The CyberSignal (Page 34)

Latest

Flat white line-art of an open report book beside a shield, one flat red dot at the shield — CISA credential-leak forensic report.

Data Breaches

CISA Publishes Forensic Report on May AWS GovCloud Credential Leak

A candid CISA transparency report — defender takeaways on incident-playbook readiness this week.

Flat white line-art of a speech bubble and a magnifying lens over a stack of message cards — EU Chat Control 2.0 CSAM scanning.

Policy & Government

European Parliament Advances "Chat Control 2.0," Clearing Big Tech to Scan Messages for CSAM

A pointed EU privacy-and-messaging shift — compliance implications for Big Tech and civil-society groups this week.

Vulnerabilities

Binarly Discloses Six New U-Boot Bootloader Vulnerabilities in Routers, Cameras, and Server Chips

A six-flaw U-Boot disclosure with cross-vendor device implications — defender posture review this week.

Flat white line-art of a code package box linked by a single line to a wallet outline — Injective Labs npm SDK compromise.

Supply Chain Attack

Compromised Injective Labs GitHub Repo Used to Publish Wallet-Key-Stealing npm Package

Another JavaScript-ecosystem SDK compromise with cryptocurrency-user implications — defender inventory work this week.

Flat white line-art of a server tower powered off beside a cloud panel — Progress ShareFile Storage Zone Controllers shutdown.

Vulnerabilities

Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Threat

An emergency vendor directive landed this week: Progress Software told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, citing a credible external security threat and temporarily disabling access to affected accounts out of an abundance of caution.

Flat white line-art of a long negotiation table split by a broken center line, one chair at each end — a former ransomware negotiator sentenced to prison.

Cybercrime

Third US Security Professional Sentenced to 70 Months for Aiding BlackCat Ransomware

A pointed law-enforcement pattern — the third US security professional sentenced for aiding ransomware operations lands this week.

Flat white line-art of a calendar page beside a growing stack of update tiles — Microsoft Patch Tuesday and AI-driven discovery.

Patch Management

Microsoft Warns AI-Driven Vulnerability Discovery Will Mean Busier Patch Tuesdays

Patch Tuesdays get busier as AI drives vulnerability discovery — defender-team cadence review this week.

Flat white line-art of a telephone handset beside a login window — Okta warns of vishing targeting Microsoft 365 customers.

Phishing

Okta Warns of Vishing Campaign Targeting Microsoft 365 Customers

A vishing campaign against Microsoft 365 customers draws a vendor warning — defender review this week.

Flat white line-art of a leaning server tower beside a broken network ring — XRING XQUIC HTTP/3 server-crash research disclosure.

Vulnerabilities

Researchers Disclose Unpatched "XRING" Flaw That Lets Remote Clients Crash HTTP/3 XQUIC Servers

An unpatched HTTP/3 QUIC-library finding — defender teams review protocol posture this week.

Flat white line-art of a government building beside a tall database drum — a DHS database breach reported in a weekly security roundup.

Data Breaches

DHS Database Hacked, SecurityWeek Roundup Reports; Adobe, Canada Also Featured

A federal-agency database breach lands in the weekly roundup — sector-advisory tracking this week.

Flat white line-art of a shield beside a monitoring screen — Microsoft research on the GigaWiper espionage-and-destructive malware family.

Threat Intelligence

Microsoft Details "GigaWiper," a Malware Family Combining Espionage and Destructive Capabilities

A new destructive-plus-espionage malware family lands on defenders' desks — detection-engineering review this week.

Flat white line-art of a courthouse column beside four record cards — European Commission NIS2 referral to the CJEU.

Policy & Government

European Commission Refers Ireland, Spain, France and the Netherlands to the CJEU Over NIS2 Delays

A sharp regulatory-enforcement move from the European Commission — compliance stakes rise this week.

See all