A newly discovered ransomware family called Osiris launched attacks against a major food service company in Southeast Asia during November 2025. Security researchers have identified this threat as a completely new malware variant with no connection to an older ransomware…
Category: EN
Analysis of Single Sign-On Abuse on FortiOS
Fortinet is proactively communicating to customers to share analysis regarding single sign-on (SSO) abuse on FortiOS. This article has been indexed from PSIRT Blog Read the original article: Analysis of Single Sign-On Abuse on FortiOS
Why AI Is Making Attack Surface Management Mandatory
Amit Sheps, head of product marketing at CyCognito, discusses the growing challenges cybersecurity teams face as artificial intelligence accelerates the expansion of enterprise attack surfaces. He explains why visibility, continuous assessment, and proactive risk management are becoming essential in an…
Analysis of Single Sign On (SSO) abuse on FortiOS
Fortinet is proactively communicating to customers regarding a recently distributed PSIRT advisory (FG-IR-25-647) that the Fortinet Product Security team had internally discovered during a code audit and offered detailed mitigation guidance. This blog provides further analysis to customers regarding a…
Crims compromised energy firms’ Microsoft accounts, sent 600 phishing emails
Logging in, not breaking in Unknown attackers are abusing Microsoft SharePoint file-sharing services to target multiple energy-sector organizations, harvest user credentials, take over corporate inboxes, and then send hundreds of phishing emails from compromised accounts to contacts inside and outside…
New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack
Cybersecurity researchers have disclosed details of a new ransomware family called Osiris that targeted a major food service franchisee operator in Southeast Asia in November 2025. The attack leveraged a malicious driver called POORTRY as part of a known technique…
I scan, you scan, we all scan for… knowledge?
In this week’s newsletter, Bill hammers home the old adage, “Know your environment” — even throughout alert fatigue. This article has been indexed from Cisco Talos Blog Read the original article: I scan, you scan, we all scan for… knowledge?
Google to Pay $8.25M Settlement Over Child Data Tracking in Play Store
Is your child’s data safe? Google settles for $8.25M over claims it tracked kids under 13 without parental… This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI, and More Read the original article: Google to Pay…
What the Alien Franchise Taught Me About Cybersecurity
Ripley’s tactics from Alien are your blueprint for SOC transformation to defeat modern threats with AI-driven security, automation and SIEM modernization. The post What the Alien Franchise Taught Me About Cybersecurity appeared first on Palo Alto Networks Blog. This article…
Proxyware Malware Disguised as Notepad++ Tool Leverages Windows Explorer Process to Hijack Systems
A sophisticated malware campaign targeting unsuspecting users has emerged, disguising malicious proxyware as legitimate Notepad++ installations. This attack, orchestrated by the threat actor Larva-25012, exploits users seeking cracked software through deceptive advertisement pages and fake download portals. The malware hijacks…
Cybercriminals Target Cloud File-Sharing Services to Access Corporate Data
Cybersecurity analysts are raising concerns about a growing trend in which corporate cloud-based file-sharing platforms are being leveraged to extract sensitive organizational data. A cybercrime actor known online as “Zestix” has recently been observed advertising stolen corporate information that…
Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time
Miami, Florida, 22nd January 2026, CyberNewsWire The post Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Halo…
Ask Me Anything Cyber – Brooklyn TECH EXPO with Vlad Schifrin
Watch special edition of Ask Me Anything Cyber: Brooklyn Tech Expo, featuring Vlad Shifrin, founder at PULSE NYC ! This article has been indexed from CyberMaterial Read the original article: Ask Me Anything Cyber – Brooklyn TECH EXPO with Vlad…
Ask Me Anything Cyber with Stephanie Zavala
Join Us To Know What Every Cybersecurity Professional Needs to Know Before Applying for a Job! This article has been indexed from CyberMaterial Read the original article: Ask Me Anything Cyber with Stephanie Zavala
ICE Agents Are ‘Doxing’ Themselves
The alleged risks of being publicly identified have not stopped DHS and ICE employees from creating profiles on LinkedIn, even as Kristi Noem threatens to treat revealing agents’ identities as a crime. This article has been indexed from Security Latest…
Delta Electronics DIAView
View CSAF Summary Successful exploitation of this vulnerability could enable an attacker to execute arbitrary code. The following versions of Delta Electronics DIAView are affected: DIAView (CVE-2026-0975) CVSS Vendor Equipment Vulnerabilities v3 7.8 Delta Electronics Delta Electronics DIAView Improper Neutralization…
Weintek cMT X Series HMI EasyWeb Service
View CSAF Summary Successful exploitation of these vulnerabilities could allow a low-level user to alter privileges and gain full control to the device. The following versions of Weintek cMT X Series HMI EasyWeb Service are affected: cMT3072XH (CVE-2025-14750, CVE-2025-14751) cMT3072XH(T)…
EVMAPA
View CSAF Summary Successful exploitation of these vulnerabilities could lead to degraded service, a denial-of-service, or unauthorized remote command execution, which could lead to spoofing or a manipulation of charging station statuses. The following versions of EVMAPA are affected: EVMAPA…
Schneider Electric EcoStruxure Process Expert
View CSAF Summary Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructure for…
Rockwell Automation CompactLogix 5370
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. The following versions of Rockwell Automation CompactLogix 5370 are affected: CompactLogix 5370 (CVE-2025-11743) CompactLogix 5370 (CVE-2025-11743) CompactLogix 5370 (CVE-2025-11743) CVSS Vendor Equipment Vulnerabilities…