Explore

Rapid Read Rapid Read
Law Enforcement Takes Down 53 DDoS Domains in Coordinated Operation

Law Enforcement Takes Down 53 DDoS Domains in Coordinated Operation

Law enforcement agencies from 21 countries have participated in a coordinated operation to dismantle DDoS-for-hire services, resulting in the takedown of 53 domains and the arrest of four individuals. The operation, part of Operation PowerOff, involved sending 75,000 warning emails and executing 25 search warrants. The effort aimed to disrupt illegal booter services and prevent further damage by seizing infrastructure and exposing criminal user accounts.
Rapid Read Rapid Read
Continuous Threat Exposure Management Enhances Cybersecurity in Higher Education

Continuous Threat Exposure Management Enhances Cybersecurity in Higher Education

Colleges and universities are increasingly adopting a cybersecurity approach known as Continuous Threat Exposure Management (CTEM) to address vulnerabilities in their systems. This framework helps security teams in higher education to proactively manage risks by focusing on asset visibility and prioritizing vulnerabilities. Traditional vulnerability management often falls short due to the decentralized nature of IT functions across different departments within universities. CTEM, however, offers a structured process involving scoping, discovery, prioritization, validation, and mobilization to improve cybersecurity measures. The approach is particularly relevant as higher education institutions face complex challenges such as open networks and the use of personal devices by students and staff.
Rapid Read Rapid Read
NIST Updates National Vulnerability Database to Prioritize Critical Software CVEs

NIST Updates National Vulnerability Database to Prioritize Critical Software CVEs

The National Institute of Standards and Technology (NIST) has announced changes to its National Vulnerability Database (NVD) operations to better manage the increasing volume of new Common Vulnerabilities and Exposures (CVEs). The update involves adopting a risk-based model for enriching CVE entries, focusing on those added to the Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog and critical software used by federal agencies. This change is driven by a surge in CVE submissions, which increased by 263% between 2020 and 2025. NIST aims to address the backlog of unenriched CVEs by prioritizing those that pose systemic risks.
Rapid Read Rapid Read
Cookeville Regional Medical Center Ransomware Attack Affects Over 337,000 Patients

Cookeville Regional Medical Center Ransomware Attack Affects Over 337,000 Patients

Cookeville Regional Medical Center in Tennessee experienced a ransomware attack in July 2025, compromising the personal information of 337,917 patients. The attack, claimed by the Rhysida ransomware group, allowed unauthorized access to sensitive data, including names, birthdates, Social Security numbers, and medical records. The medical center has offered affected patients a year of free identity theft protection services. It remains unclear whether the center paid the ransom demanded by the attackers, but additional security measures have been implemented.
Rapid Read Rapid Read
Higher Education Institutions Enhance Cybersecurity with Continuous Threat Exposure Management

Higher Education Institutions Enhance Cybersecurity with Continuous Threat Exposure Management

Higher education institutions are increasingly adopting Continuous Threat Exposure Management (CTEM) to bolster their cybersecurity frameworks. CTEM is a proactive security process that focuses on identifying and prioritizing vulnerabilities within an organization's IT infrastructure. This approach is particularly relevant for universities, which often have decentralized IT systems due to the autonomy of different colleges and departments. The CTEM framework involves a five-stage process: scoping, discovery, prioritization, validation, and mobilization. This method allows institutions to continuously monitor and manage risks, ensuring that high-risk vulnerabilities are addressed promptly. The integration of breach and attack simulations further aids in identifying potential gaps that could be exploited by attackers, thereby enhancing the overall security posture of these institutions.
Rapid Read Rapid Read
NIST Adjusts CVE Analysis Focus Amid Rising Vulnerability Submissions

NIST Adjusts CVE Analysis Focus Amid Rising Vulnerability Submissions

The National Institute of Standards and Technology (NIST) has announced a strategic shift in its approach to analyzing security vulnerabilities due to an overwhelming increase in submissions. The agency will now prioritize Common Vulnerabilities and Exposures (CVEs) that are listed in the Cybersecurity and Infrastructure Security Agency’s (CISA) known exploited vulnerabilities catalog, as well as software used in federal government operations and critical software defined under Executive Order 14028. This decision comes as NIST aims to achieve long-term sustainability for its National Vulnerability Database (NVD), which has faced challenges such as a funding lapse in early 2024. The backlog of unenriched CVEs has continued to grow, with submissions increasing by 263% from 2020 to 2025. In the first quarter of 2026 alone, submissions were nearly one-third higher than the same period in the previous year.
Trendline Trendline
Fitch Ratings Highlights AI-Induced Cybersecurity Risks for Insurers

Fitch Ratings Highlights AI-Induced Cybersecurity Risks for Insurers

Fitch Ratings Highlights AI-Induced Cybersecurity Risks for Insurers
Rapid Read Rapid Read
NIST Updates NVD Operations to Prioritize Critical CVEs

NIST Updates NVD Operations to Prioritize Critical CVEs

The National Institute of Standards and Technology (NIST) has announced changes to its National Vulnerability Database (NVD) operations to better manage the influx of new Common Vulnerabilities and Exposures (CVEs). The update involves adopting a risk-based model for enriching CVE entries, focusing on those in the CISA Known Exploited Vulnerabilities (KEV) catalog and critical software used by federal agencies. This shift is driven by a significant increase in CVE submissions, which rose by 263% from 2020 to 2025. NIST aims to prioritize critical CVEs to manage the growing backlog and improve the efficiency of its operations.
Trendline Trendline
Fitch Warns AI in Cybersecurity May Expose Vulnerabilities

Fitch Warns AI in Cybersecurity May Expose Vulnerabilities

Fitch Warns AI in Cybersecurity May Expose Vulnerabilities
Rapid Read Rapid Read
Dragon Boss Adware Disables Antivirus on 23,000 Hosts, Exposing Global Networks

Dragon Boss Adware Disables Antivirus on 23,000 Hosts, Exposing Global Networks

A signed adware operation linked to Dragon Boss Solutions LLC has been disabling antivirus software on over 23,000 endpoints globally. The operation uses a legitimate code-signing certificate and an update mechanism to deploy a PowerShell-based payload that systematically disables security tools. The campaign was first observed in March 2025, with underlying loaders present since late 2024. The adware targets products from Malwarebytes, Kaspersky, McAfee, and ESET, using a script to kill antivirus processes and block reinstallation. The operation's primary update domain was unregistered, allowing potential exploitation by malicious actors.
Trendline Trendline
KnowBe4 Launches Agent Risk Manager to Secure AI and Human Workforce Against Cyber Threats

KnowBe4 Launches Agent Risk Manager to Secure AI and Human Workforce Against Cyber Threats

KnowBe4 Launches Agent Risk Manager to Secure AI and Human Workforce Against Cyber Threats
Rapid Read Rapid Read
FBI Warns of Russian Hacking Targeting TP-Link Routers, Urges Security Measures

FBI Warns of Russian Hacking Targeting TP-Link Routers, Urges Security Measures

The Federal Bureau of Investigation (FBI), in collaboration with the National Security Agency (NSA) and international counterparts, has issued a warning about Russian hackers exploiting vulnerabilities in small-office/home-office (SOHO) routers. The attack, attributed to a unit within the Russian military intelligence agency GRU, specifically targeted TP-Link routers. The hackers employed a Domain Name System (DNS) hijacking operation to intercept and monitor unencrypted user traffic. The FBI has identified several TP-Link models affected by this breach, including the TP-Link TL-WR841N. The agency advises users to update their router firmware and change default login credentials to mitigate risks. TP-Link has acknowledged the issue, noting that the affected models are outdated and have reached their end of service. The company has developed security updates for some legacy models and recommends users upgrade to newer devices.