Federal Cuts Put Local, State Agencies at Cyber-Risk Summary State and local governments are being actively targeted by cybercriminals and nation-state actors just as federal cybersecurity resources and staffing have…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical Sitecore zero-day (CVE-2025-53690) impacting Sitecore Experience Manager, Experience Platform and Experience Commerce is being actively exploited in ViewState deserialization…
Bridgestone Americas Confirms Cyberattack Summary Bridgestone Americas (BSA) has confirmed a cyberattack that affected some of its manufacturing facilities in North America. The company says it identified a limited incident,…
Embracing the Next Generation of Cybersecurity Talent Summary Bruce Johnson argues that student-run Security Operations Centres (SOCs) offer a scalable, cost-effective way to address the global cybersecurity labour shortage. Citing…
CISA orders federal agencies to patch Sitecore zero-day following hacking reports Summary Federal civilian agencies have until 25 September to patch CVE-2025-53690 after incident responders disrupted an attack that leveraged…
‘SEO fraud-as-a-service’ scheme hijacks Windows servers to promote gambling websites Summary A previously unknown, possibly China-aligned group dubbed GhostRedirector has compromised at least 65 Windows servers worldwide since August 2024…
Cyberattack forces Jaguar Land Rover to tell staff to stay at home Summary A cyberattack on British luxury carmaker Jaguar Land Rover (JLR) severely disrupted its global IT systems and…
Qantas penalises executives for July cyberattack Summary Qantas has reduced short-term bonuses for its CEO and executive management by 15 percentage points after a July cyberattack that exposed personal data…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 Windows Security Update fixed CVE-2025-50173 — an authentication issue in Windows Installer that could…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors have been exploiting Sitecore instances that still use publicly documented sample ASP.NET machine keys to perform ViewState…
