Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

wallarm

API Attack Awareness: Broken Object Level Authorization (BOLA) - Why It Tops the OWASP API Top 10

Oct 1, 2025 By Wallarm In Wallarm
For this Cybersecurity Awareness Month, we thought it important to draw attention to some of the most common and dangerous API vulnerabilities. This week, we’re starting with Broken Object Level Authorization (BOLA). BOLA vulnerabilities top the OWASP API Top Ten. And for good reason: they’re startlingly prevalent, remarkably easy to exploit, and can have devastating consequences. So, let’s explore what they are, why they matter, and how you can mitigate them.
Read Post
When Electricity Meets Cyber: How Electric Firms Must Harden Their Systems

When Electricity Meets Cyber: How Electric Firms Must Harden Their Systems

Oct 1, 2025 By SecuritySenses In SecuritySenses
The electric sector is undergoing a digital revolution. From smart meters to automated substations, electricity providers now rely heavily on software, connected devices, and real-time data analytics. While this transformation drives efficiency, sustainability, and innovation, it also exposes power grids and electrical systems to cyber risks. As cyberattacks on critical infrastructure become more frequent, firms must not only harden their systems but also strengthen their workforce to meet this evolving challenge.
Read Post
Trustwave

SpiderLabs Ransomware Tracker Update September 2025: Qilin, Akira Top Ransomware Attackers

Sep 30, 2025 By Trustwave In Trustwave
The threat groups Qilin and Akira together conducted about one-quarter of the 402 ransomware attacks tracked by Trustwave SpiderLabs in September, with the manufacturing and technology sectors receiving the brunt of these efforts. This information was derived from a new SpiderLabs ransomware tracking tool that gathers information from a variety of open intelligence sources and our own proprietary research.
Read Post
apono

7 Man-in-the-Middle (MitM) Attacks to Look Out For

Sep 30, 2025 By The Apono Team In Apono
Today’s man-in-the-middle (MitM) attacks go far beyond coffee-shop Wi-Fi: they target browsers, APIs, device enrollments, and DNS infrastructure. Using automated proxykits and supply-chain flaws, attackers hijack session cookies, tokens, and device credentials—turning one interception into persistent, high-value access. Concerningly, these are not edge cases.
Read Post
Zenity

0Click Attacks: When TTPs Resurface Across Platforms

Sep 29, 2025 By Greg Zemlin In Zenity
If there’s one lesson security teams should take from recent disclosures, it’s this: AI agent attack techniques don’t disappear - they resurface, across vendors and platforms, with only small variations. What researchers called out months ago is showing up again, now in Salesforce as the ForcedLeak vulnerability.
Read Post

Resilience by Design: How to Stay Online During Attacks and Outages

Sep 29, 2025 By Cloudflare In Cloudflare
In today’s cloud-native world, resilience isn’t optional — it’s foundational. Daniele Molteni, Director, Product Management for Application Security at Cloudflare, is leading a panel at Cloudflare Connect 2025 that tackles a core question: how do you design systems to withstand attacks, outages, and failures? In this preview, Daniele shares what’s at stake when downtime hits — and how leaders are rethinking operational continuity for the modern Internet.
View Video
cyberint

The Weak Link: Recent Supply Chain Attacks Examined

Sep 28, 2025 By Shmuel Gihon In Cyberint
Originally published: April 2023 Updated: September 2025 Supply chain attacks are a growing and increasingly sophisticated form of cyber threat. They target the complex network of relationships between organizations and their suppliers, vendors, and third-party service providers. These attacks exploit vulnerabilities that emerge due to the interconnected nature of digital supply chains, which often span multiple organizations, systems, and geographies.
Read Post
Improving Cyber and Mental Resilience with Threat Information Sharing

Improving Cyber and Mental Resilience with Threat Information Sharing

Sep 26, 2025 By Chris Jacob, Field CISO In ThreatQuotient
In a world where data provides companies with a competitive advantage, sharing it amongst other businesses, especially in the same industry, may seem counterproductive. However, in cybersecurity, where every company is a potential target for threat actors and organizations are increasingly interconnected through supply chains, sharing information can significantly enhance a company's security posture and overall resilience.
Read Post
outpost 24

Carding ecosystem: The fall of traditional financial cybercrime

Sep 26, 2025 By Marcelo Ruano In Outpost 24
Carding is a type of cybercrime where attackers steal or illegally buy credit card information and use it to make unauthorized transactions. It often involves testing stolen card numbers with small purchases before making larger fraudulent charges. Criminals typically exchange or sell these stolen details on underground forums or dark web marketplaces. Outpost24’s Threat Intelligence team, KrakenLabs, carried out a previous public analysis of the underground card fraud ecosystem in 2022.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.