Secora Consulting

Mar 21, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 12

This Weeks Headlines Unpatched Windows Zero-Day Exploited by Multiple State-Sponsored Groups Since 2017 Active Exploitation of Cisco Smart Licensing Utility Vulnerabilities Over 300 Malicious ‘Vapor’ Apps on Google Play Amass 60 Million Downloads Critical Fortinet Vulnerability Actively Exploited in Ransomware Attacks Compromised GitHub Action Exposes CI/CD Secrets in Over 23,000 Repositories Hackers Exploit Critical PHP Flaw to Deploy Quasar RAT and XMRig Miners Unpatched Windows Zero-Day Exploited by Multiple State-Sponsored Groups Since 2017 A critical, unpatched Windows zero-day vulnerability, tracked as ZDI-CAN-25373, has been actively exploited by 11 state-sponsored threat groups from nations including China, Iran, North Korea, and Russia since 2017.

Mar 14, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 11

This Weeks Headlines PCI SSC Release Information Supplement on Payment Page Security and Preventing E-Skimming Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback Over One-Third of Irish Households Experienced Cybercrime in the Past Year Microsoft Patches 57 Security Flaws, Including Six Actively Exploited Zero-Days New Vulnerabilities in ruby-saml Library Enable Potential Account Takeovers DeepSeek R1 AI Model Capable of Generating Malware Code with Prompt Engineering Meta Warns of Actively Exploited FreeType Vulnerability PCI SSC Release Information Supplement on Payment Page Security and Preventing E-Skimming The PCI Security Standards Council (PCI SSC) has introduced a new information supplement on “Payment Page Security and Preventing E-Skimming – Guidance for PCI DSS Requirements 6.

Mar 7, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 10

This Weeks Headlines Exploited VMware ESXi Zero-Day Vulnerabilities Expose Thousands to Ransomware Attacks ‘Bulletproof’ Hosting Provider Allegedly Routes Operations Through Kaspersky Lab Networks Over 1,000 WordPress Sites Compromised by JavaScript Backdoors Eleven11bot Botnet Infects Over 86,000 IoT Devices, Primarily Security Cameras and NVRs Hunters International Ransomware Group Claims Hack on Tata Technologies Exploited VMware ESXi Zero-Day Vulnerabilities Expose Thousands to Ransomware Attacks Recent reports have identified that tens of thousands of VMware ESXi instances are vulnerable to three zero-day vulnerabilities which have been actively exploited in the wild:

Feb 28, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 9

This Weeks Headlines Southern Water Reports £4.5 Million Loss from Black Basta Ransomware Attack Bybit Suffers $1.5 Billion Cryptocurrency Theft in Largest Exchange Hack to Date DDoS Attacks Surge by 550% in 2024 Malicious ‘PirateFi’ Game Infects Steam Users with Vidar Stealer Malware Critical Remote Code Execution Vulnerability Discovered in MITRE Caldera Framework DISA Global Solutions Data Breach Exposes Personal Information of 3.3 Million Individuals Southern Water Reports £4.5 Million Loss from Black Basta Ransomware Attack In February 2024, Southern Water, a major UK water supplier, experienced a cyberattack attributed to the Black Basta ransomware group.

Feb 25, 2025 Vulnerability

Maximising Your Cybersecurity with the NCSC Cyber Improvement Grant

Organisations that have taken advantage of Enterprise Ireland’s Cyber Security Review Grant have gained a comprehensive assessment of their cybersecurity posture, identified key vulnerabilities, and received a clear roadmap to strengthen their cybersecurity measures. After benefiting from this initial review, your organisation can move forward with the Cyber Improvement Grant to implement these recommendations. With applications closing on March 25th, now is the perfect time to take this next step.

Feb 21, 2025 Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 8

This Weeks Headlines Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability UK Government Orders Apple to Provide Access to Encrypted User Data Critical Vulnerabilities Discovered in Unifi Protect Cameras and Management Interface Content Credentials Initiative Gains Momentum in Combating Digital Disinformation Storm-2372 Cybercriminals Exploit Device Codes in Phishing Attacks via Microsoft Teams and WhatsApp Oireachtas Committee to Assess Ireland’s Cybersecurity Preparedness Amid Escalating Digital Threats Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability Microsoft has released security updates addressing two critical vulnerabilities affecting Bing and Power Pages, including one actively exploited in the wild.

The latest news and developments

Latest Blogs and News