Collaborate Disseminate
A Windows vulnerability (CVE-2025-9491, aka ZDI-CAN-25373) that state-sponsored threat actors and cybercrime groups have been quietly leveraging since at least 2017 continues to be exploited for attacks. “Arctic Wolf Labs assesses with high confi… Continue reading Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)
In partnership with international cybersecurity agencies, the US Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) outlined security best practices for organizations that use on-premises versions of Microsof… Continue reading CISA and partners take action as Microsoft Exchange security risks mount
Shadow AI is the second-most prevalent form of shadow IT in corporate environments, 1Password’s latest annual report has revealed. Based on a survey of over 5,000 IT/security professionals and knowledge workers in the US, UK, Europe, Canada and S… Continue reading Shadow AI: New ideas emerge to tackle an old problem in new form
Attackers have been spotted exploiting the recently patched WSUS vulnerability (CVE-2025-59287) to deploy infostealer malware on unpatched Windows servers. An out-of-band update Last week’s release of an emergency fix for CVE-2025-59287, a Window… Continue reading Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287)
Sanctions are one of the tools Western governments use when they want to hit back at state-sponsored cyber threat actors. But do they actually work? That’s the question a group of current and former cybersecurity officials, analysts, and researchers ta… Continue reading Sanctions won’t stop cyberattacks, but they can still “bite”
The Python Software Foundation (PSF) has rejected a $1.5 million government grant due to restrictive conditions that would force the foundation to betray its mission and its community, the programming non-profit announced on Monday. “In January 2… Continue reading Python Foundation rejects US government grant earmarked for security improvements
A high-severity vulnerability (CVE-2025-40778) affecting BIND 9 DNS resolvers could be leveraged by remote, unauthenticated attackers to manipulate DNS entries via cache poisoning, allowing them to redirect Internet traffic to potentially malicious sit… Continue reading PoC code drops for remotely exploitable BIND 9 DNS flaw (CVE-2025-40778)
CVE-2025-2783, a Chrome zero-day vulnerability that was detected being exploited in March 2025 and was subsequently fixed by Google, was used by unknown attackers to deliver LeetAgent, suspected commercial spyware. An analysis of the malware’s co… Continue reading Italian-made spyware Dante linked to Chrome zero-day exploitation campaign
Ransomware groups are facing an economic downturn of their own: In Q3 2025, only 23 percent of victims paid a ransom, and for data theft incidents that involved no encryption, the payment rate dropped to just 19 percent, according to Coveware. “C… Continue reading Ransomware, extortion groups adapt as payment rates reach historic lows
Microsoft has released an out-of-band security update that “comprehensively” addresses CVE-2025-59287, a remote code execution vulnerability in the Windows Server Update Services (WSUS) that is reportedly being exploited in the wild. About … Continue reading Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287)