Security Bulletin

Gutting CISA won't just lose us a partner. It will lose us momentum. And in this game, that's when things break.

A cyber incident has severely disrupted digital infrastructure at Bartlesville Public Schools in Oklahoma, halting state testing and prompting an urgent investigation, the Bartlesville Examiner-Enterprise reports.

Pro-Russian hacktivist group NoName057(16) has been linked to a wave of distributed denial-of-service (DDoS) attacks targeting multiple public and private organizations across the Netherlands, BleepingComputer reports.

BleepingComputer reports that security researchers have uncovered seven malicious Python Package Index packages leveraging Gmail's SMTP servers and encrypted WebSocket connections to exfiltrate data and execute remote commands on infected systems.

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability CVE-2024-58136 Yiiframework Yii Improper Protection...

Facing a politically motivated Justice Department investigation, former CISA director Chris Krebs was warmly welcomed at the RSAC conference as he led a panel discussion of national-security luminaries.

At RSAC 2025, SANS Institute experts warned that rising attack complexity, cloud privilege sprawl, and AI over regulation are converging into a perfect storm — and defenders may already be outpaced.

These five metrics that can help teams get to the bottom of the threats they face.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

AI skills are critical for any network engineer today. Here’s how to get them for free.

This year's top cyber challenges include cloud authorization sprawl, ICS cyberattacks and ransomware, a lack of cloud logging, and regulatory constraints keeping defenders from fully utilizing AI's capabilities.

A panelist of SANS Institute leaders detailed current threats and provided actionable steps for enterprises to consider.