ThreatLocker helps organizations reduce risk by allowing trusted applications to run while limiting their access to only the resources they need. It’s a straightforward, default deny approach that gives you more control and visibility—without slowing down operations. Explore how ThreatLocker can help simplify your security strategy.
Rubrik’s Data Security Decoded podcast has joined the N2K CyberWire network, bringing trusted, vendor-agnostic insights for cybersecurity and IT professionals. Check out the newest episode, "The Signs of a Secure Software Supply Chain" with Lauren Zabierek. Listen and subscribe now.
Palo Alto Networks' Unit 42 warns that the Chinese threat actor Storm-1849 is scanning for and exploiting vulnerable Cisco Adaptive Security Appliances (ASAs), the Record reports. The attackers are targeting CVE-2025-30333 and CVE-2025-20362, which were disclosed in September 2025. Unit 42 says the threat actor has targeted IP addresses used by US Federal government agencies, as well as addresses used by government entities in Australia, Austria, Azerbaijan, Bhutan, France, India, Japan, the Netherlands, Nigeria, Norway, Poland, Spain, the United Arab Emirates, and the United Kingdom.
The US Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive on September 26th ordering US Federal agencies to patch the flaws within twenty-four hours. Organizations that haven't yet patched the flaws should do so immediately, and follow CISA's guidance for detecting signs of compromise.
AI adoption is exploding, and security teams are under pressure to keep up. That’s why the industry is coming together at DataSecAI25, the premier event for cybersecurity, data, and AI leaders, hosted by Cyera.
Microsoft describes a new backdoor dubbed "SesameOp" that's using the OpenAI Assistants Application Programming Interface (API) for its command-and-control communications. Microsoft explains, "[SesameOp] uses OpenAI Assistants API to fetch commands, which the malware then decrypts and executes locally. Once the tasks are completed, it sends the results back to OpenAI as a message. To stay under the radar, it uses compression and encryption, ensuring both the incoming payload and the outgoing results remain hidden."
Microsoft adds, "This threat does not represent a vulnerability or misconfiguration, but rather a way to misuse built-in capabilities of the OpenAI Assistants API, which is being deprecated in August 2026."
Oasis helps enterprises move beyond legacy IAM to govern agentic identities at scale. The platform unifies visibility, automates least-privilege access, and enforces policy across non-human identities (NHIs) and AI agents. By controlling access at the identity layer, Oasis accelerates safe AI adoption without compromising security, compliance, or speed. See how Oasis secures AI and NHIs.
Florida-based psychiatric treatment and addiction recovery provider Oglethorpe, Inc. has notified more than 92,000 patients that their personal and health information may have been exposed in a hack discovered in June 2025, BankInfoSecurity reports. The company has clinics in Florida, Ohio, and Louisiana. Oglethorpe said in its breach notification that the attacker may have accessed patients' first and last names, dates of birth, driver’s license numbers, Social Security numbers, and medical information.
On November 18th, hear directly from SAP's CISO to learn how their team is achieving 3-6x faster workflows and building an AI SOC capability that scales. If you can’t make it live, register anyway to get the on-demand recording sent to your inbox.
Today's issue includes events affecting Australia, Austria, Azerbaijan, Bhutan, France, India, Japan, the Netherlands, Nigeria, Norway, Poland, Spain, the United Arab Emirates, the United Kingdom, and the United States.
Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk (JFrog) Learn how the JFrog Security research team discovered and disclosed CVE-2025-11953 which poses a threat to developers using the popular React Native CLI.
Hackers use RMM tools to breach freighters and steal cargo shipments (BleepingComputer) Threat actors are targeting freight brokers and trucking carriers with malicious links and emails to deploy remote monitoring and management tools (RMMs) that enable them to hijack cargo and steal physical goods.
MIT Sloan shelves paper about AI-driven ransomware (The Register) Even AI has doubts about the claim that '80% of ransomware attacks are AI-driven'
OPM plans to give CyberCorps members more time to find jobs after shutdown ends (CyberScoop) The agency discussed the plans amid student concerns that they’ll be on the hook for six-figure tuition costs, with federal cyber job openings sparse.
For a complete running list of events, please visit the Event Tracker.
Cyber Innovation Day 2025 | Datatribe (Washington, DC, USA, Nov 4, 2025) If you’re raising a seed or pre-seed round and are building the next category-defining company, we want to hear from you! The DataTribe Challenge is the headline event of the afternoon at Cyber Innovation Day 2025, where five finalists take the stage after weeks of hands-on coaching from seasoned startup operators and investors. These five finalists—along with additional promising startups—will exhibit in the Cyber Innovation Expo Hall, gaining high-impact exposure to top investors, cybersecurity leaders, and strategic partners.
CYBERWARCON (Virtual and Arlington, Virginia, USA, Nov 19, 2025) CYBERWARCON is a one-day conference in Arlington, VA focused on the specter of destruction, disruption, and malicious influence on our society through cyber capabilities. CYBERWARCON is not a hacker conference, or an ICS conference, or an international policy conference. The central purpose of this conference is to identify and explore threats. Participants and attendees come from a spectrum of backgrounds, including the military and government, academia, the media, and the private sector.
AWS re:Invent 2025 (Las Vegas, Nevada, USA, Dec 1 - 5, 2025) AWS re:Invent is a learning conference hosted by AWS for the global cloud computing community. The in-person event features keynote announcements, training and certification opportunities, access to more than 2,000 technical sessions, the Expo, after-hours events, and so much more.
TRUSTECH 2025 (Paris, France, Dec 2 - 4, 2025) This international event is the go-to place for all things payments, digital identity, cybersecurity, and fintech. With over 200 exhibitors, 100+ speakers, innovation awards, networking opportunities, and exclusive content, it’s the perfect place to discover what’s next in trusted technologies.
CyberMarketingCon 2025 (Austin, TX, USA, Dec 7 - 10, 2025) CyberMarketingCon will be held December 7-10 in bustling downtown Austin, Texas. Come to learn, network, and enjoy what this beautiful, unique city and your amazing fellow attendees have to offer.
