Author: Staff Writer

Quick Takeaways GlobalLogic notified over 10,000 employees that their personal data was stolen in a breach exploiting an Oracle E-Business Suite zero-day vulnerability, with activity dating back to July 2025. The stolen information includes sensitive HR data such as names, addresses, contact details, salary info, and bank accounts, impacting both current and former employees. The breach is linked to the Clop ransomware gang’s extortion campaign, which has exploited similar vulnerabilities across multiple companies, including Harvard University and The Washington Post. Clop’s attacks on Oracle EBS systems have affected dozens of organizations, with ongoing negotiations or ransom payments likely involved, amidst…

Top Highlights GootLoader has resurfaced, using sophisticated techniques such as custom WOFF2 fonts and domain obfuscation to evade detection, delivering encrypted payloads via SEO poisoning. Recent campaigns target victims through Google Ads and search engine queries, redirecting them to compromised WordPress sites hosting hidden ZIP archives with malicious JavaScript payloads. The malware leverages these payloads to deploy the Supper backdoor, facilitating remote control and lateral movement, often culminating in domain controller compromise within hours. Threat actors use evasion tactics like file packing tricks to hide malicious activities from automated analysis, underscoring the need for advanced detection methods against such sophisticated…

Essential Insights The US aims to reauthorize the Cybersecurity Information Sharing Act (CISA), but only temporarily until 2026, with debates over a decade-long extension ongoing in Congress. European and Norwegian investigations reveal concerns over connected vehicle security, especially regarding over-the-air updates allowing digital access to buses, prompting stricter controls. The UK’s cyber insurance claims have tripled in 2024, driven predominantly by ransomware, with claims totaling over £197M and policy counts rising by 17%. Emerging threats include sophisticated phishing campaigns using AI for tailored messaging, the exploitation of Oracle EBS vulnerabilities by ransomware groups, and targeted attacks on European radio stations.…

Fast Facts Veterans Transitioning to Cybersecurity: The article highlights a video series featuring interviews with CISOs and cybersecurity professionals who transitioned from military service, discussing how their unique skills aid their success in cyber defense. Military Skills Transfer: Key attributes developed in the military—such as discipline, attention to detail, and leadership—are invaluable in cybersecurity roles, enabling veterans to thrive in high-pressure environments. Diverse Pathways: Success in cybersecurity isn’t limited to those with technical backgrounds; a range of military experiences provides a strong foundation for roles in this field, emphasizing teamwork, problem-solving, and adaptability. Future Landscape: The future of cybersecurity necessitates…

Summary Points The moveIT vulnerability (CVE-2023-34362) is a critical SQL injection flaw in a popular file transfer application, enabling attackers to access and compromise databases without authentication. This breach is one of the largest API-enabled data breaches in recent history, affecting over 700 organizations and 47 million data records, primarily impacting U.S.-based entities. Attackers exploit a multi-step process: manipulating API headers, bypassing input sanitization, executing SQL injection, gaining admin privileges via a JWT, and ultimately achieving remote code execution through a flawed file upload process. The breach involves multiple API vulnerabilities, including unauthenticated access and injection vulnerabilities, highlighting the need…

Fast Facts AI-enabled supply chain attacks have surged 156% in a year, employing polymorphic, context-aware, and semantically camouflaged malware that outsmarts traditional defenses. Real-world incidents, like the 3CX breach and attacks on open-source repositories, exemplify the increasing sophistication and prevalence of AI-driven supply chain threats. Conventional security tools struggle against these evolving threats, necessitating advanced, AI-aware detection, behavioral analysis, and zero-trust strategies for effective defense. Regulatory frameworks like the EU AI Act mandate transparency, risk assessments, and incident reporting, emphasizing the urgency for organizations to adopt proactive security measures now. The Core Issue The story explores the alarming rise of…

Fast Facts The BSI reports that German public administration is currently a prime target for cyber espionage, with significant incidents also affecting defense, justice, and security sectors. Successful international law enforcement actions have disrupted ransomware groups LockBit and Alphv, which profited from selling illicit ransomware services to other criminals. Despite these successes, the BSI warns that many organizations still underestimate cybersecurity risks, especially SMEs and politically sensitive institutions, often neglecting basic protection measures. The ongoing threat level remains high, with a significant “dark figure” of unreported or undetected attacks by advanced hacker groups, emphasizing the need for improved cybersecurity resilience.…

Top Highlights Cybersecurity maturity models (like CMMC, NIST, ISO) provide structured, customizable frameworks to improve security but have limitations in real-world effectiveness and evolving threats. API security remains a significant challenge due to lack of awareness, rapid API adoption without security focus, and complexity in managing diverse APIs. Effective API security requires dedicated solutions with real-time monitoring, preventative controls, centralized audit logs, and response capabilities, aligned with maturity levels from discovery to active threat blocking. Cybersecurity maturity must be continuously applied and adapted to emerging threats like API vulnerabilities, as lagging in API security poses serious data exfiltration risks. Underlying…

Essential Insights Zscaler ThreatLabz reports a 67% increase in Android malware and a 387% surge in attacks on critical energy infrastructure, emphasizing the rising threats to mobile, IoT, and OT systems essential to modern industry and national security. IoT and OT devices, projected to nearly double from 19.8 billion in 2025 to over 40.6 billion by 2034, have become prime targets for cybercriminals exploiting vulnerabilities in routers and legacy systems to propagate malware like Mirai and orchestrate extensive botnets. Critical sectors such as manufacturing, transportation, government, and healthcare face escalating threats—with the U.S. absorbing 54% of global IoT attacks—highlighting a…

Fast Facts SAP’s November 2025 Security Patch Day addresses 18 new and 2 updated security issues, focusing on vulnerabilities that enable remote code execution and injection attacks across its ecosystem. Critical flaws include CVE-2025-42890 (SQL Anywhere Monitor) and CVE-2025-42944 (SAP NetWeaver AS Java), both with CVSS 10.0, allowing unauthenticated network-based system compromise. High-risk vulnerabilities such as CVE-2025-42887 in SAP Solution Manager and multiple injection flaws in SAP Business Connector pose significant threats, enabling code execution and data breaches. SAP urges organizations to prioritize applying these patches through the Support Portal, conduct vulnerability scans, and test updates in staging to protect…