Get Executives on board with managing Cyber Risk

Learn how the 2025 Trend Micro Defenders Survey Report helps paint a clear picture of how security teams are looking to work with executive leaders to manage cyber risk...

Agentic AI for Cyber Resilience: A New Security Paradigm and Its System-Theoretic Foundations

Cybersecurity is being fundamentally reshaped by foundation-model-based artificial intelligence. Large language models now enable autonomous planning, tool orchestration, and strategic adaptation at scale, challenging security architectures built on static rules, perimeter defenses, and...

SCyTAG: Scalable Cyber-Twin for Threat-Assessment Based on Attack Graphs

Understanding the risks associated with an enterprise environment is the first step toward improving its security. Organizations employ various methods to assess and prioritize the risks identified in cyber threat intelligence CTI reports that may be relevant to their operations. Some methodologi...

CVE-2025-59888

creationtimestamp| type| source ---|---|--- 2025-12-26 08:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauuptskow2e 2026-01-08 06:00:27+00:00| seen| Telegram/lQcdBef0ddCEr-SQONddf6xx1nvvcuOFtQ3u17iyDftrdRI 2026-01-13 03:15:58+00:00| seen|...

Uncertainty in Security: Managing Cyber Senescence

My main worry, and the core of my research, is that our cybersecurity ecosystem is slowly but surely aging and getting old and that aging is becoming an operational risk. This is happening not only because of growing complexity, but more importantly because of accumulation of controls and measure...

CVE-2025-14961

creationtimestamp| type| source ---|---|--- 2025-12-20 07:27:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115750707517759993...

ICE Seeks Cyber Upgrade to Better Surveil and Investigate Its Employees

The agency plans to renew a sweeping cybersecurity contract that includes expanded employee monitoring as the government escalates leak investigations and casts internal dissent as a threat...

Iranian APT ‘Prince of Persia’ Resurfaces With New Tools and Targets

SafeBreach reports the resurgence of the Iranian APT group Prince of Persia Infy. Discover how these state-sponsored hackers are now using Telegram bots and Thunder and Lightning malware to target victims globally across Europe, India, and Canada...

CVE-2025-66387

creationtimestamp| type| source ---|---|--- 2025-12-18 15:53:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mabjurziqm2b 2025-12-19 02:02:55+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3macluqbbh6v2...

PT-2025-52309

3/ CVE-2023-1423 highlights vulnerabilities exploited by AI-driven phishing, emphasizing the need for updated defenses. CyberSecurity Hacking...

Hybrid Ensemble Method for Detecting Cyber-Attacks in Water Distribution Systems Using the BATADAL Dataset

The cybersecurity of Industrial Control Systems that manage critical infrastructure such as Water Distribution Systems has become increasingly important as digital connectivity expands. BATADAL benchmark data is a good source of testing intrusion detection techniques, but it presents several...

Enhancing Security Awareness with Cyber Risk Exposure Management

Learn how to strategically tackle human risk for smarter prioritization and lasting behavioral change...

Cyber Risk Management: Defenders Tell It Like It Is

Based on more than 3,000 responses from cybersecurity professionals in nearly 90 countries, our Trend Micro Defenders Survey Report 2025 shines a bright light on the current state of cyber risk management. From the impact of cloud and AI on IT environments to top technical and human challenges,...

Enhancing security awareness with cyber risk exposure management

Learn how to strategically tackle human risk for smarter prioritization and lasting behavioral change...

2025 CWE Top 25 Most Dangerous Software Weaknesses

The Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the Homeland Security Systems Engineering and Development Institute HSSEDI, operated by the MITRE Corporation, has released the 2025 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesseslink is...

WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor

An advanced persistent threat APT known as WIRTE has been attributed to attacks targeting government and diplomatic entities across the Middle East with a previously undocumented malware suite dubbed AshTag since 2020. Palo Alto Networks Unit 42 is tracking the activity cluster under the name Ash...

LLM-Assisted AHP for Explainable Cyber Range Evaluation

Cyber Ranges CRs have emerged as prominent platforms for cybersecurity training and education, especially for Critical Infrastructure CI sectors that face rising cyber threats. One way to address these threats is through hands-on exercises that bridge IT and OT domains to improve defensive...

CVE-2025-64540

creationtimestamp| type| source ---|---|--- 2025-12-10 13:59:57+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0389...

New Portuguese Law Shields Ethical Hackers from Prosecution

Portugal updates its cybercrime law Decree Law 125/2025 to grant ethical hackers a 'safe harbour' from prosecution. Learn the strict rules researchers must follow, including immediate disclosure to the CNCS, and how other nations are following this trend...

CVE-2025-64661

creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 17:39:18+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0383...