All about Ivanti’s two critical exploited vulnerabilities—CVE-2025-0282 and CVE-2025-0283—affecting its Connect Secure, Policy Secure, and Neurons for ZTA Gateways.

Microsoft confirmed an outage of its multi-factor authentication system impacting access to Microsoft 365, causing login failures and service disruption

By focusing on vigilant security practices, responsible AI deployment, and alignment with global regulatory standards, the OSS community can make 2025 a transformative year for security.

Threat actors are targeting people searching for pirated or cracked software with fake downloaders that include infostealing malware such as Lumma and Vidar.

The Hellcat ransomware group has stolen roughly 5,000 documents, potentially containing confidential information, from the telecom giant's internal database.

Cyber threat exposure management (CTEM) helps organizations identify, assess and mitigate new cyber risks in the face of ever-evolving challenges.

Diplomatic entities in Kazakhstan and Central Asia have been targeted by UAC-0063 using weaponized Word docs deploying HATVIBE malware

According to the tech giant, it has observed a threat group seeking out vulnerable customer accounts using generative AI, then creating tools to abuse these services.

The security vulnerability tracked as CVE-2024-50603, which rates 10 out of 10 on the CVSS scale, enables unauthenticated remote code execution on affected systems, which cyberattackers are using to plant malware.

The rule will prevent U.S. chips from passing to China through countries loosely allied or not politically allied with the U.S.

A joint government advisory has set out steps critical infrastructure firms should take to ensure any OT products they purchase are secure by design

CISA claims US critical infrastructure providers are improving cyber hygiene and remediation activities

The .uk registry Nominet has been breached by a recently disclosed zero-day vulnerability in Ivanti products

Public bodies could be prevented from paying out to hackers to regain control of systems

Barings Law is planning to sue the two tech giants over numerous alleged violations of data misuse, including for AI training

A UK government consultation has proposed banning public sector and critical infrastructure organizations from making ransomware payments to disincentivize attackers from targeting these services