Latest Cybersecurity News and Articles

---

Joint advisory: Further TTPs associated with SVR cyber actors

The NCSC, CISA, FBI and NSA publish advice on detection and mitigation of SVR activity following the attribution of the SolarWinds compromise.

---

Joint advisory on MuddyWater actor

A joint advisory with international partners on the Iranian actor MuddyWater.

---

Joint advisory highlights Microsoft Exchange and Fortinet vulnerabilities

A joint advisory with international partners highlights an Iranian APT exploiting Microsoft Exchange and Fortinet vulnerabilities

---

Joint advisory highlights increased globalised threat of ransomware

The NCSC and international partners observe an increase in sophisticated, high-impact ransomware incidents against critical infrastructure organisations.

---

China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days

Dragos case study reveals that Volt Typhoon hacked the US electric grid and stole information on OT systems. The post China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days appeared first on SecurityWeek.

---

Fortinet Patches 18 Vulnerabilities 

Fortinet has published 17 new advisories to inform customers about 18 vulnerabilities patched in its products. The post Fortinet Patches 18 Vulnerabilities  appeared first on SecurityWeek.

---

International cyber security leaders to appear at flagship UK conference

The UK government's CYBERUK 2022 event takes place 10-11 May at the ICC Wales.

---

Hostile state actors compromising UK organisations with focus on engineering and industrial control companies

This advisory highlights the sustained risk to UK companies involved as well as providing further details on the activity and guidance for any organisations affected.

---

48% of Americans have received a fraudulent tax-related message

Cybercriminals don’t just demand money, they go after details like Social Security numbers, birth dates, and banking information to fuel future fraud.

---

Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One for Elections

The Trump administration has cut millions of dollars in federal funding from two cybersecurity initiatives, including one dedicated to helping state and local election officials. The post Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One for Elections appeared first on SecurityWeek.

---

Cyber security experts team up to protect UK construction projects

New guidance to support UK construction projects has been jointly published between the NCSC, CPNI and BEIS.

---

Code of Practice for Cyber Security and Safety in Engineering

The Institution of Engineering and Technology has published a Code of Practice with the support of the NCSC.

---

British tech startups offered help to keep innovations secure

New guidance from the NCSC and the Centre for the Protection of National Infrastructure (CPNI) to help fledgling technical companies consider key questions around security.

---

Vulnerabilities exploited in VPN products used worldwide

APTs are exploiting vulnerabilities in several VPN products used worldwide

---

Alert: UK organisations should patch Netlogon vulnerability (Zerologon)

Microsoft Windows Netlogon vulnerability is being actively exploited and organisations should install necessary updates as soon as is practicable.

---

Alert: Potential legacy risk from malware targeting QNAP NAS devices

A joint NCSC and CISA alert detailing the legacy risk of the malware Qsnatch to QNAP NAS devices

---

Newly Patched Windows Zero-Day Exploited for Two Years

Microsoft on Tuesday patched a zero-day vulnerability in the Windows Win32 kernel that has been exploited since March 2023. The post Newly Patched Windows Zero-Day Exploited for Two Years appeared first on SecurityWeek.

---

Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack

Threat intelligence firm GreyNoise is warning of a "coordinated surge" in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities spanning multiple platforms. "At least 400 IPs have been seen actively exploiting multiple SSRF CVEs simultaneously, with notable overlap between attack attempts," the company said, adding it observed the activity on March 9, 2025. The countries which

---

PowerSchool Portal Compromised Months Before Massive Data Breach

Hackers used compromised credentials to access PowerSchool’s PowerSource portal months before the December 2024 data breach. The post PowerSchool Portal Compromised Months Before Massive Data Breach appeared first on SecurityWeek.

---

Webinar Today: Protecting Executives and Enterprises from Digital, Narrative and Physical Attacks

How hyper agenda-driven threat actors, cybercriminals, and nation-states integrate digital, narrative, and physical attacks to target organizations through their executives. The post Webinar Today: Protecting Executives and Enterprises from Digital, Narrative and Physical Attacks appeared first on SecurityWeek.