The FBI warns that threat actors are deploying malware on end-of-life (EoL) routers to convert them into proxies sold on the 5Socks and Anyproxy networks. These devices, which were released many years back and no longer receive security updates from their vendors, are vulnerable to external attacks leveraging publicly available exploits to inject persistent malware.  Once...Read More

Palo Alto Networks has released its first cybersecurity benchmark study for mid-market organisations in the Asia-Pacific and Japan region, highlighting increased investments but ongoing challenges in AI adoption and resilience. The “2025 Cybersecurity Resilience in Mid-Market Organisations” report surveyed more than 2,800 organisations across 12 countries and various industries. The findings show that while cybersecurity...Read More

Ransomware has emerged as one of the digital age’s most pervasive and financially devastating cyber threats. In 2024, organizations globally faced unprecedented challenges, with 59% reporting ransomware attacks in the past year, a 13% increase over five years. The average cost of these incidents soared to $1.85 million, while median ransom payments skyrocketed from $199,000...Read More

The Kansas Office of Judicial Administration continues its IT modernization, shaped by the October 2023 ransomware attack and recent legislation. This effort is part of a broader push to align technology across all branches of state government while preserving their independence. In February, Kansas launched the IT Integration, Assessment, Roadmap, and Planning Project with Gartner...Read More

The National Association of State Chief Information Officers on Wednesday published a report proposing a solution to the nation’s persistent shortage of cybersecurity workers: Create more programs that train prisoners and former prisoners for those jobs. One analysis tallies more than 450,000 open cybersecurity jobs in the United States, but counts enough workers to fill...Read More

By Raphael Satter WASHINGTON (Reuters) -The ransom-seeking cybercriminals behind the extortion group Lockbit appear to have suffered a breach of their own, according to a rogue post to one of the group’s websites and security analysts who follow the gang. On Wednesday one of Lockbit’s darkweb sites was replaced with a message saying, “Don’t do...Read More

James McGoldrick at Systal explores multichannel threats and describes how businesses can defend themselves   Earlier this month, it was revealed that the UK has seen a 94% year-on-year surge in multichannel cyber-attacks. Cyber-attacked are no longer just about phishing emails, attackers are now combining channels like SMS, voice calls, and social media to increase...Read More

Image courtesy of crypto.news A group claiming to be from Prague has hacked LockBit’s dark web panel, leaking sensitive data including its internal systems and Bitcoin wallets. LockBit, a notorious ransomware gang, had their internal data package compromised, which included over 60,000 Bitcoin BTC addresses, approximately 75 user credentials, and ransom negotiation logs. Analysts at...Read More

The 193 UN Member States adopted, by consensus, the historic Convention against Cybercrime – the first of its kind following five years of negotiations.   Here are five key reasons why this landmark agreement matters for people everywhere: A critical tool for a growing threat In 2023, 67.4 per cent of the world’s population accessed...Read More

Cybersecurity Readiness Remains Flat as AI Transforms the Industry The Index evaluates companies’ readiness across five pillars—Identity Intelligence, Network Resilience, Machine Trustworthiness, Cloud Reinforcement, and AI Fortification— and encompasses 31 solutions and capabilities. Based on a double-blind survey of 8,000 private sector security and business leaders in 30 global markets, respondents detailed their deployment stages...Read More