ThreatLocker helps organizations reduce risk by allowing trusted applications to run while limiting their access to only the resources they need. It’s a straightforward, default deny approach that gives you more control and visibility—without slowing down operations. Explore how ThreatLocker can help simplify your security strategy.
Rubrik’s Data Security Decoded podcast has joined the N2K CyberWire network, bringing trusted, vendor-agnostic insights for cybersecurity and IT professionals. Check out the newest episode, "The Signs of a Secure Software Supply Chain" with Lauren Zabierek. Listen and subscribe now.
Cisco has patched two critical flaws in its Unified Contact Center Express (UCCX) software, SecurityWeek reports. One of the vulnerabilities (CVE-2025-20354) can allow attackers to achieve remote code execution as root. According to the flaw's description, "An attacker could exploit this vulnerability by uploading a crafted file to an affected system through the Java RMI process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root." The other critical flaw (CVE-2025-20358) "could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution."
Cisco hasn't observed exploitation of the vulnerabilities, but "strongly recommends" that customers upgrade to the fixed versions of the software as soon as possible.
AI adoption is exploding, and security teams are under pressure to keep up. That’s why the industry is coming together at DataSecAI25, the premier event for cybersecurity, data, and AI leaders, hosted by Cyera.
ESET warns that Sandworm, a threat actor linked to Russia's GRU, is deploying wipers against Ukrainian entities in the government, energy, logistics, and grain sectors, with the "likely objective being the weakening of the Ukrainian economy." The grain sector is a notable addition to Sandworm's targeting; ESET notes that grain export is one of Ukraine's primary sources of revenue.
The researchers add, "These destructive attacks by Sandworm are a reminder that wipers very much remain a frequent tool of Russia-aligned threat actors in Ukraine. Although there have been reports suggesting an apparent refocusing on espionage activities by such groups in late 2024, we have seen Sandworm conducting wiper attacks against Ukrainian entities on a regular basis since the start of 2025."
Oasis helps enterprises move beyond legacy IAM to govern agentic identities at scale. The platform unifies visibility, automates least-privilege access, and enforces policy across non-human identities (NHIs) and AI agents. By controlling access at the identity layer, Oasis accelerates safe AI adoption without compromising security, compliance, or speed. See how Oasis secures AI and NHIs.
A Chinese court has given the death sentence to five individuals accused of running a Myanmar-based scam syndicate near the border of China, the Record reports. The Shenzhen Intermediate People's Court of Guangdong Province sentenced the syndicate's leader Bai Suocheng to death, along with his son Bai Yingcang and three others. More than a dozen other Bai family members and associates were handed lengthy prison sentences.
Suocheng and his son were the former leaders of a militia working for Myanmar's ruling junta, and were known for running infamous forced-labor scam compounds using thousands of trafficked workers, the BBC reports.
On November 18th, hear directly from SAP's CISO to learn how their team is achieving 3-6x faster workflows and building an AI SOC capability that scales. If you can’t make it live, register anyway to get the on-demand recording sent to your inbox.
Today's issue includes events affecting China, Myanmar, Russia, Ukraine, and the United States.
Malware Now Uses AI During Execution to Mutate and Collect Data, Google Warns (SecurityWeek) Google has released a report describing the novel ways in which malware has been using AI to adapt and evade detection.
KT accused of concealing major malware infection, faces probe over customer data breach (The Korea Times) Mobile carrier KT is facing mounting scrutiny after a government investigation found the company concealed a major malware infection last year. Acc...
China sentences 5 Myanmar scam kingpins to death (The Record) Five others were handed life sentences, while nine of the accused were handed prison sentences of three to 20 years.
For a complete running list of events, please visit the Event Tracker.
ASUG Tech Connect: 2025 (Louisville, Kentucky, USA, Nov 4 - 6, 2025) Join us at ASUG Tech Connect 2025 to explore the latest in SAP technology and security, hear real-world customer stories, and dive into expert-led sessions on cybersecurity, cloud, automation, and AI. Connect with SAP professionals and meet the SecurityBridge team to see how we’re redefining SAP security, built natively for SAP and trusted globally.
Secure Together New York 2025 (New York, New York, USA, Nov 12, 2025) Join us at Secure Together on the Road – New York 2025 to explore the future of SAP security, engage with leading experts and peers across North America, and discover how SecurityBridge empowers organizations with real-time protection—natively integrated, built for modern risks, and designed for today’s evolving enterprise landscape.
ASUG Tech Connect: 2025 (Louisville, Kentucky, USA, Nov 4 - 6, 2025) Join us at ASUG Tech Connect 2025 to explore the latest in SAP technology and security, hear real-world customer stories, and dive into expert-led sessions on cybersecurity, cloud, automation, and AI. Connect with SAP professionals and meet the SecurityBridge team to see how we’re redefining SAP security, built natively for SAP and trusted globally.
Secure Together New York 2025 (New York, New York, USA, Nov 12, 2025) Join us at Secure Together on the Road – New York 2025 to explore the future of SAP security, engage with leading experts and peers across North America, and discover how SecurityBridge empowers organizations with real-time protection—natively integrated, built for modern risks, and designed for today’s evolving enterprise landscape.
CYBERWARCON (Virtual and Arlington, Virginia, USA, Nov 19, 2025) CYBERWARCON is a one-day conference in Arlington, VA focused on the specter of destruction, disruption, and malicious influence on our society through cyber capabilities. CYBERWARCON is not a hacker conference, or an ICS conference, or an international policy conference. The central purpose of this conference is to identify and explore threats. Participants and attendees come from a spectrum of backgrounds, including the military and government, academia, the media, and the private sector.
AWS re:Invent 2025 (Las Vegas, Nevada, USA, Dec 1 - 5, 2025) AWS re:Invent is a learning conference hosted by AWS for the global cloud computing community. The in-person event features keynote announcements, training and certification opportunities, access to more than 2,000 technical sessions, the Expo, after-hours events, and so much more.
TRUSTECH 2025 (Paris, France, Dec 2 - 4, 2025) This international event is the go-to place for all things payments, digital identity, cybersecurity, and fintech. With over 200 exhibitors, 100+ speakers, innovation awards, networking opportunities, and exclusive content, it’s the perfect place to discover what’s next in trusted technologies.
