#securityland — Public Fediverse posts

Belgium and the UK signed a defense MoU last week that doesn't involve new aircraft or satellites — but it matters.

QinetiQ has been handed a mandate to help Belgium build a sovereign Joint Electromagnetic Warfare Support Center, modeled on the UK's SOCIETAS program.

Read More: https://www.security.land/belgium-takes-control-of-its-electronic-warfare-future-with-uk-partnership/

#SecurityLand #GeoSphere #EU #UK #Belgium #ElectronicWarfare #Military #Government

After years of delays and political wrangling, Poland's NIS2-implementing cybersecurity law is finally live. Here's what changed on April 3, and what comes next for tens of thousands of Polish businesses.

Read More: https://www.security.land/polands-new-cybersecurity-law-what-the-ksc-amendment-means-for-business/

#SecurityLand #GeoSphere #Cybersecurity #EU #NIS2 #Poland #SME #Government

Spain is becoming a European cyber powerhouse. With a projected €3 billion market valuation by year-end, the surge is fueled by mandatory EU compliance—and a desperate race to find qualified professionals.

Read More: https://www.security.land/spain-cybersecurity-market-3-billion-2026/

#SecurityLand #News #Cybersecurity #Spain #Market #EU #NIS2 #Europe

Forbidden Hyena is now using AI-generated code to deploy the BlackReaperRAT against Russian energy & retail sectors. By leveraging AI-generated PowerShell scripts and a new custom Trojan—BlackReaperRAT—this group has transitioned from ideological protests to sophisticated corporate extortion.

Read More: https://www.security.land/ai-crafted-chaos-the-rise-of-forbidden-hyena-and-the-blackreaperrat/

#SecurityLand #CyberSecurity #Russia #ForbiddenHyena #AI #Ransomware #CriticalInfrastructure

A new global survey of 750 CISOs by Absolute Security has uncovered a critical "recovery reality gap" that is redefining modern security priorities. The data reveals a sobering truth: not a single organization reported being able to fully restore business operations within 24 hours of a major cyber incident.

Read More: https://www.security.land/the-24-hour-recovery-myth-why-cisos-are-prioritizing-resilience/

#SecurityLand #BusinessShield #CyberSecurity #CISO #MTTR #AbsoluteSecurity #CyberResilience #CyberDefense #Research

CVE-2025-14558 is a 9.8-severity vulnerability in FreeBSD's IPv6 auto-configuration that lets attackers execute arbitrary code with a single crafted network packet. FreeBSD released patches on December 16, 2024, but the threat escalated when multiple proof-of-concept exploits hit GitHub about two weeks ago.

Read More: https://www.security.land/freebsd-ipv6-flaw-enables-remote-code-execution-attacks/

#SecurityLand #CyberWatch #FreeBSD #Cybersecurity #VulnerabilityManagement #IPv6 #CVE

A five-month spearphishing operation discovered by Socket has transformed the npm registry into a durable hosting layer for AiTM credential theft, specifically targeting sales teams in the manufacturing and healthcare industries.

Read More: https://www.security.land/npm-registry-weaponized-in-spearphishing-campaign-against-critical-infrastructure/

#SecurityLand #Cybersecurity #Research #NPM #Phishing #CriticalInfrastructure #AiTM #Spearphishing #Dev

The NCS Guide 2025 is here, and it finally solves the funding gap. With a new 6-phase lifecycle and a mandate for Quantum/AI foresight, this is the definitive playbook for digital sovereignty.

#SecurityLand #BusinessShield #Government #Cybersecurity #AI #Quantum #DigitalSovereignty #NCSGuide #NCS2025

Read More: https://www.security.land/ncs-guide-2025-3rd-edition-analysis/

Zscaler ThreatLabz documents BlindEagle APT's sophisticated attack on Colombian government infrastructure using steganography, compromised email accounts, and dual malware deployment (Caminho + DCRat). The September 2025 campaign demonstrates evolved tradecraft including Discord CDN abuse and fileless execution chains.

#SecurityLand #ThreatHorizon #Zscaler #BlindEagle #Colombia #Government #Ecuador #APT #RAT #Malware

Read More: https://www.security.land/blindeagle-colombian-government-caminho-dcrat-attack/

Australian Strategic Policy Institute research reveals how Chinese vision-language models systematically embed political censorship across multiple architectural layers. Testing of Qwen, Ernie, GLM, and DeepSeek shows 70%+ refusal rates for sensitive topics via certain providers, with language-dependent filtering that reshapes historical narratives.

#SecurityLand #GeoSphere #ASPI #Research #Australia #China #AI #LLM #Qwen #DeepSeek

Read More: https://www.security.land/china-ai-surveillance-censorship-aspi-report/

New research from ISC2 reveals a critical shift in cybersecurity workforce challenges. Their 2025 Cybersecurity Workforce Study surveyed 16,029 professionals globally and found that 88% of organizations experienced security incidents directly caused by skills deficits in the past year.

#SecurityLand #News #Research #ISC2 #Cybersecurity #Workforce #Study #SecurityIncident #CybersecurityJobs

Read More: https://www.security.land/isc2-2025-workforce-study-skills-shortages/

New infrastructure analysis from Censys reveals how the pro-Russian hacktivist group NoName057(16) maintains DDoSia operations through rapid server rotation. Monitoring since mid-2025 shows an average of 6 control servers active simultaneously, but with a mean lifespan of only 2.53 days.

#SecurityLand #ThreatHorizon #Research #Censys #DDoSia #DDoS #DDoSAttack #NoName057 #Ukraine #Russia #Hacktivism

Read More: https://www.security.land/ddosia-infrastructure-censys-research-noname057/

Russia's telecommunications oversight authority has escalated its campaign against WhatsApp, warning the Meta-owned platform faces a total shutdown unless it complies with Moscow's regulatory framework.

#SecurityLand #GeoSphere #Meta #WhatsApp #Privacy #Security #WhatsAppBan #Russia #Government

Read More: https://www.security.land/russia-threatens-whatsapp-ban-2025/

🚨 The OpenAI/Mixpanel breach is not just a "vendor issue"—it's a systemic failure. We analyzed 3 years of security incidents at OpenAI and compared them to the fortified architectures of Google Gemini and Anthropic Claude.

#SecurityLand #ExpertDecode #AI #SecurityBreach #Cyberattack #OpenAI #ChatGPT #Claude #Gemini #SpearPhishing #Business #Enterprise #Mixpanel

Read More: https://www.security.land/openai-mixpanel-breach-security-analysis-2025/

Multiple London councils are responding to a major cyber incident that has disrupted IT systems and phone lines across several boroughs. Kensington and Chelsea, Westminster, and potentially Hammersmith and Fulham councils have activated emergency protocols while working with the National Cyber Security Centre.

#SecurityLand #News #Cyberattack #London #UK #CyberIncident #Government

Read More: https://www.security.land/london-councils-cyber-attack-incident/

North Korea now has military-grade AI: facial recognition for surveillance, real-time voice cloning for deception ops, and drone-mounted tracking systems. A South Korean security institute warns published research shows only "the tip of the iceberg" of actual capabilities.

#SecurityLand #GeoSphere #Research #AI #NorthKorea #SouthKorea #Security #VoiceCloning #Technology #Military

Read More: https://www.security.land/north-korea-military-ai-technology/

Machina Record is bringing together Japan's top cybersecurity minds for the Cyber Intelligence Summit 2025 in Tokyo (Nov 5-7). Leaders from Mizuho, MUFG, Sumitomo Mitsui, Panasonic, Rakuten, and Japan's Ministry of Defense will share exclusive insights on AI-driven threats, state-sponsored attacks, and next-gen defense strategies.

#SecurityLand #News #Cybersecurity #Japan #ThreatIntelligence #CyberIntelligenceSummit #Cybercrime #Cyberdefense #Government

Read More: https://www.security.land/global-experts-to-gather-in-tokyo-for-cyber-intelligence-summit-2025/

Belgium strengthens its cyber defense with a strategic partnership between the Royal Military Academy and Cyber Command.

#SecurityLand #GeoSphere #EU #Belgium #CyberCommand #CyberDefense #Military #Government

Read More: https://www.security.land/belgium-strengthens-cyber-defense-with-strategic-rma-cyber-command-partnership/

A devastating security flaw has been discovered in OpenAI’s ChatGPT that could silently steal your Gmail data without you ever knowing. Security firm Radware has uncovered what they’re calling “ShadowLeak”.

#SecurityLand #CyberWatch #OpenAI #ChatGPT #Radware #Vulnerability #ShadowLeak

Read More: https://www.security.land/zero-click-chatgpt-vulnerability-exposes-gmail-data-without-user-knowledge/

🚨 Sophisticated "Shai-Hulud" worm compromises 187+ NPM packages in devastating supply chain attack. The self-replicating malware steals dev credentials and publicly exposes them on GitHub. CrowdStrike among victims. JavaScript ecosystem under siege.

#SecurityLand #CyberWatch #CyberSecurity #NPM #SupplyChain #ShaiHulud #Github #Javascript

Read More: https://www.security.land/npm-under-attack-shai-hulud-worm-compromises-187-packages-in-major-supply-chain-breach/

Atlantic Council comprehensive analysis of 561 entities across 46 countries reveals systematic accountability gaps in the global commercial spyware market. Research exposes how broker networks and complex investment structures enable surveillance technologies to target journalists, human rights defenders, and civil society while evading oversight mechanisms.

#SecurityLand #GeoSphere #Spyware #ShadowEconomy #Surveillance #Tech #SpywareMarket

Read More: https://www.security.land/the-shadow-economy-how-commercial-spyware-networks-exploit-global-investment-flows/

pgAdmin CVE-2025-9636 vulnerability enables OAuth session hijacking, threatening PostgreSQL database security. Database administrators must prioritize pgAdmin 9.8 upgrade immediately. Essential reading for cybersecurity professionals.

#SecurityLand #CyberWatch #Cybersecurity #PostgreSQL #DatabaseSecurity #CVE #OAuth #pgAdmin

Read More: https://www.security.land/critical-pgadmin-cve-2025-9636-vulnerability-enables-oauth-session-hijacking-and-account-takeover/

Cybercriminals are weaponizing AI to execute sophisticated attacks autonomously. New threat intelligence report from Anthropic reveals how machine learning models now perform network penetration, generate ransomware, and scale fraud operations beyond human capabilities.

#SecurityLand #EmergingTech #Anthropic #Cybersecurity #AI #ThreatIntelligence #InfoSec

Read More: https://www.security.land/anthropic-threat-report-how-cybercriminals-exploit-claude-for-advanced-cyber-operations/

European Union Agency for Cybersecurity (ENISA) comprehensive analysis reveals critical vulnerabilities in Europe's managed security services market. With 51% of MSS providers under non-EU control and organizations investing <10% in security, Europe faces serious cybersecurity challenges. Key findings on digital sovereignty risks ahead.

#SecurityLand hashtag#BusinessShield #Cybersecurity #ENISA #DigitalSovereignty #EuropeanSecurity #EU #ManagedSecurity

Read More: https://www.security.land/european-mss-market-enisas-comprehensive-analysis-reveals-critical-gaps-and-emerging-trends/

The U.S. House of Representatives made a bold move, banning WhatsApp on all government devices due to cybersecurity risks. What does this mean for data privacy, national security, and the future of digital communication? Dive into our comprehensive analysis.

#SecurityLand #GeoSphere #WhatsAppBan #Cybersecurity #GovernmentSecurity #DataPrivacy #Government

Read More: https://www.security.land/from-personal-chat-to-national-risk-the-unseen-vulnerabilities-that-drove-the-u-s-house-to-ban-whatsapp/

🚨Critical security vulnerability (CVSS 10.0) discovered in Pterodactyl Panel! Attackers can execute code without authentication. Game server admins must update to v1.11.11 immediately to prevent compromise.

#SecurityLand #CyberWatch #Cybersecurity #GameServers #Pterodactyl #SecurityVulnerability #CVSS

https://www.security.land/critical-security-flaw-discovered-in-pterodactyl-panel-immediate-action-required

Critical security flaws discovered in VMware core products including vCenter Server and ESXi. Vulnerabilities could allow command execution and service disruption. Updates available now to protect your infrastructure.

#SecurityLand #CyberWatch #Broadcom #VMware #Vulnerability #PatchNow #SecurityVulnerability #Technology

Read More: https://www.security.land/multiple-security-vulnerabilities-discovered-in-vmware-products-including-vcenter-server-and-esxi/

CISA has issued an urgent advisory about six actively exploited vulnerabilities affecting Ivanti EPMM, Zimbra, Output Messenger, and other enterprise systems. Learn which systems are at risk and what actions your organization should take immediately to protect critical infrastructure.

#SecurityLand #CyberWatch #CISA #Vulnerability #Ivanti #EPMM #Zimbra #OutputMessenger #EnterpriseSecurity #SecurityExploit #CriticalInfrastructure #Government

Read More: https://www.security.land/us-government-warns-about-six-actively-exploited-vulnerabilities/

Pwn2Own Berlin concludes with Singapore's STAR Labs claiming the "Master of Pwn" title and $320,000! Ethical hackers uncovered 28 zero-day vulnerabilities across AI platforms, virtualization software, and operating systems, demonstrating how security competitions drive industry improvement.

#SecurityLand #News #Cybersecurity #Event #Pwn2Own #ZeroDay #Vulnerability #Research #OffensiveCon

Read More: https://www.security.land/pwn2own-berlin-singapore-claims-victory-with-over-1-million-in-total-prize-money/

🚨 A critical vulnerability (CVE-2025-47275) in the Auth0 SDK exposes Symfony, Laravel, and WordPress users to brute-force session attacks. Okta has released patches—learn how to protect your application now.

#SecurityLand #CyberWatch #Auth0 #Okta #PHP #Laravel #WordPress #Symfony #Vulnerability #Patch

Read More: https://www.security.land/critical-vulnerability-found-in-auth0-sdk-patch-released-for-php-symfony-laravel-and-wordpress/