Simple Steps for Attack Surface Reduction
Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come…
August 2025
Zoom patches critical Windows flaw allowing privilege escalation
Zoom fixed a critical Windows client flaw (CVE-2025-49457, CVSS 9.6) involving an untrusted search path that could enable privilege escalation.…
U.S. CISA adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…
Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses
Google said it's implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing…
Cowboy’s e-bikes granted a second life
After months of speculation over the e-bike maker’s imminent demise, Cowboy says it now has the financial backing it needs…
How Shorter TLS Lifespans Will Change SSL Renewal Frequency
When SSL/TLS certificates first became standard for securing websites, it was common to install one and not think about it…
Manpower data breach impacted 144,180 individuals
Global staffing and workforce solutions firm Manpower reports a January RansomHub ransomware attack that compromised data of 140,000 individuals. Manpower…
Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses
Google said it’s implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing…
Data Leakage: How It Happens, What It Costs, and How to Stop It
Sensitive information continues to slip out of companies in ways that don’t involve sophisticated breaches or nation-state actors. Files, credentials,…
FortiSIEM Vulnerability CVE-2025-25256: Unauthenticated OS Command Injection Now Active
Fortinet has issued a critical security advisory regarding a high-severity vulnerability in its FortiSIEM platform, identified as CVE-2025-25256. This flaw,…