Latest Cybersecurity News and Articles

---

A Guide to Security Investments: The Anatomy of a Cyberattack

Organizations must recognize that security is not about the number of tools deployed, it is about ensuring those tools effectively disrupt the attack chain at every stage. The post A Guide to Security Investments: The Anatomy of a Cyberattack appeared first on SecurityWeek.

---

Zoom Patches 4 High-Severity Vulnerabilities

Zoom has patched five vulnerabilities in its applications, including four high-severity flaws. The post Zoom Patches 4 High-Severity Vulnerabilities appeared first on SecurityWeek.

---

Fraud Losses Reached $12.5 Billion in 2024: FTC 

FTC says reported losses to fraud exceeded $12.5 billion in 2024, with $5.7 billion lost to investment scams. The post Fraud Losses Reached $12.5 Billion in 2024: FTC  appeared first on SecurityWeek.

---

Beware of DeepSeek Hype: It’s a Breeding Ground for Scammers

Exploiting trust in the DeepSeek brand, scammers attempt to harvest personal information or steal user credentials. The post Beware of DeepSeek Hype: It’s a Breeding Ground for Scammers appeared first on SecurityWeek.

---

Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits

The China-nexus cyber espionage group tracked as UNC3886 has been observed targeting end-of-life MX routers from Juniper Networks as part of a campaign designed to deploy custom backdoors, highlighting their ability to focus on internal networking infrastructure. "The backdoors had varying custom capabilities, including active and passive backdoor functions, as well as an embedded script that

---

NCSC and allies publish advisory on the most commonly exploited vulnerabilities in 2021

A joint advisory from the NCSC and international partners details the 15 most commonly exploited vulnerabilities in 2021.

---

NCSC advises organisations to act following Russia’s attack on Ukraine

Organisations should follow NCSC advice and take action to improve their resilience with the cyber threat heightened.

---

Microsoft update on brute force and password spraying activity

The NCSC has issued advice to UK organisations following an update from Microsoft on malicious cyber campaigns.

---

Joint US - UK statement on malicious cyber activity carried out by Russian government

The NCSC, FBI and DHS have issued a joint Technical Alert about malicious cyber activity carried out by the Russian Government.

---

Joint advisory: Further TTPs associated with SVR cyber actors

The NCSC, CISA, FBI and NSA publish advice on detection and mitigation of SVR activity following the attribution of the SolarWinds compromise.

---

Joint advisory on MuddyWater actor

A joint advisory with international partners on the Iranian actor MuddyWater.

---

Joint advisory highlights Microsoft Exchange and Fortinet vulnerabilities

A joint advisory with international partners highlights an Iranian APT exploiting Microsoft Exchange and Fortinet vulnerabilities

---

Joint advisory highlights increased globalised threat of ransomware

The NCSC and international partners observe an increase in sophisticated, high-impact ransomware incidents against critical infrastructure organisations.

---

China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days

Dragos case study reveals that Volt Typhoon hacked the US electric grid and stole information on OT systems. The post China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days appeared first on SecurityWeek.

---

Fortinet Patches 18 Vulnerabilities 

Fortinet has published 17 new advisories to inform customers about 18 vulnerabilities patched in its products. The post Fortinet Patches 18 Vulnerabilities  appeared first on SecurityWeek.

---

International cyber security leaders to appear at flagship UK conference

The UK government's CYBERUK 2022 event takes place 10-11 May at the ICC Wales.

---

Hostile state actors compromising UK organisations with focus on engineering and industrial control companies

This advisory highlights the sustained risk to UK companies involved as well as providing further details on the activity and guidance for any organisations affected.

---

48% of Americans have received a fraudulent tax-related message

Cybercriminals don’t just demand money, they go after details like Social Security numbers, birth dates, and banking information to fuel future fraud.

---

Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One for Elections

The Trump administration has cut millions of dollars in federal funding from two cybersecurity initiatives, including one dedicated to helping state and local election officials. The post Trump Administration Halts Funding for Two Cybersecurity Efforts, Including One for Elections appeared first on SecurityWeek.

---

Cyber security experts team up to protect UK construction projects

New guidance to support UK construction projects has been jointly published between the NCSC, CPNI and BEIS.