Tag Microsoft

Discovered in the Wild: Two Secure Boot Vulnerabilities, but Microsoft is Only Patching One.

Researchers have recently discovered two publicly accessible exploits that effectively bypass the protections offered by Secure Boot, a widely adopted mechanism designed to ensure devices load only secure operating system images at startup. In response, Microsoft has initiated measures to mitigate one of these exploits while opting to leave the…

Read MoreDiscovered in the Wild: Two Secure Boot Vulnerabilities, but Microsoft is Only Patching One.

Trump Overhauls Cybersecurity Policy with New Executive Order

Government, Industry Specific, Standards, Regulations & Compliance White House Limits Cyber Sanctions, Cuts Digital ID Mandates, and Adjusts AI Regulations David Perera (@daveperera), Chris Riotta (@chrisriotta) • June 7, 2025 Image: Keith J Finks/Shutterstock In a significant shift in U.S. cybersecurity policy, President Donald Trump signed an executive order designed…

Read MoreTrump Overhauls Cybersecurity Policy with New Executive Order

The Enigma of iPhone Crashes: Apple Dismisses Links to Chinese Hacking

Recent claims of a potential cybersecurity breach have sparked significant debate, particularly regarding the security measures of tech giant Apple. The company’s head of security engineering, Ivan Krstić, firmly rejected allegations of a targeted attack, asserting that, “We strongly disagree with the claims of a targeted attack against our users.”…

Read MoreThe Enigma of iPhone Crashes: Apple Dismisses Links to Chinese Hacking

EU Gears Up for Cross-Border Cyber Threats

Critical Infrastructure Security, Security Operations New Cyber Blueprint Enhances Coordination Against Disruptive Cyber Attacks Akshaya Asokan (asokan_akshaya) • June 6, 2025 Image: Viacheslav Lopatin/Shutterstock In a proactive measure against potential transnational cyber incidents, Europe is establishing a framework to enhance collective responses to multifaceted cybersecurity threats. This initiative comes in…

Read MoreEU Gears Up for Cross-Border Cyber Threats

Ukraine Breaches Security of Russian Warplane Manufacturer

Cybercrime, Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime Crypter Sites Seized, Threat Intelligence Collaborations, and CrowdStrike Under Scrutiny Anviksha More (AnvikshaMore) • June 5, 2025 Image: Shutterstock/ISMG Each week, Information Security Media Group compiles significant occurrences in cybersecurity globally. This week saw Ukrainian hackers breach a Russian aerospace firm,…

Read MoreUkraine Breaches Security of Russian Warplane Manufacturer

UAE Central Bank Instructs Financial Institutions to Eliminate SMS and OTP Authentication

CyberEdBoard, CyberEdBoard Insights, Finance & Banking Banking Sector Confronts Challenges with March 2026 Compliance Mandate Suparna Goswami (gsuparna) • June 4, 2025 The UAE central bank. (Image: Shutterstock) The Central Bank of the UAE has mandated financial institutions to discontinue insecure authentication methods, particularly those involving SMS and email-based one-time…

Read MoreUAE Central Bank Instructs Financial Institutions to Eliminate SMS and OTP Authentication

Resurgence of Lumma Stealer Malware Poses Challenges for Global Takedown Efforts

Cybercrime, Cybercrime as-a-Service, Fraud Management & Cybercrime Malware Operation Demonstrates Signs of Resurgence Chris Riotta (@chrisriotta) • June 3, 2025 Image: Shutterstock A persistent infostealer has made a reappearance just days after an international law enforcement takedown, highlighting the challenges in effectively disrupting sophisticated malware-as-a-Service operations. This incident showcases that…

Read MoreResurgence of Lumma Stealer Malware Poses Challenges for Global Takedown Efforts