Blog – Page 118 – VigilantAI

January 16, 2025
No Comments

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

January 16, 2025
No Comments

Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions

January 16, 2025
No Comments

The $10 Cyber Threat Responsible for the Biggest Breaches of 2024

January 16, 2025
No Comments

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

January 16, 2025
No Comments

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

January 15, 2025
No Comments

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

January 15, 2025
No Comments

Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99

January 15, 2025
No Comments

North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake Domains

January 15, 2025
No Comments

The High-Stakes Disconnect For ICS/OT Security

January 15, 2025
No Comments

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

Why Traditional Security Operations Are Financially Unsustainable September 12, 2025
Most SOC budgets don’t reflect the true cost of running security operations. Budgets often include salaries, software, and infrastructure, but ignore the steady, compounding costs that drain time, money, and talent daily. Clearly, security teams are under fire. Tight budgets, a climbing volume of alerts, high analyst turnover, and more sophisticated threats put security teams […]
Tom Findling
Global Cyber Threats Stay High as Attacks Climb Year-on-Year September 12, 2025
Organisations faced an average of 1,994 cyberattacks per week in August. This was revealed by Check Point’s Global Threat Intelligence Report for August 2025. That’s slightly down from July, just 1%, but still 10% higher than a year ago. The picture is clear: cyber threats remain persistent and intense. Industries Under Pressure Education remained the […]
Kirsten Doyle
Why More Factors Often Mean Less Security in Modern Authentication September 11, 2025
Authentication has always been the front door to digital systems, but most organizations still treat it like a commodity function. More like a lock from the local hardware store than a high-security system protecting sensitive enterprise assets. That’s why we often hear talk about “multi-factor authentication” (MFA) as though the phrase itself conveys strength. If […]
Mike Engle
AI Becomes the New Backbone of Security Operations, But Challenges Remain September 10, 2025
Security Operations Centers (SOCs) are drowning in noise. The average company now generates close to a thousand alerts a day. For very large enterprises, the number surges past 3,000. Close to half (40% never get fully investigated. Some turn out to be critical. This is outlined in Prophet Security’s new report, “State of AI in […]
Kirsten Doyle
When Innovation Meets Education: Caution Before Celebrating ‘OpenAI for Greece’ September 10, 2025
Generative AI (GenAI) has clear potential in low-risk contexts—such as enhancing productivity, supporting research, and aiding professional workflows. Where it can serve as a powerful, time-saving tool. But this begins to change dramatically when we enter high-risk arenas, particularly education, where minors are involved and formative learning, trust, and their rights need safeguarding. Any steps […]
Anastasios Arampatzis
How to Protect Your VoIP System from DDoS Attacks September 9, 2025
Imagine you walk into your office on a Monday morning. Phones are ringing nonstop, your sales team is preparing for a major client call, and support lines are stacked. There are no outgoing calls, and customers cannot reach you anymore. Then you think it’s a glitch, but it’s a VoIP DDoS attack, a cyberattack that […]
Nnamani Chinwoke
MostereRAT Deploys AnyDesk and TightVNC for Full System Control September 9, 2025
Bad actors are stepping up. FortiGuard Labs has uncovered a phishing campaign that installs MostereRAT, a remote access trojan built to evade defenses and seize full control of a machine. The path is familiar. A phishing email lands in the inbox of a Japanese user. It looks like a business inquiry, routine and harmless. A […]
Kirsten Doyle
Patch Now: Critical SAP S/4HANA Code Injection Flaw Exploited in the Wild September 8, 2025
A newly disclosed vulnerability in SAP S/4HANA has been rated critical, with security researchers warning that exploitation is already underway. The flaw, tracked as CVE-2025-42957, carries a CVSS score of 9.9 and affects S/4HANA systems running S4CORE versions 102 through 108, both in private cloud and on-premise deployments. According to the official CVE record published […]
Kirsten Doyle
Qantas Slashes Executive Bonuses After Cyber Breach September 8, 2025
Qantas has cut short-term bonuses for its top executives by 15% in response to a customer data breach, even as the airline reported a strong year of profits. CEO Vanessa Hudson saw her bonus reduced by about AUD 250,000 under the 2025 remuneration decisions, with the airline saying the adjustment reflected shared accountability across the […]
Kirsten Doyle
The Six Cyber Weak Points Causing Power Grid Stress (And How to Fix Them) September 5, 2025
The Industrial Internet of Things (IIoT) is altering power grid stress by straining outdated systems and broadening the cyberattack surface. With much of the infrastructure aging, the grid is left increasingly vulnerable to both physical and digital threats. Threat actors like hackers and other risks like natural disasters, and modernization have left utilities incoherent. Some […]
Emily Newton

Category: Blog

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions

The $10 Cyber Threat Responsible for the Biggest Breaches of 2024

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99

North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake Domains

The High-Stakes Disconnect For ICS/OT Security

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

[email protected]