Het bedrijf classificeerde dit jarenlang niet als kwetsbaarheid. www.channelconnect.nl/securi...

thehackernews.com/2025/12/sn...

The remote code execution vulnerability in question is CVE-2025-6389 (CVSS score: 9.8), which affects all versions of the plugin prior to and including 8.3. It has been patched in version 8.4, released on August 5, 2025. The plugin has more than 1,700 active installations.

thehackernews.com/2025/12/re...

www.darkreading.com/threat-i...

But it's no coincidence that MuddyWater campaigns regularly appear in Dark Reading news articles — for everything it does right, it's also relatively clumsy. In a campaign against Israel earlier this year, though, the group made meaningful progress toward being more discrete.

"MuddyWater" — also known as TA450 — is one of Iran's most active APTs. Considering its notoriety, and its links with the Ministry of Intelligence and Security (MOIS), one might assume that its cyberattacks are highly sophisticated and stealthy.

"BRICKSTORM enables cyber threat actors to maintain stealthy access and provides capabilities for initiation, persistence, and secure command-and-control." thehackernews.com/2025/12/ci...

"BRICKSTORM is a sophisticated backdoor for VMware vSphere and Windows environments," the agency said.

Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released details of a backdoor named BRICKSTORM that has been put to use by state-sponsored threat actors from the People's Republic of China (PRC) to maintain long-term persistence on compromised systems.

In this issue, I’ve compiled a selection of 12 of the most critical deep dives for anyone looking to truly understand our industry. ventureinsecurity.net/p/top-...

You know as well as I do that there are plenty of reports about individual market segments, but the fundamentals are critical regardless which segment you look at. Venture in Security covers the fundamentals.

Threat actors have delivered more than 197 malicious npm packages with more than 31,000 collective downloads since Oct. 10, as part of ongoing state-sponsored activity to lure and compromise software development professionals. www.darkreading.com/applicat...

Slechts 10% behoort tot de categorie ‘progressive’, iets onder het niveau van bedrijven tot 1.000 medewerkers (15%). www.channelconnect.nl/securi...

Een ruime meerderheid van 74% wordt geclassificeerd als ‘formative’: er zijn basismaatregelen getroffen, maar de beveiliging is onvoldoende op meerdere onderdelen.

www.darkreading.com/cyberatt...