Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Thai police said it was expecting to soon welcome 7,000 human trafficking victims, forced to work on cybercrime scams in call centers in Mynmar, in a first wave of people being freed from captivity.

Wireshark release 4.4.4 fixes 1 vulnerability (%%CVE:2025-1492%%) and 12 bugs.

Health Net allegedly falsified certifications for TRICARE, the health benefits program for military personnel.

Misuse of the vulnerable $where operator can allow arbitrary code to be executed on a Node.js application server.

A recent IBM study found that 83% of companies will experience a data breach, with incidents in 2023 costing an average of $4.45 million.

Founded in 2020, SafeBase helps organizations streamline security questionnaires using artificial intelligence trained on security documentation.

The initiative comes as enterprises rapidly adopt AI-driven applications, with F5’s research showing that 75% of organizations are already deploying AI-based solutions.

The collaboration seeks to address gaps between cloud infrastructure and application security, allowing organizations to gain improved visibility.

Organizations typically use multiple security tools, resulting in inefficiencies and high costs, according to the company.

Alexander Vinnik was the operator of BTC-e, a now-defunct cryptocurrency exchange linked to laundering $4 billion in illicit funds.