ThreatLocker helps organizations reduce risk by allowing trusted applications to run while limiting their access to only the resources they need. It’s a straightforward, default deny approach that gives you more control and visibility—without slowing down operations. Explore how ThreatLocker can help simplify your security strategy.
Digital forensics is shifting from reactive to strategic. Join CyberWire Daily host Dave Bittner on Wednesday, June 11 at 1:00pm ET for a live discussion with experts from Magnet Forensics on key insights from the State of Enterprise DFIR Report. Learn how top teams are evolving their tools, workflows, and talent to reduce risk and respond faster to complex incidents. Register now to join live or access it on-demand.
A 19-year-old from Massachusetts named Matthew D. Lane has agreed to plead guilty to his involvement in hacking education software provider PowerSchool late last year, BleepingComputer reports. Lane, who attends college at Assumption University in Worcester, will plead guilty to one count each of cyber extortion conspiracy, cyber extortion, unauthorized access to protected computers, and aggravated identity theft.
The Justice Department says Lane and his co-conspirators hacked a telecommunications company and "a software and cloud storage company that served school systems," and attempted to extort both companies. The DoJ didn't name the victims, but BleepingComputer cites sources as saying the latter entity was PowerSchool. The attackers threatened to leak sensitive personal data belonging to 60 million students and 10 million teachers if the company didn't pay approximately $2.85 million in Bitcoin. PowerSchool did pay a ransom, but the threat actors apparently kept a copy of the data and are now trying to extort individual school districts.
CyberScoop cites a source as saying Lane was affiliated with the ShinyHunters cybercriminal group.
Numerous intelligence agencies from the US, Europe, Australia, and Canada have issued a joint advisory outlining a Russian cyberespionage campaign targeting Western logistics entities and IT companies, including "those involved in the coordination, transport, and delivery of foreign assistance to Ukraine." The agencies attribute the campaign to the Russian GRU's 85th Main Special Service Center, military unit 26165, commonly known as "APT28" or "Fancy Bear." The advisory notes that the campaign is "likely connected to these actors’ wide-scale targeting of IP cameras in Ukraine and bordering NATO nations." The threat actor is using password spraying, spearphishing, and modification of Microsoft Exchange mailbox permissions to gain access to targeted entities.
Atlassian has issued its Security Bulletin for May 2025, disclosing eight high-severity vulnerabilities affecting its products. The flaws affect Bamboo Data Center and Server, Confluence Data Center and Server, Fisheye/Crucible, Jira Data Center and Server, and Jira Service Management Data Center and Server. The company has released patches, and users are urged to update to the latest versions of these products.
Today's issue includes events affecting Australia, Canada, the United Kingdom, and the United States.
Ransomware attack disrupts Kettering Health Network in Ohio (BeyondMachines) Kettering Health, an Ohio hospital network, is experiencing a ransomware attack by a group called "Interlock" that has compromised critical systems including electronic health records, forced staff to revert to manual processes and caused ambulance diversions. Hackers threaten to leak stolen data unless an extortion fee is paid.
ShorePoint Hires Kevin Cox as Executive Director of Cyber Operations Modernization (PR Newswire) /PRNewswire-PRWeb/ -- ShorePoint Inc., an industry-leading cybersecurity services company protecting federal customers' critical assets, today announced the...
Dashlane Names Enterprise Product Veteran, Christophe Frenet, as Chief Product Officer (Cision PR Newswire) /PRNewswire/ -- Credential security leader Dashlane today announced the appointment of enterprise product veteran Christophe Frenet as its new Chief Product...
Orca Integrates with AWS Security Hub to Deliver Unmatched Cloud Risk Visibility (BusinessWire) Deep security telemetry from Orca's Patented SideScanning™ technology provides comprehensive risk insights, accelerating threat detection and response in AWS environments
Action1 Adds VulnCheck NVD++ and New Platform Capabilities (Action1 | Action1 Risk-based Patch Management) New enterprise-grade features include role-based access control, enriched vulnerability insights and remediation, and advanced reporting
For a complete running list of events, please visit the Event Tracker.
CyberWiseCon Europe 2025 (Vilnius and virtual, Lithuania, May 21 - 23, 2025) CyberWiseCon is a premier IT security conference that brings together cybersecurity experts, industry leaders, and IT professionals from around the Europe.
NICE Conference (Denver, Colorado, USA, Jun 1 - 4, 2025) The NICE Conference is the annual convening of community members and thought leaders from education, government, industry, and non-profits to explore ways of developing a skilled cybersecurity workforce ready to meet the challenges of the future. This event provides an opportunity to share best practices from around the world and across sectors in order to build the workforce we need to confront cybersecurity risks today and in years to come.
2025 Space Regulatory Bootcamp (Albuquerque and Virtual, New Mexico, USA, Jun 10 - 11, 2025) ACSP's Bootcamps educate new and established space professionals on must-know fundamentals and arm them for success. The 2025 Space Regulatory Bootcamp, hosted in Albuquerque, New Mexico, is a two day comprehensive industry deep dive with advanced training and meaningful networking. Learn directly from leading subject matter experts on topics including space law, export controls, space telecommunications, government contracting, and more.
AWS re:Inforce 2025 (Philadelphia, Pennsylvania, USA, Jun 16 - 18, 2025) AWS re:Inforce is our annual, immersive, cloud-security learning event delivering hands-on training and collaboration with AWS experts. It’s your opportunity to learn about the latest AWS security innovations, get direct access to the AWS teams and partners who build the security tools you rely on, and connect with cloud security peers from around the world. You’ll leave with actionable next steps to raise your security posture.
