Library

State-Backed Cyberespionage Against European Telcos Escalates

Cyber Crime

Danish agency raises threat level to high.

Symantec: OpenAI's AI Agent Exploitable in Phishing

Artificial Intelligence

Warnings that attackers could now potentially leverage AI agents to create infrastructure and mount attacks.

Microsoft 365 Credentials Subjected to Malicious OAuth App Attack

Phishing

The campaign involves fake Microsoft OAuth apps spoofing well known services.

GitHub Suffers Supply Chain Attack

Supply Chain Vulnerabilities and Flaws

Attackers injected malicious code into the GitHub Action, allowing it to dump memory from CI/CD runners.

Attacks Exploiting Edimax IP Camera Zero-Day Ongoing For Nearly a Year

Internet of Things (IOT)

Exploitation of the flaw has gone on for many months.

14th March 2025 UTC

UK Businesses Face Growing Cloud Security Crisis – Are You Prepared?

Rising cloud misconfigurations and security blind spots are leaving UK organisations vulnerable—discover how to stay ahead in this expert report.

Ransomware Attacks Soared to New Heights Last Month

Ransomware

Clop ransomware operation's activity in February was 300 percent higher than in January.

Hospitality Sector Targeted by Ongoing ClickFix Attack Campaign

Phishing

The phishing attack impersonates travel site Booking.com.

DeepSeek AI: Adopting a Security-First Approach in Finance

Artificial Intelligence Byline

Why and how financial firms must establish clear AI governance policies to ensure compliance and mitigate risks.

Research: Critical National Infrastructure Lacks Investment

Critical Infrastructure

Fewer than a third have confidence in their organisation’s cybersecurity measures.

Funding The Non-Profits: Why Donations Can Prevent Another Major Vulnerability

Business/Corporate Vulnerabilities and Flaws

Entering its second year, why one Initiative is seeking to stop the rot of open source tool flaws.

Attackers Target Machine Identities, Leads to Breaches and Outages

Application Security Network Security

CISOs have Machine Identities but programmes are rarely mature.

Attacks with Newly Addressed Win32 Bug Ongoing for Two Years

Vulnerabilities and Flaws

Attackers executed the code on compromised systems using the PipeMagic backdoor to distribute the Windows exploit.

Multiple SSRF Vulnerabilities Leveraged in Far-Reaching Coordinated Attacks

Vulnerabilities and Flaws

Over 400 IP addresses abused the flaws.

Actively Exploited Apple Zero-Day Addressed

Vulnerabilities and Flaws

The flaw has been described as an out-of-bounds write issue that could allow an attacker to craft malicious web content.

Misconfigured AWS S3 Bucket Exposes Us Nurses' Data

Data Breach

Length of time of exposure is unknown.

Sysdig: Cloud Flaws and Attacker Dwell Time Both Reduced

Cloud Security Vulnerabilities and Flaws

Organisations prioritise the security of AI alongside its rapid implementation.

DDoS on X Conducted by Egyptian Student?

Cyber Crime

OSINT research leads to a different threat actor.

Around 15,000 Girls Compete in Latest CyberFirst Contest

Education and Training

The girls tackled a series of cybersecurity challenges n 12 regional finals.

The Legacy of the Cyber Security Challenge

Business/Corporate Hacking/Hackers/Penetration testers Training

The Cyber Security Challenge will cease operations in a few weeks, but what did it achieve in its 15 year existence, and what do those who worked, ran and volunteered for it feel looking back?

First Name

Last Name

Work Email

Phone

Company

Job Title

Please select an option

City

Please select an option

By providing your email and clicking the 'Subscribe' button, you acknowledge that you have read and agree to the CyberRisk Alliance Privacy Policy. You can unsubscribe at any time.

Please accept our terms and conditions

First Name

Last Name

Work Email

Phone

Company

Job Title

Please select an option

City

Please select an option

By providing your email and clicking the 'Subscribe' button, you acknowledge that you have read and agree to the CyberRisk Alliance Privacy Policy. You can unsubscribe at any time.

Please accept our terms and conditions

Library

State-Backed Cyberespionage Against European Telcos Escalates

Symantec: OpenAI's AI Agent Exploitable in Phishing

Microsoft 365 Credentials Subjected to Malicious OAuth App Attack

GitHub Suffers Supply Chain Attack

Attacks Exploiting Edimax IP Camera Zero-Day Ongoing For Nearly a Year

UK Businesses Face Growing Cloud Security Crisis – Are You Prepared?

Ransomware Attacks Soared to New Heights Last Month

Hospitality Sector Targeted by Ongoing ClickFix Attack Campaign

DeepSeek AI: Adopting a Security-First Approach in Finance

Research: Critical National Infrastructure Lacks Investment

Funding The Non-Profits: Why Donations Can Prevent Another Major Vulnerability

Attackers Target Machine Identities, Leads to Breaches and Outages

Attacks with Newly Addressed Win32 Bug Ongoing for Two Years

Multiple SSRF Vulnerabilities Leveraged in Far-Reaching Coordinated Attacks

Actively Exploited Apple Zero-Day Addressed

Misconfigured AWS S3 Bucket Exposes Us Nurses' Data

Sysdig: Cloud Flaws and Attacker Dwell Time Both Reduced

DDoS on X Conducted by Egyptian Student?

Around 15,000 Girls Compete in Latest CyberFirst Contest

The Legacy of the Cyber Security Challenge

Confirm cancellation

Sign up benefits