victim systems and potentially execute malicious code. The flaw, tracked as CVE-2025-55188, affects all versions of 7-Zip prior to the recently released version 25.01 and stems from improper handling of symbolic links……
The following is translation by NAVER for Maiel Business Newspaper. DataBreaches is guessing that the “eat-dog” situation reference is what we call “dog-eat-dog” to refer to brutal competitor actions, but that’s just a guess. Kim Kyusik, Kim Yutae, and Yang Seiho report: Yes24, the largest Internet bookstore in Korea, suffered another “eat-dog” situation due to ransomware……
Lee Gyu-lee reports: Korean white hat hacker team Maple Mallard Magistrates (MMM) won the Capture the Flag (CTF) hacking competition at this year’s DEF CON conference, held in Las Vegas from Thursday through Sunday (local time). The final round of CTF, the largest open computer security hacking competition, was held during the security conference, with……
Ogbonda Chivumnovu reports: It started like a domino effect. One by one, the biggest names in ransomware began to vanish in Q2. From LockBit, once considered the most active and resilient ransomware gang, its empire began to unravel under the pressure of global law enforcement. Then, almost in sequence, other major players, 8Base, RansomHub, and……
Coindoo reports: Physical attacks on cryptocurrency holders are rising sharply this year, with security experts warning that 2025 could become the most dangerous year yet for investors. At the Baltic Honeybadger conference in Riga, SatoshiLabs founder Alena Vranova described a wave of “wrench attacks” — kidnappings, assaults, and extortion aimed at forcing victims to surrender……
The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day vulnerability. Tracked as CVE-2025-8088 (CVSS score: 8.8), the issue has been described as a case of path traversal affecting the Windows version of the tool that could be exploited to obtain arbitrary code execution by crafting malicious…
On August 7, external counsel for Connex Credit Union (“Connex”) in Connecticut notified the Maine Attorney General’s Office of a recent hacking incident. According to their notification, unusual activity was discovered on their system on June 3, 2025. An investigation that was promptly launched determined that files may have been accessed or downloaded without authorization……
A novel attack technique could be weaponized to rope thousands of public domain controllers (DCs) around the world to create a malicious botnet and use it to conduct power distributed denial-of-service (DDoS) attacks. The approach has been codenamed Win-DDoS by SafeBreach researchers Or Yair and Shahak Morag, who presented their findings at the DEF CON…
Cybersecurity researchers have presented new findings related to a now-patched security issue in Microsoft’s Windows Remote Procedure Call (RPC) communication protocol that could be abused by an attacker to conduct spoofing attacks and impersonate a known server. The vulnerability, tracked as CVE-2025-49760 (CVSS score: 3.5), has been described by the tech giant as a Windows…
