SecurityWeek Newsletter.

"SecurityWeek Newsletter:  Cybersecurity news, insights & analysis."

Views expresed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 22 January 2025, 2110 UTC.

Content and Source:  https://www.securityweek.com

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

Wednesday, January 22, 2025

Stop Playing Hackers’ Games Their Way (Sponsored by Zscaler)

CYBERSECURITY NEWS HEADLINES

DHS Disbands Cyber Safety Review Board, Ending One of CISA’s Few Bright Spots Trump Pardons Founder of Silk Road Website Record-Breaking DDoS Attack Reached 5.6 Tbps Over $380,000 Paid Out on First Day of Pwn2Own Automotive 2025 Oracle Patches 200 Vulnerabilities With January 2025 CPU Researcher Says ABB Building Control Products Affected by 1,000 Vulnerabilities Cyber Insights 2025: APIs – The Threat Continues Murdoc Botnet Ensnaring Avtech, Huawei Devices Book Review: Infected – A Candid Look at VirusTotal’s Birth and Legacy Application Security Firm DryRun Raises $8.7 Million in Seed Funding  Doti AI Raises $7 Million Seed Funding for Instant Access to Internal Company Data Call for Presentations Open for SecurityWeek’s 2025 Supply Chain Security & Third-Party Risk Summit

Hackers Love Traditional Security Stacks Bad actors count on organizations to make it easy for them. What makes it easy? Firewalls, VPNs, and public-facing IPs that expose your attack surface. Learn More

SecurityWeek Expert Insights

Rationalizing the Stack: The Case for Security Vendor Consolidation - Consolidating from an overly burdensome number of point solutions to an easier to manage platform-based approach brings with it a number of benefits. (Joshua Goldfarb) Trolley Problem, Safety Versus Security of Generative AI - The only way to advance AI safety is to increase human interactions, human values and societal governance to promote a reinforced human feedback loop, much like we do with traditional AI training methods. (Matt Honea) Anticipating the Cyber Frontier: Top Predictions for 2025 - The cybersecurity landscape in 2025 will demand a careful balance between robust defense mechanisms and adaptive resilience. (Torsten George) The Intersection of AI and OSINT: Advanced Threats On The Horizon - Artificial Intelligence (A) is revolutionizing intelligence gathering, empowering cybersecurity defenders, and amplifying threat actor capabilities. (Stu Sjouwerman) Cybersecurity Marketing Predictions for 2025 Business Growth - Brand awareness is vital in cybersecurity because buyers—often risk-averse professionals like CISOs, IT managers, and procurement teams—rely on trusted brands when researching tools to protect their organizations. (Jennifer Leggio)

If you missed it...

Ransomware Groups Abuse Microsoft Services for Initial Access Cyber Insights 2025: Attack Surface Management Students, Educators Impacted by PowerSchool Data Breach Washington Man Admits to Role in Multiple Cybercrime, Fraud Schemes Social Media Security Firm Spikerz Raises $7 Million Details Disclosed for Mercedes-Benz Infotainment Vulnerabilities Trending: HPE Investigating Breach Claims After Hacker Offers to Sell Data Treasury Levels Sanctions Tied to a Massive Hack of Telecom Companies and Breach of Its Own Network Details Disclosed for Mercedes-Benz Infotainment Vulnerabilities FCC Taking Action in Response to China’s Telecoms Hacking CISA, FBI Update Software Security Recommendations  Washington Man Admits to Role in Multiple Cybercrime, Fraud Schemes Social Media Security Firm Spikerz Raises $7 Million TikTok Restores Service for US Users Based on Trump’s Promised Executive Order Industry Reactions to Biden’s Cybersecurity Executive Order: Feedback Friday Wolf Haldenstein Data Breach Impacts 3.4 Million People North Korean Hackers Targeting Freelance Software Developers 2024 US Healthcare Data Breaches: 720 Incidents, 186 Million Compromised User Records US Government Agencies Call for Closing the Software Understanding Gap Google Releases Open Source Library for Software Composition Analysis US Announces Sanctions Against North Korean Fake IT Worker Network Vulnerabilities in SimpleHelp Remote Access Software May Lead to System Compromise Cyber Insights 2025: Identities In Other News: Lawsuits and Settlements, CrowdStrike Phish, MITRE’s D3FEND 1.0  Data From 15,000 Fortinet Firewalls Leaked by Hackers

View SecurityWeek's 2025 Virtual Event Lineup

RSS Feed | LinkedIn | Webcasts | Virtual Events © 2025 Wired Business Media