Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Lack of Security Awareness Tops List of Obstacles to Cyber Defense

Apr 17, 2025 By Stu Sjouwerman In KnowBe4
Most organizations cite low security awareness among employees as the biggest barrier to defending against cyberattacks, according to a new survey by CyberEdge Group. “This result reinforces the idea that in cybersecurity, as in so many other areas of business and life, people challenges trump technology issues every time,” the researchers write. “Without doubt, although computers speed up every year, people don’t (and some days we suspect they are getting slower).
Read Post
knowbe4

The Continued Abuse of Legitimate Domains: A Spike in the Exploitation of Google Drive to Send Phishing Attacks

Apr 17, 2025 By KnowBe4 Threat Lab In KnowBe4
First QuickBooks, then Microsoft, and now Google—will the hijacking of legitimate third-party platform communications stop escalating in 2025? Our Threat Labs researchers predict the answer is no. As long as these attack tactics remain effective, cybercriminals will continue to use them, which likely explains the spike in the exploitation of Google Services for phishing attacks observed in the first month of 2025.
Read Post
obrela

The Critical Importance of Supply Chain Risk Management in Cybersecurity

Apr 17, 2025 By Notis Iliopoulos In Obrela
In the contemporary digital era, supply chains have transcended their traditional role as mere logistical networks. They have evolved into pivotal ecosystems that underpin the success of modern businesses. Nevertheless, as these intricate systems undergo digital transformation, they have become increasingly vulnerable to cyberattacks.
Read Post
Tines

Building better workflows with multiple drafts

Apr 17, 2025 By Hannah Roy In Tines
In today's security and IT landscape, the workflows that power your operations are not merely convenient tools—they're essential infrastructure. When a phishing detection workflow fails or an access control process malfunctions, the consequences can be severe: security incidents remain undetected, response times suffer, and organizational risk escalates significantly. This reality creates a paradox for teams.
Read Post
Arctic Wolf

Credential Access Campaign Targeting SonicWall SMA Devices Potentially Linked to Exploitation of CVE-2021-20035

Apr 17, 2025 By Andres Ramos In Arctic Wolf
On April 15, 2025, SonicWall published a product notice regarding CVE-2021-20035, a vulnerability impacting SonicWall SMA 100 series appliances. In an updated security advisory for the vulnerability, SonicWall indicated on April 15, 2025 that the vulnerability was being exploited in the wild. The vulnerability was added to CISA’s known exploited vulnerabilities (KEV) catalog the following day.
Read Post
Essential Features to Look for in a Shovel for Metal Detecting Success

Essential Features to Look for in a Shovel for Metal Detecting Success

Apr 17, 2025 By SecuritySenses In SecuritySenses
Unearthing treasures with a metal detector requires precision, patience, and the right equipment. A dependable shovel for metal detecting is more than a digging tool-it's a partner in preserving artifacts and maximizing efficiency. The perfect shovel enhances your ability to extract coins, relics, or jewelry without damage, whether you're sweeping beaches or old homesteads. With countless designs available, focusing on key features like blade strength, handle comfort, and portability ensures success.
Read Post
ThreatQuotient Celebrates Record Year Marked by Major Customer and Partner Growth, Product Innovation, and Industry Recognition

ThreatQuotient Celebrates Record Year Marked by Major Customer and Partner Growth, Product Innovation, and Industry Recognition

Apr 16, 2025 By ThreatQuotient In ThreatQuotient
ThreatQuotient delivers exceptional growth and innovation over the past year. This growth has been fueled by increasing market demand for simplified security automation technologies to address the challenges around threat intelligence management and security operations. ThreatQuotient's annual Evolution of Cybersecurity Automation Adoption research underlined this momentum.
Read Post
squarex

SquareX to Uncover Data Splicing Attacks at BSides San Francisco, A Major DLP Flaw that Compromises Data Security of Millions

Apr 16, 2025 By SquareX
SquareX researchers Jeswin Mathai and Audrey Adeline will be disclosing a new class of data exfiltration techniques at BSides San Francisco 2025. Titled "Data Splicing Attacks: Breaking Enterprise DLP from the Inside Out", the talk will demonstrate multiple data splicing techniques that will allow attackers to exfiltrate any sensitive file or clipboard data, completely bypassing major Data Loss Protection (DLP) vendors listed by Gartner by exploiting architectural vulnerabilities in the browser.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.