Author: Staff Writer
Staff Writer
John Marcelli is a staff writer for the CISO Brief, with a passion for exploring and writing about the ever-evolving world of technology. From emerging trends to in-depth reviews of the latest gadgets, John stays at the forefront of innovation, delivering engaging content that informs and inspires readers. When he's not writing, he enjoys experimenting with new tech tools and diving into the digital landscape.
The cybersecurity feature Threat Protection Pro, included in the leading VPN application NordVPN, has once again been recognized as one of the top tools for detecting phishing websites in an independent test conducted by AV-Comparatives. “Phishing websites are one of the biggest threats to internet users worldwide. They steal personal data, login credentials, and financial information from unsuspecting users before redirecting them or disappearing entirely. We put our greatest effort into protecting our customers from the consequences caused by these sites,” says Domininkas Virbickas, product director at Threat Protection. Cyber Technology Insights : European Cybersecurity Leader Heimdal Partners with Montreal’s Fusion Cyber Group …
Top Highlights AT&T Settlement: The telecom giant has agreed to a $177 million settlement regarding data breaches from 2019 and 2024, compensating affected customers with payments ranging from $2,500 to $5,000, while denying allegations to avoid litigation costs. Cyberattack on UNFI: United Natural Foods has restored systems after a cyberattack disrupted grocery supplies, with no evidence of personal data breaches; no ransomware group has claimed responsibility. US House WhatsApp Ban: The US House of Representatives has prohibited staff from using WhatsApp on official devices due to security concerns, advocating for alternatives like Microsoft Teams and Signal, which WhatsApp disputes as…
Advanced Cyber Threat Intelligence Platform Strengthens Data443’s Comprehensive Security Portfolio and Accelerates Market Expansion Data443 Risk Mitigation, Inc., a data security and privacy software company for “All Things Data Security,” announced its thirteenth acquisition – TacitRed threat intelligence SaaS product from Cogility, a premier continuous decision intelligence platform provider. TacitRed brings a sophisticated approach to threat detection and analysis, leveraging specialized network traffic sampling via NetFlow technology to deliver real-time threat intelligence at unprecedented scale. This acquisition adds advanced threat intelligence capabilities to Data443’s already robust portfolio of data security solutions. Cyber Technology Insights : European Cybersecurity Leader Heimdal Partners with Montreal’s…
Quick Takeaways Infection Methodology: Fake installers disguised as legitimate software (e.g., WPS Office) from Chinese-language websites are spreading a remote access trojan (RAT) known as Sainbox RAT, along with the Hidden rootkit. Deceptive Execution: The malicious process begins when users download MSI files that execute a legitimate program, ‘Shine.exe,’ to sideload a malicious DLL, allowing hidden execution of the RAT. Rootkit Functionality: The Hidden rootkit conceals critical elements like processes and files using kernel callbacks, offering persistence and self-protection, making detection difficult. Attribution to Silver Fox: The cyberattack is attributed to the Silver Fox hacking group, suggesting potential links to…
Cycurion, Inc., a trusted leader in IT cybersecurity solutions and AI, announces the award of several new contracts totaling over $8 million. These agreements, secured with government and commercial clients, reinforce Cycurion’s position as a trusted partner in protecting critical digital infrastructure. The contracts, spanning program management, cybersecurity, and disaster recovery services, include a significant $6 million agreement with a major municipal transportation agency to deliver comprehensive IT and cybersecurity solutions. Over $1 million of the total contract value will begin billing in June 2025, with the remainder commencing in the third quarter of 2025. These engagements are set to…
Top Highlights Cyberattack Investigation: Hawaiian Airlines is currently investigating a cyberattack that disrupted access to some IT systems, but confirmed flight safety remains unaffected. External Expertise Engaged: The airline has hired external cybersecurity experts to assess the impact and help restore systems, having notified relevant authorities as part of their response efforts. Assured Operations: Both Hawaiian Airlines and the Federal Aviation Administration have stated that operations are continuing safely, with no disruptions to travel or flights reported. Unclear Attack Details: The specific nature of the cyberattack is still under investigation, with no claims of responsibility or confirmation of ransomware involvement…
As artificial intelligence (AI) radically reshapes business, a vast majority of organizations (90%) are not adequately prepared to secure their AI-driven future, according to a new report from Accenture. Globally, nearly two-thirds (63%) of companies are in the “Exposed Zone,” indicating they lack both a cohesive cybersecurity strategy and necessary technical capabilities. Accenture’s “State of Cybersecurity Resilience 2025” report is based on a survey of 2,286 cybersecurity and technology executives from large organizations around the globe. It reveals that the rapid AI adoption has dramatically accelerated the speed, scale and sophistication of cyber threats, far outpacing current enterprise cyber defenses. For example,…
Summary Points Data Breach Impact: Ahold Delhaize is notifying over 2.2 million individuals that their personal, financial, and health information was stolen during a ransomware attack on November 6, 2024, affecting U.S. systems. Scope of Operations: The multinational retailer operates over 9,400 stores globally, employs more than 393,000 staff, and serves approximately 60 million customers weekly, reporting yearly net sales exceeding $104 billion. Ransomware Group Involvement: The cyber attackers are linked to the INC Ransom ransomware group, which surfaced in 2023 and has targeted various sectors, including healthcare and education, claiming over 250 victim organizations. Nature of Stolen Data: The…
MoU paves way for Vatican CERT, advanced AI defenses, and global cyber diplomacy leadership Cyber Eagle Project Inc. and Vatican Cyber Volunteers (VCV) have entered a strategic alliance to fortify the Vatican’s digital infrastructure. Formalized through a MoU, this collaboration brings together advanced AI-powered cybersecurity capabilities and a globally respected cyber volunteer force in a historic step toward safeguarding the Church’s digital presence. Often described as a “digital Swiss Guard,” the Vatican Cyber Volunteers represent the de facto cyber defense force for the Holy See. Composed of elite cybersecurity professionals from global firms and government agencies, they bring operational rigor…
SecurityScorecard released its 2025 Supply Chain Cybersecurity Trends Survey, revealing that 88% of cybersecurity leaders are concerned about supply chain cyber risks. Based on insights from nearly 550 CISOs and security professionals worldwide, the findings reveal that the way most organizations manage supply chain cyber risk isn’t keeping pace with expanding threats. Third-party involvement in breaches has doubled, rising from 15% to nearly 30%, according to the 2025 Verizon Data Breach Investigations Report. A small group of third-party providers now supports much of the world’s technology and infrastructure, creating an extreme concentration of risk. When even one of these providers is compromised, the ripple…