Lightnews — Scholar-powered news

Private Sector Must Shore up UK’s Cyber Defense

Philippe Vynckier @pvynckier.bsky.social · 9h

Private Sector Must Shore up UK’s Cyber Defense - Infosecurity Magazine www.infosecurity-magazine.com/opinions/pri...

SCC's Chris McGrath argues that siloed UK government structures requires a coordinated private sector-enabled solution to protect businesses and critical services

All SonicWall Cloud Backup Users Have Firewall Configuration Files Sto

Philippe Vynckier @pvynckier.bsky.social · 9h

All SonicWall Cloud Backup Users Have Firewall Configuration Files Sto - Infosecurity Magazine www.infosecurity-magazine.com/news/sonicwa...

SonicWall said that a threat actor has accessed files containing encrypted credentials and configuration data for all customers who have used its cloud backup service

NCSC: Observability and Threat Hunting Must Improve

Philippe Vynckier @pvynckier.bsky.social · 9h

NCSC: Observability and Threat Hunting Must Improve - Infosecurity Magazine www.infosecurity-magazine.com/news/ncsc-ob...

The UK’s National Cyber Security Centre has released new guidance to help firms improve observability and threat hunting

Digital Fraud Costs Companies Worldwide 7.7% of Annual Revenue

Philippe Vynckier @pvynckier.bsky.social · 9h

Digital Fraud Costs Companies Worldwide 7.7% of Annual Revenue - Infosecurity Magazine www.infosecurity-magazine.com/news/digital...

According to TransUnion, digital fraud has cost companies $534bn in losses globally with US business hit hardest

Critical Flaw Exposes 60,000 Redis Servers to Remote Exploitation

Philippe Vynckier @pvynckier.bsky.social · 9h

Critical Flaw Exposes 60,000 Redis Servers to Remote Exploitation - Infosecurity Magazine www.infosecurity-magazine.com/news/redis-s...

A critical Redis flaw, dubbed “RediShell,” has exposed 60,000 unprotected servers to exploitation

High Number of Windows 10 Users Remain as End-of-Life Looms

Philippe Vynckier @pvynckier.bsky.social · 9h

High Number of Windows 10 Users Remain as End-of-Life Looms - Infosecurity Magazine www.infosecurity-magazine.com/news/windows...

A new report from TeamViewer found that 40% of global endpoints still run Windows 10, just days before security updates and support ends for the operating system

Oreon 10 gets a timely update as Windows 10 reaches its end of life -- download the alternative operating system now!

Philippe Vynckier @pvynckier.bsky.social · 9h

Oreon 10 gets a timely update as Windows 10 reaches its end of life - download the alternative operating system now! - BetaNews betanews.com/2025/10/12/o...

Windows 10 reaches its end of life in a couple of days, on October 14, 2025. Users who haven’t yet upgraded to Windows 11, perhaps due to compatibility issues

Take control of Windows 11 and save time with Quick Access Popup 12

Philippe Vynckier @pvynckier.bsky.social · 9h

Take control of Windows 11 and save time with Quick Access Popup 12 - BetaNews betanews.com/2025/10/10/t...

Constantly digging through folders, menus, and dialog boxes to find files or launch programs is a serious pain and can slow down even the speediest of Windows

Xubuntu Linux 25.10 released with improved Wayland support and Xfce 4.20

Philippe Vynckier @pvynckier.bsky.social · 9h

Xubuntu Linux 25.10 released with improved Wayland support and Xfce 4.20 - BetaNews betanews.com/2025/10/10/x...

Xubuntu 25.10, the latest community-developed release of the lightweight Ubuntu-based distribution, is now available to download. As well as stability and

Ransomware attacks on healthcare businesses increase 30 percent

Philippe Vynckier @pvynckier.bsky.social · 9h

Ransomware attacks on healthcare businesses increase 30 percent - BetaNews betanews.com/2025/10/09/r...

New research from Comparitech, based on data from its worldwide ransomware tracker, finds a 30 percent rise in ransomware attacks on healthcare businesses in

Ubuntu Linux 25.10 'Questing Quokka' arrives with memory-safe system tools and better hardware support

Philippe Vynckier @pvynckier.bsky.social · 9h

Ubuntu Linux 25.10 'Questing Quokka' arrives with memory-safe system tools and better hardware support - BetaNews betanews.com/2025/10/09/u...

Ubuntu Linux 25.10, codenamed “Questing Quokka,” is now available to download. This interim Ubuntu release focuses on improving security, performance, and

Nagios: Open-source monitoring solution - Help Net Security

Philippe Vynckier @pvynckier.bsky.social · 10h

Nagios: Open-source monitoring solution - Help Net Security www.helpnetsecurity.com/2025/10/10/n...

Nagios is an open-source monitoring solution, now included as part of the robust Nagios Core Services Platform (CSP).

www.helpnetsecurity.com

Your SOC is tired, AI isn’t - Help Net Security

Philippe Vynckier @pvynckier.bsky.social · 10h

Your SOC is tired, AI isn’t - Help Net Security www.helpnetsecurity.com/2025/10/10/d...

Analysts using AI in security operations achieved faster, more accurate investigations and reported smoother workflows with less fatigue.

www.helpnetsecurity.com

How to get better results from bug bounty programs without wasting money - Help Net Security

Philippe Vynckier @pvynckier.bsky.social · 10h

How to get better results from bug bounty programs without wasting money - Help Net Security www.helpnetsecurity.com/2025/10/07/b...

Raising bug bounty rewards can boost critical vulnerability findings, but scope, triage speed, and researcher trust decide program success.

www.helpnetsecurity.com

Philippe Vynckier @pvynckier.bsky.social · 11h

From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation thehackernews.com/2025/10/from...

From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation

Fortra confirms GoAnywhere MFT flaw CVE-2025-10035 exploited since September 11 to deploy ransomware.

175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign

Philippe Vynckier @pvynckier.bsky.social · 11h

175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign thehackernews.com/2025/10/175-...

Researchers uncover 175 npm packages used in Beamglea phishing campaign targeting 135 companies.

From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability

Philippe Vynckier @pvynckier.bsky.social · 11h

From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability thehackernews.com/2025/10/from...

Huntress reports active exploitation of Gladinet CVE-2025-11371, exposing system files and enabling remote code execution.

From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware

Philippe Vynckier @pvynckier.bsky.social · 11h

From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware thehackernews.com/2025/10/from...

UTA0388 uses ChatGPT-driven phishing to deploy GOVERSHELL malware across Asia, Europe, and North America.

Is a CIAM Certification Beneficial?

Philippe Vynckier @pvynckier.bsky.social · 11h

Is a CIAM Certification Beneficial? - Security Boulevard securityboulevard.com/2025/10/is-a...

Explore the pros & cons of CIAM certification for authentication & software development. Learn about career benefits, core skills validated, and how it compares to other certifications.

Is Your Spend on Cloud Security Justified?

Philippe Vynckier @pvynckier.bsky.social · 11h

Is Your Spend on Cloud Security Justified? - Security Boulevard securityboulevard.com/2025/10/is-y...

How Secure Are Your Non-Human Identities? Have you ever considered how secure your non-human identities are? Safeguarding Non-Human Identities (NHI) is paramount, particularly where organizations incr...

Autonomous AI Hacking and the Future of Cybersecurity

Philippe Vynckier @pvynckier.bsky.social · 11h

Autonomous AI Hacking and the Future of Cybersecurity - Security Boulevard securityboulevard.com/2025/10/auto...

AI agents are now hacking computers. They’re getting better at all phases of cyberattacks, faster than most of us expected. They can chain together different aspects of a cyber operation, and hack aut...

#RediShell: Redis/Valkey Get ‘Perfect 10’ Critical RCE Vuln

Philippe Vynckier @pvynckier.bsky.social · 11h

#RediShell: Redis/Valkey Get ‘Perfect 10’ Critical RCE Vuln - Security Boulevard securityboulevard.com/2025/10/redi...

Redis hell: CVSS 10.0 vulnerability in ubiquitous cloud storage layer. PATCH NOW.