Attacker Specialization Puts Threat Modeling on Defensive

Specialization among threat groups poses challenges for defenders, who now must distinguish between different actors responsible for different facets of an attack.

darkreading – ​Read More

Feds charge 12 more suspects in RICO case over crypto crime spree

Some of the suspects allegedly “cold-called victims and used social engineering to convince them their accounts were the subject of cyberattacks and the enterprise callers were attempting to help secure their accounts,” according to the DOJ.

The Record from Recorded Future News – ​Read More

Ivanti EPMM Hit by Two Actively Exploited 0day Vulnerabilities

Ivanti EPMM users urgently need to patch against actively exploited 0day vulnerabilities (CVE-2025-4427, CVE-2025-4428) that enable pre-authenticated remote…

Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – ​Read More

Pro-Ukraine Group Targets Russian Developers with Python Backdoor

ReversingLabs discovers dbgpkg, a fake Python debugger that secretly backdoors systems to steal data. Researchers suspect a pro-Ukraine…

Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – ​Read More

In Other News: Hackers Not Behind Blackout, CISO Docuseries, Dior Data Breach

A summary of noteworthy stories that might have slipped under the radar this week.

The post In Other News: Hackers Not Behind Blackout, CISO Docuseries, Dior Data Breach appeared first on SecurityWeek.

SecurityWeek – ​Read More

How to Develop and Communicate Metrics for CSIRPs

A well-documented cybersecurity incident response program (CSIRP) provides the transparency needed for informed decision-making, protecting the organization in a constantly changing threat environment.

darkreading – ​Read More

Google Warns UK Retailer Hackers Now Targeting US

Google says the hacking group behind the recent cyberattacks on UK retailers is now shifting focus to the US.

The post Google Warns UK Retailer Hackers Now Targeting US appeared first on SecurityWeek.

SecurityWeek – ​Read More

Russian hospital faces multi-day shutdown as pro-Ukraine group claims cyberattack

Authorities in the republic of Chuvashia confirmed attackers targeted software used to manage patient records and medical histories.

The Record from Recorded Future News – ​Read More

Japan enacts new Active Cyberdefense Law allowing for offensive cyber operations

The new law, which was first mooted in 2022, is intended to help Japan strengthen its cyber defense “to a level equal to major Western powers” and marks a break from the country’s traditional approach to cyber defense.

The Record from Recorded Future News – ​Read More

UK National Health Service suppliers asked to tackle ‘endemic’ ransomware attacks

In an open letter, NHS suppliers were warned that ransomware incidents have been getting more severe and frequent in recent months.

The Record from Recorded Future News – ​Read More