Month: September 2025


  • Critical Argo CD API Vulnerability Exposes Repository Credentials

    A critical vulnerability has been discovered in Argo CD that allows API tokens with limited permissions to access sensitive repository…


  • Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

    ![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFSJzLL1pc8quLfhY-XvdCTUHE211jQksLVgyJf3avkmDP1YU0kIMXpWhiw052Me82v6eQVpV3Q1-_QNI5pUGLGrMal30FuYY2ySGimCMNU-JFOB47n3rFNmknYYcqpqqmHiAxD6J2_UY7f9mqe61GvZ4kJ5moskZwxtU665cLDoyEptVEurxiCJZXH_A/s728-rw-e365/1000013746.jpg)A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency…


  • Friday Squid Blogging: The Origin and Propagation of Squid

    New [research](https://www.science.org/doi/10.1126/science.adu6248) (paywalled):> **Editor’s summary:**>> Cephalopods are one of the most successful marine invertebrates in modern oceans, and they have…


  • Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python

    #### [Cyber-crime](/security/cyber_crime/)Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python==============================================================================Pro tip, don’t install PowerShell…


  • The crazy, true story behind the first AI-powered ransomware

    #### [Security](/security/)**2** The crazy, true story behind the first AI-powered ransomware============================================================**2** tldr; boffins did it——————–[Jessica Lyons](/Author/Jessica-Lyons ‘Read more by this…


  • How Can NDR Help You Detect Exploitation-and Fix Vulnerabilities Faster?

    Want to stay ahead of threats in 2025? This research report is all you need to stay updated. [Download Now](https://fidelissecurity.com/resource/report/cybersecurity-threats-trends-2025-q1/?utm_content=top_sticky_banner&utm_campaign=2025-Q1-Report)…


  • Microsoft now enforces MFA on Azure Portal sign-ins for all tenants

    ![Microsoft Azure](https://www.bleepstatic.com/content/hl-images/2022/04/28/microsoft-azure.jpg)Microsoft says it has been enforcing multifactor authentication (MFA) for Azure Portal sign-ins across all tenants since March 2025.The…


  • Under lock and key: Safeguarding business data with encryption

    Business SecurityUnder lock and key: Safeguarding business data with encryption==============================================================As the attack surface expands and the threat landscape grows more…


  • SSA announces leadership team light on government experience

    SSA announces leadership team light on government experience============================================================![](https://cdn.nextgov.com/media/img/cd/2025/09/05/090525ssaNG/860×394.jpg?1757099005) ![](https://cdn.nextgov.com/media/img/cd/2025/09/05/090525ssaNG/860×394.jpg?1757099005)Wesley Lapointe for The Washington Post via Getty Images | Get the…


  • Is storage the weak link in your cyber-resilience strategy?

    [Enterprise Strategy Group Analysts’ PerspectivesView All Series Articles](https://www.techtarget.com/searchstorage/series/Enterprise-Strategy-Group-Analysts-Perspectives)[Opinion](https://www.techtarget.com/searchstorage/opinions)Is storage the weak link in your cyber-resilience strategy?===========================================================While challenges exist in applying…