Blog

Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)

A Windows vulnerability (CVE-2025-9491, aka ZDI-CAN-25373) that state-sponsored threat actors and cybercrime groups have been quietly leveraging since at least 2017 continues to be exploited for attacks. “Arctic Wolf Labs assesses with high confidence that [the campaign they detected] is attributable to UNC6384. This attribution is based on multiple converging lines of evidence including malware tooling, tactical procedures, targeting alignment, and infrastructure overlaps with previously documented UNC6384 operations,” the company’s threat researchers noted. The attack … More → The post Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491) appeared first on Help Net Security.
http://news.poseidon-us.com/TP0J26

CISA and partners take action as Microsoft Exchange security risks mount

In partnership with international cybersecurity agencies, the US Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) outlined security best practices for organizations that use on-premises versions of Microsoft Exchange Server. Microsoft Exchange servers are regularly targeted by threat actors, and Microsoft’s release of the final security updates for Exchange Server 2016 and 2019 earlier this month means many organizations will remain vulnerable unless they take steps to mitigate risks. “By restricting … More → The post CISA and partners take action as Microsoft Exchange security risks mount appeared first on Help Net Security.
http://news.poseidon-us.com/TP01pR

AI adoption will trim banking industry costs by up to 20%

The technology’s use will lead to short-term cost reductions for the banking sector, but savings won’t last long, according to McKinsey.
http://news.poseidon-us.com/TNzxHj

ImmuniWeb Continuous now enables always-on, AI-powered security testing

ImmuniWeb has unveiled an upgraded version of ImmuniWeb Continuous, designed for continuous penetration testing and 24/7 automated vulnerability scanning of web applications, APIs, and microservices. The new solution is a perfect fit for organizations that have more than ten web applications residing in various on-premise and cloud environments or being maintained by different teams. With ImmuniWeb Continuous, organizations can now implement an enterprise-wide and uninterrupted security testing, detection and prioritization of vulnerabilities and weaknesses in … More → The post ImmuniWeb Continuous now enables always-on, AI-powered security testing appeared first on Help Net Security.
http://news.poseidon-us.com/TNzsP7

Shadow AI: New ideas emerge to tackle an old problem in new form

Shadow AI is the second-most prevalent form of shadow IT in corporate environments, 1Password’s latest annual report has revealed. Based on a survey of over 5,000 IT/security professionals and knowledge workers in the US, UK, Europe, Canada and Singapore, the report shows that over a quarter (27%) of the polled workers use AI-based applications that their employer did not buy or approve, and over a third (37%) follow company AI policies “most of the time”. … More → The post Shadow AI: New ideas emerge to tackle an old problem in new form appeared first on Help Net Security.
http://news.poseidon-us.com/TNzmXT