Here’s today’s reminder of the insider threat (well, this, and the fact that U.S. government officials continue to deny any problem with discussing attack plans on Signal). The Argus reports: A former GCHQ intern has admitted risking national security by taking top secret data home. Hasaan Arshad, 25, from Rochdale, Greater Manchester, pleaded guilty to…
Consolidating from an overly burdensome number of point solutions to an easier to manage platform-based approach brings with it a number of benefits. The post Rationalizing the Stack: The Case for Security Vendor Consolidation appeared first on SecurityWeek.
Ransomware remains the biggest threat, but old and misconfigured network devices are making it too easy
Threat actors are exploiting a recent GFI KerioControl firewall vulnerability that leads to remote code execution. The post GFI KerioControl Firewall Vulnerability Exploited in the Wild appeared first on SecurityWeek.
The United States government has warned of cyber attacks mounted by pro-Iranian groups after it launched airstrikes on Iranian nuclear sites as part of the Iran–Israel war that commenced on June 13, 2025. Stating that the ongoing conflict has created a “heightened threat environment” in the country, the Department of Homeland Security (DHS) said in…
Matthew Gault reports: Researchers published a massive database of more than 2 billion Discord messages that they say they scraped using Discord’s public API. The data was pulled from 3,167 servers and covers posts made between 2015 and 2024, the entire time Discord has been active. Though the researchers claim they’ve anonymized the data, it’s…
A now-patched security flaw in Google Chrome was exploited as a zero-day by a threat actor known as TaxOff to deploy a backdoor codenamed Trinper. The attack, observed in mid-March 2025 by Positive Technologies, involved the use of a sandbox escape vulnerability tracked as CVE-2025-2783 (CVSS score: 8.3). Google addressed the flaw later that month…
