You are here

Home » Cybersecurity

Cybersecurity

(TLP:CLEAR) Google Zero-Day Threat Report Finds Increasing Attacker Interest In Targeting Security Devices

Summary: Google Threat Intelligence Group released an analysis covering all zero days it is aware of being exploited in 2024. They tracked 75 zero-day vulnerabilities exploited in the wild in 2024, a decrease from the number they identified in 2023 (98 vulnerabilities), but still an increase from 2022 (63 vulnerabilities). They divided the reviewed vulnerabilities into two main categories: end-user platforms and products (e.g., mobile devices, operating systems, and browsers) and enterprise-focused technologies, such as security software and appliances.

(TLP:CLEAR) NSA Publishes Recommendations for Smart Controller Security Controls and Technical Requirements for OT Environments

Summary: The NSA is releasing a Cybersecurity Technical Report (CTR) to share recommendations for security policies and technical requirements for operational technology (OT) smart controller devices installed in National Security Systems (NSS). 

(TLP:CLEAR) Verizon’s 2025 Data Breach Investigations Report (DBIR)

Summary: Verizon released the 18th edition of one of the most sought-after annual reports – the Data Breach Investigation Report (DBIR) – which catalogs and analyzes the past year’s trends in cyber crime and provides a comprehensive view of the global threat landscape. This year’s 100-page report covers cyber incidents and data breaches between November 1, 2023, and October 31, 2024, and includes 12,195 confirmed data breaches and 22,052 total incidents in its data set.

(TLP:CLEAR) Building Resilient ICT Supply Chains: 8th Annual Supply Chain Integrity Month 

Summary: April is Supply Chain Integrity Month, providing an opportunity for government, industry, and other stakeholders to increase collaboration and the sharing of best practices, risk mitigation strategies, and innovative solutions to safeguard supply chains from threats such as cyberattacks, counterfeiting, and disruptions. This year, CISA is promoting resources, tools, and information divided into four themes that help partners and stakeholders increase ICT supply chain resilience.

(TLP:CLEAR) A Deep Dive into the Iranian-Backed Cyber Av3ngers

Summary: Wired published a recent article featuring a deep dive into the Iranian state-backed hacktivist group known as the CyberAv3ngers, stating “The group known as CyberAv3ngers has, in the last year and a half, proven to be the Iranian government's most active hackers focused on industrial control systems. Its targets include water, wastewater, oil and gas, and many other types of critical infrastructure.” The article provides an overview of the group’s history targeting critical infrastructure, giving an analysis of their tactics and capabilities.

Pages

Subscribe to Cybersecurity