A smorgasbord of knowledge and news -

View this email in your browser (IN)SECURE Newsletter March 26, 2025 A smorgasbord of knowledge and news What's new?   State-sponsored threat actors and cybercrime groups from North Korea, Iran, Russia, and China have been exploiting a zero-day Windows vulnerability with no fix in sight for the last eight years. Cyber crooks are exploiting users' interest in Semrush, a popular SEO, advertising, and market research SaaS platform, to steal their Google account credentials. Malware peddlers are increasingly targeting users who are searching for free file converter services (websites) and tools. A phishing campaign targeting GitHub account owners has been trying to scare them with a fake security alert into allowing a malicious OAuth app access to their account and repositories. Automate vulnerability management and reduce risk  Time is critical in vulnerability management, but the complexity and volume of threats can overwhelm security teams. On April 9th, join Tines and LivePerson to discover how automation can speed up remediation, reduce manual effort, and more. Ideas to consider, practices to implement How healthcare CISOs can balance security and accessibility without compromising care The hidden risk in SaaS: Why companies need a digital identity exit strategy Moving beyond checkbox security for true resilience 5 pitfalls that can delay cyber incident response and recovery How financial institutions can minimize their attack surface The rise of DAST 2.0 in 2025 Quantifying cyber risk strategies to resonate with CFOs and boards Pay, fight, or stall? The dilemma of ransomware negotiations (Video) Get our news via e-mail Subscribe to get regular updates from Help Net Security. Choose between our daily and weekly newsletters, or you can also opt for specialized newsletters: Breaking news – sent for major events Cybersecurity jobs – sent weekly Open-source cybersecurity tools – sent monthly Open-source cybersecurity tools you should check out Finders Keypers - An AWS KMS key usage finder Dependency-Check - A Software Composition Analysis (SCA) tool IntelMQ - A tool for collecting and processing security feeds Broaden your knowledge and resolve issues (registration may be required): Report: Fortune 500 employee-linked account exposure Report: The State of Secrets Sprawl 2025 eBook: What does it take to be a full-fledged virtual CISO? Copyright © 2025 Help Net Security (Astus d.o.o.), All rights reserved. You are receiving (IN)SECURE Newsletter because you opted in at our web site located on https://www.helpnetsecurity.com. Note: Sometimes we send promotional maildrops to our list. We never share your details with anyone! We really send a limited number of maildrops per year, so we hope you won't unsbscribe because of them. Thanks in advance! Our mailing address is: Help Net Security (Astus d.o.o.) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list.