Talk With an Expert

NewsBites Cyber Security News

SANS NewsBites is a semiweekly executive summary of the most important cyber security news articles published recently. Each news item is annotated with important context provided by respected subject matter experts within the SANS community.

Filter by:

Patch Cisco IOS XE Wireless Controllers Now; Microsoft Authenticator Deprecating Autofill; Chrome Rescinds Trust in Certificates from Chungwha Telecom and Netlock

NewsletterNewsbites
  • 03 Jun 2025
  • Volume #XXVII
  • Issue #42

Microsoft Previews Centralized Windows Update Platform; OneDrive Files Exposed by File Picker Flaw; Reset ASUS Routers to Fix Persistent Backdoor

NewsletterNewsbites
  • 30 May 2025
  • Volume #XXVII
  • Issue #41

Windows Server 2025 Vulnerable in Active Directory; "Likely Exploited Vulnerabilities" Augments EPSS and KEV; Marks & Spencer Breach May Cost £300M in Profits

NewsletterNewsbites
  • 23 May 2025
  • Volume #XXVII
  • Issue #40

FBI Warns Against Deepfakes Mimicking Gov't. Officials; Japan Passes Active Cyber Defense Law; UK Legal Aid Applicant's Data Stolen

NewsletterNewsbites
  • 20 May 2025
  • Volume #XXVII
  • Issue #39

European Union Vulnerability Database Launches; Security Updates: Microsoft, Adobe, Juniper, VMWare, and Zoom

NewsletterNewsbites
  • 16 May 2025
  • Volume #XXVII
  • Issue #38

Apple Security Updates, May 2025; Update Cisco IOS XE to Fix CVSS 10.0 Flaw; Google to Pay $1.375 Settlement in Texas Privacy Suits

NewsletterNewsbites
  • 13 May 2025
  • Volume #XXVII
  • Issue #37

UK Gov't. to Replace SMS Verification with Passkeys; DDoS-for-Hire Service Suspects Arrested; PowerSchool Paid Ransom, but Extortion Continues; US DOD Software Fast Track Initiative

NewsletterNewsbites
  • 09 May 2025
  • Volume #XXVII
  • Issue #36

Microsoft: New Accounts are Passwordless, Authenticator's Password Manager Will be Deprecated, Skype is Retired; eCommerce Supply Chain Attack Lay Dormant Six Years

NewsletterNewsbites
  • 06 May 2025
  • Volume #XXVII
  • Issue #35

Kintetsu World Express Recovering From Ransomware; Ascension Healthcare Data Stolen From Third Party; New OpenEoX Framework Defines Product Lifecycles; SANS RSAC 2025 Keynote

NewsletterNewsbites
  • 02 May 2025
  • Volume #XXVII
  • Issue #34

SAP NetWeaver Critical Unrestricted File Upload Flaw; Malicious Chargers Could Bypass Mobile USB Security; Power Outage in Portugal, Spain, and France; 20th Anniversary of ICS Summit

NewsletterNewsbites
  • 29 Apr 2025
  • Volume #XXVII
  • Issue #33

SSL.com DCV Issues Unvalidated Certificates; Blue Shield of California Leaks 4.7M Members' Data; Verizon 2025 Data Breach Investigations Report

NewsletterNewsbites
  • 25 Apr 2025
  • Volume #XXVII
  • Issue #32

Cryptocurrency Stolen in Zoom Social Engineering Campaign; Cursor AI Bot Hallucinates Company Policy; Scammers Claim to be FBI IC3

NewsletterNewsbites
  • 22 Apr 2025
  • Volume #XXVII
  • Issue #31