Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Trustwave

US Secret Service Blocks Massive Telecom Attack in New York

Sep 24, 2025 By Karl Sigler In Trustwave
The Secret Service’s takedown in New York shines a light on a type of threat that is technically fascinating and deeply concerning for national security: large-scale cellular interception networks leveraging cell-site simulators (CSS), also known as IMSI catchers or Stingrays. The news comes as New York City hosts the annual United Nations General Assembly, gathering heads of state from around the world and creating an incredibly target-rich environment for attackers.
Read Post

When Attackers Weaponize AI and Defenders Fight Back with Smarter Remediation

Sep 24, 2025 By Nucleus Security In Nucleus
Artificial intelligence is transforming cybersecurity, and not always for the better. Attackers are now weaponizing AI to speed up reconnaissance, create exploit code, and bypass traditional defenses. Security teams can’t afford to rely on outdated vulnerability management practices. In this webinar, Scott Kuffer (COO, Nucleus Security) and Corey Brunkow (Director of Federal Operations, Horizon3.ai) break down how AI is changing the threat landscape and what defenders can do to stay ahead.
View Video
device authority

Jaguar Land Rover Cyberattack: Why IoT Identity and Access Management is Mission Critical

Sep 23, 2025 By Louise José In Device Authority
The recent cyberattack on Jaguar Land Rover (JLR), which forced factory closures and disrupted production, is another reminder of how vulnerable connected industries have become. Modern automotive and manufacturing operations rely on networks of connected devices, from robotic arms on the production line to electronic control units (ECUs) inside vehicles. When security breaks down, the consequences quickly ripple across operations, supply chains, and customers.
Read Post
WatchGuard

No More Ransom: Why the UK's Crackdown Signals the End of Paying Hackers

Sep 23, 2025 By Oli Venn In WatchGuard
For years, ransomware gangs have thrived by holding businesses hostage, forcing a terrible choice: pay up or watch your systems collapse. That era is ending. After a summer of cyber chaos that hit everything from the NHS to Harrods, the UK government has drawn a red line: no more quiet payoffs, no more sweeping attacks under the rug.
Read Post
Trustwave

6 Steps to Counter Fourth-Party Supply Chain Vendor Attacks

Sep 23, 2025 By Kory Daniels In Trustwave
Managing a cybersecurity program is hard, but also very meaningful, work. Continuously managing the cybersecurity posture of your organization’s supply chain vendors can at times feel near impossible, afterall ensuring the cybersecurity of your suppliers is an order of magnitude leap in difficulty. Yet, criminals are demonstrating that despite these difficulties, this task requires our immediate attention, given the trending success in exploiting our businesses' trusted relationships.
Read Post
How Weak Passwords Are Exploited in Targeted Cyber Attacks

How Weak Passwords Are Exploited in Targeted Cyber Attacks

Sep 23, 2025 By SecuritySenses In SecuritySenses
Think about this for a moment: cybercriminals don't actually need those fancy Hollywood-style hacking tools you see in movies. Why? Because most of them just waltz right through your front door using credentials that were practically handed to them. Your weak passwords aren't just a minor inconvenience, they're rolling out the red carpet for attackers who've mastered the dark art of exploiting how predictably we all think.
Read Post
graylog

Cyber Attack Disrupts Airports Across Europe

Sep 22, 2025 By Jeff Darrington In Graylog
When Heathrow, Brussels, and Berlin airports suffered a cyber attack that disrupted their check-in and baggage systems, the fallout was immediate. Flights were canceled, queues stretched through terminals, and staff scrambled to switch to manual processes. For some of Europe’s busiest hubs, this was more than an inconvenience. It was a reminder that disruption, not data theft, is often the attacker’s goal.
Read Post
netwrix

Stopping BadUSB, Rubber Ducky, and Flipper Zero Attacks

Sep 22, 2025 By Jeremy Moskowitz In Netwrix
BadUSB, Rubber Ducky, and Flipper Zero devices bypass traditional USB blocking by impersonating keyboards and executing commands at machine speed. Netwrix Endpoint Management combines Endpoint Protector’s device control with Policy Manager’s privilege enforcement to block rogue devices, remove unnecessary admin rights, and contain lateral movement before it escalates.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.