For providers

The U.S. and other NATO members countries' critical infrastructure, government, and defense organizations have been targeted by Russian cyberespionage operation Nebulous Mantis, also known as Storm-0978, UNC2596, Cuba, and Tropical Scorpius, multi-stage intrusions deploying the RomCom malware since mid-2022, reports Security Affairs.

Adversary-in-the-middle intrusions have been conducted by Chinese advanced persistent threat operation TheWizards using the Spellbinder lateral movement tool that enables IPv6 stateless address autoconfiguration spoofing and malicious software update downloads, The Hacker News reports.

Telecommunications, energy, finance, media, biotechnology, and tourism organizations across Russia have been subjected to attacks involving a new DarkWatchman malware version as part of a Hive0117 phishing campaign that is believed to not have any association with the ongoing Russia-Ukraine war, according to The Record, a news site by cybersecurity firm Recorded Future.

Real IDs have been in the works since 2005. Are their security standards still rigorous enough in 2025?

Microsoft has set May 5 as the deadline for bulk email compliance. In this Tech Tip, we show how organizations can still make the deadline.

Cisco MDS 9000 switches deliver an unmatched security posture for storage area networks, including quantum-resistant encryption, and are differentiated by advanced ASIC design, superior hardware architecture, and sophisticated software control.

A LevelBlue report looks at what goes into the security postures of a cyber-resilient organization, and found that AI is still a blind spot.

Identity security stands at the center of what we all do as the industry relies on the cloud and AI tools accelerate.

How one unreasonable client got lucky during a cyber incident, despite their unreasonable response to the threat.

Microsoft's David Weston describes the new feature as the most significant architectural Windows security change in a generation.