Blog

The latest news and developments

Explore a blend of security news, industry developments, and in-depth technical analysis of our services on Secora Consulting's blog. Bookmark this page to stay informed.

Latest Blogs and News

Secora Consulting’s blog is a mixture of news and developments in the security world and technical breakdowns of our services. Bookmark this page to stay informed.

Vulnerability

Maximising Your Cybersecurity with the NCSC Cyber Improvement Grant

Organisations that have taken advantage of Enterprise Ireland’s Cyber Security Review Grant have gained a comprehensive assessment of their cybersecurity posture, identified key vulnerabilities, and received a clear roadmap to strengthen their cybersecurity measures. After benefiting from this initial review, your organisation can move forward with the Cyber Improvement Grant to implement these recommendations. With applications closing on March 25th, now is the perfect time to take this next step.

Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 8

This Weeks Headlines Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability UK Government Orders Apple to Provide Access to Encrypted User Data Critical Vulnerabilities Discovered in Unifi Protect Cameras and Management Interface Content Credentials Initiative Gains Momentum in Combating Digital Disinformation Storm-2372 Cybercriminals Exploit Device Codes in Phishing Attacks via Microsoft Teams and WhatsApp Oireachtas Committee to Assess Ireland’s Cybersecurity Preparedness Amid Escalating Digital Threats Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability Microsoft has released security updates addressing two critical vulnerabilities affecting Bing and Power Pages, including one actively exploited in the wild.

Event News

Secora Consulting Sponsors CTF at BSides Galway

Secora Consulting is pleased to announce our sponsorship of the ZeroDays Capture The Flag (CTF) competition at BSides Galway—the city’s inaugural BSides cybersecurity conference—taking place on February 22, 2025, at the University of Galway. BSides Galway will serve as a premier gathering for cybersecurity professionals, researchers, and enthusiasts, fostering knowledge exchange and innovation in the field. As part of the event, the ZeroDays CTF, run by Zero Days events, will provide an immersive, hands-on challenge designed to test and refine participants’ cybersecurity expertise in real-world scenarios.

Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 7

This Weeks Headlines Microsoft’s February Patch Tuesday Addresses 63 Vulnerabilities, Including Two Actively Exploited Elevation of Privilege Flaws Ivanti Releases Patches for Critical Vulnerabilities in Connect Secure and Policy Secure HSE Faces Nearly 500 Legal Actions Following €102 Million Cyberattack New Exploit Bypasses Patched NVIDIA Container Toolkit Vulnerability FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux Microsoft’s February Patch Tuesday Addresses 63 Vulnerabilities, Including Two Actively Exploited Elevation of Privilege Flaws On February 12, 2025, Microsoft released security updates addressing 63 vulnerabilities across its software products.

Cyber Advisory

The Path to Operational Resilience: Key Considerations for Credit Unions

In a time where business disruptions and cybersecurity incidents are inevitable, operational resilience has become a prominent focus area for the Central Bank of Ireland (CBI). The CBI released Cross Industry Guidance on Operational Resilience in December 2021 and set a deadline for financial services to fully implement their guidance by December 2023. As we move into 2025, financial institutions are expected to demonstrate that their operational resilience strategies are fully aligned with the guidance.

Cybersecurity News

This Week in Cybersecurity: Looking Back at Week 6

This Weeks Headlines Phishing Campaign Exploits Microsoft ADFS to Bypass MFA and Hijack Accounts Chrome 133 and Firefox 135 Release Patches for High-Severity Vulnerabilities AsyncRAT Malware Campaign Leverages Python Payloads and Cloudflare Tunnels for Stealthy Attacks Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access Malvertising Campaign Targets Microsoft Advertisers via Fake Google Ads Zyxel Declines to Patch Exploited Zero-Day Vulnerabilities in Legacy DSL Devices Critical Veeam Vulnerability Allows Remote Code Execution via Man-in-the-Middle Attacks California Man Sentenced to Seven Years for $50 Million Financial Fraud Scheme Phishing Campaign Exploits Microsoft ADFS to Bypass MFA and Hijack Accounts A sophisticated phishing campaign is targeting Microsoft Active Directory Federation Services (ADFS) to bypass multifactor authentication (MFA) and take over user accounts.