Cyber (In)Securities – Issue 143
News
-
Cybersecurity CEO accused of running malware on hospital PC blabs about it on LinkedIn
The Register – Brandon Vigliarolo -
Cybersecurity experts issue response to Trump order targeting Chris Krebs, SentinelOne
Cyberscoop – Greg Otto -
Marks & Spencer breach linked to Scattered Spider ransomware attack
BleepingComputer – Lawrence Abrams -
House passes bill to study routers’ national security risks
Cyberscoop – Matt Braken -
Hitachi Vantara takes servers offline after Akira ransomware attack
BleepingComputer – Sergiu Gatlan -
Over 1,200 SAP NetWeaver servers vulnerable to actively exploited flaw
BleepingComputer – Bill Toulas -
Cybersecurity vendors are themselves under attack by hackers, SentinelOne says
Cyberscoop – Tim Starks -
VeriSource now says February data breach impacts 4 million people
BleepingComputer – Bill Toulas -
DragonForce expands ransomware model with white-label branding scheme
BleepingComputer – Ionut Ilascu -
WooCommerce admins targeted by fake security patches that hijack sites
BleepingComputer – Bill Toulas -
Amid CVE funding fumble, ‘we were mushrooms, kept in the dark,’ says board member
The Register – Jessica Lyons -
More Ivanti attacks may be on horizon, say experts who are seeing 9x surge in endpoint scans
The Register – Connor Jones -
Mobile provider MTN says cyberattack compromised customer data
BleepingComputer – Bill Toulas -
Vehicles Face 45% More Attacks, 4 Times More Hackers
Dark Reading – Nate Nelson -
Gig-Work Platforms at Risk for Data Breaches, Fraud, Account Takeovers
Dark Reading – Tatiana Walk-Morris -
All Major Gen-AI Models Vulnerable to ‘Policy Puppetry’ Prompt Injection Attack
SecurityWeek – Ionut Arghire -
Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers
The Hacker News – Ravie Lakshmanan -
Anthropic finds alarming ’emerging trends’ in Claude misuse report
ZDNet – Radhika Rajkumar -
Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry
The Register – Jessica Lyons -
‘SessionShark’ ToolKit Evades Microsoft Office 365 MFA
Dark Reading – Kristina Beek -
Assassin’s Creed maker faces GDPR complaint for forcing single-player gamers online
The Register – Brandon Vigliarolo -
Interlock ransomware claims DaVita attack, leaks stolen data
BleepingComputer – Bill Toulas -
Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances
SecurityWeek – Ryan Naraine -
‘Warning sign’: Espionage driving APAC cyber surge
InnovationAus – Trish Everingham
Analysis
-
The Trouble with AI in Cybersecurity – Part 5: Ethics on Autopilot
PrivID (Substack) -
Mobile Applications: A Cesspool of Security Issues
Dark Reading – Robert Lemos -
M-Trends 2025: State-Sponsored IT Workers Emerge as Global Threat
Dark Reading – Kevin Townsend -
Inside the Verizon 2025 DBIR: Five Trends That Signal a Shift in the Cyber Threat Economy
SecurityWeek – Danelle Au -
Why NHIs Are Security’s Most Dangerous Blind Spot
The Hacker News -
Navigating Regulatory Shifts & AI Risks
Dark Reading – Arnaud Treps
CyAN Members: News
-
Comment instaurer une relation de confiance entre le DPO et le Hacker Éthique ?
Cybersecurity Advisors Network -
CyAN Global Vice President Kim Chandler McDonald judges Australian Space Awards
Space Connect -
Michael do Rozario Named Finalist for Lawyers Weekly Partner of the Year Awards 2025
Lawyers Weekly
🗓️ Upcoming CyAN (and CyAN Partner) Global Events:
🎉 Celebration
CyAN 10th Anniversary
(Details TBA)
🌐 Online
CyAN Q2 Call (APAC + Gulf)
June 11 – 12:00 GST / 16:00 SGT / 18:00 AEST
🌐 Online
CyAN Q2 Call (EMEA + Americas)
June 11 – 20:00 GST / 18:00 CET / 17:00 UTC / 12:00 EDT
