Cybersecurity News Bytes

Zimbra Zero-Day Exploited Targeting Brazilian Military via Malicious ICS Files The Brazilian military was recently targeted in a sophisticated campaign leveraging a zero-day vulnerability in the Zimbra email platform. Attackers…

Zimbra Zero-Day Vulnerability Targets Brazilian Military Infrastructure A critical zero-day vulnerability in Zimbra email servers has been actively exploited in targeted attacks against Brazilian military organizations through malicious ICS (Internet…

AI Security Challenges Dominate as Organizations Grapple with Shadow AI Usage The cybersecurity landscape has seen a surge in concern regarding the inadvertent exposure of sensitive data to artificial intelligence…

Major US Cybersecurity Law Expires Amid Government Shutdown A major shift has occurred in the US cyber defense landscape as the Cybersecurity Information Sharing Act (CISA) expired on October 1,…

Colorado Declares October 2025 Cybersecurity Awareness Month As cyber risks continue to rise, Colorado has officially designated October 2025 as Cybersecurity Awareness Month, reflecting a broader national push to promote…

ENISA Releases 2025 Threat Landscape Report Highlighting Advanced Attacks Against Operational Technology The European Union Agency for Cybersecurity (ENISA) has published its extensive 2025 Threat Landscape report with a dedicated…

Extortion Campaign Targets Oracle EBS Customers Linked to FIN11 and Cl0p A new wave of extortion has hit major firms with customized threats referencing sensitive data allegedly stolen from Oracle…

Hawaii Launches Integrated Citizen Identity Portal and Highlights Cybersecurity Awareness Hawaii marks Cybersecurity Awareness Month in October 2025 with major statewide initiatives, including the deployment of a consolidated citizen identity…

Executives Targeted in Oracle EBS Extortion Campaign with Alleged Cl0p and FIN11 Ties A fresh wave of extortion attempts has emerged targeting executives at major firms, linked to reported data…

Expiration of Landmark U.S. Cyber Information-Sharing Program Sparks Industry Uncertainty On September 30, 2025, a foundational U.S. government cyber information-sharing arrangement lapsed after Congress failed to reauthorize its core legal…