Public sector spending on technology continues to climb, driven by major suppliers and a surge in demand for IT services. A new report from Tussell highlights how 150 leading suppliers, dubbed “tech titans,” dominate the procurement landscape. These firms secured a significant portion of government contracts, underscoring their influence in shaping public sector digital strategies. […]
The National Security Agency and the Cybersecurity and Infrastructure Security Agency released new guidance urging software developers to adopt memory safe programming languages. The NSA CISA urge shift aims to reduce vulnerabilities caused by memory-related coding errors, which often lead to exploitable security flaws in widely used software systems. The advisory emphasizes the critical role […]
Cybercriminals have found a new exploitation path by misusing the Microsoft 365 tool abused feature known as Direct Send. This feature, intended to help internal systems send emails through Microsoft’s infrastructure, is now being leveraged to distribute phishing messages that slip past conventional email security filters. Security researchers have observed that attackers use Direct Send […]
Cybersecurity analysts have uncovered a sophisticated campaign called OneClik Malware Hits Energy that targets companies in the energy, oil, and gas industries. The operation exploits Microsoft’s ClickOnce technology, a legitimate software deployment tool, to distribute malicious payloads. Attackers then deploy customized backdoors written in Golang, enabling long-term access to compromised systems. Researchers at Trellix noted […]
Microsoft on Thursday rolled out the KB5060829 preview cumulative update for Windows 11 version 24H2, delivering 38 changes and enhancements aimed at improving user experience. The Windows 11 Update Adds refinements to core features, including updates to the taskbar and the introduction of a streamlined PC-to-PC migration process. The update focuses on both functionality and […]
U.S. authorities successfully tracked down the hacker known as IntelBroker by piecing together digital breadcrumbs that included an email address, cryptocurrency transactions, and YouTube activity. The FBI traced IntelBroker by analyzing a Gmail account linked to multiple online aliases, which helped agents uncover connections to cryptocurrency wallets and forum posts associated with high-profile data breaches. […]
An Iranian state-aligned hacking group has targeted Israeli cyber and computer science professionals in a recent phishing campaign, according to Tel Aviv-based cybersecurity firm Check Point. The group, known by multiple aliases including APT42, Educated Manticore, Charming Kitten and Mint Sandstorm, reportedly used deceptive emails and messaging apps to manipulate victims. The attackers tricked individuals […]
PlexTrac Unifies SOC Data by integrating exposure management with incident response, offering security teams a centralized platform to streamline operations. As cyber threats grow more sophisticated, organizations face mounting pressure to reduce attack surfaces and accelerate remediation. PlexTrac’s platform consolidates critical security data, equipping analysts with real-time visibility and actionable insights. By enriching SOC data […]
Councils undergoing structural reorganisation encounter a complex set of digital, data and technology hurdles. As administrative boundaries shift and service models evolve, councils face tech turmoil that threatens to derail integration efforts. These challenges include consolidating legacy systems, aligning data standards and managing cybersecurity risks. Despite the disruption, technology leaders see opportunities to modernize infrastructure […]
Ofsted has released a report outlining critical considerations for integrating artificial intelligence into schools and further education settings. The review highlights the importance of designated AI leaders—referred to as “AI champions”—who can guide institutions in adopting the technology effectively. According to the findings, these champions play a central role in promoting best practices and ensuring […]
Cyberattacks don’t pause for diplomacy, and digital warfare rarely recognizes traditional boundaries, an ex-NATO hacker warned during a recent interview focused on global cybersecurity threats. The former military cyber specialist emphasized that in the digital domain, there’s no such thing as a ceasefire—a reality that government agencies and private companies must urgently accept. He particularly […]
Cybersecurity researchers are raising alarms about a new trend in online threats: the misuse of artificial intelligence by malicious actors. Cisco Talos warns AI models are being manipulated to craft more sophisticated attacks, contributing to a surge in cybercrime. These AI-driven threats are reportedly amplifying the speed, scale and precision of malicious campaigns across digital […]