1010.cx

  • Microsoft Alerts Users as Hackers Exploit Teams Features to Spread Malware

    ·

    , , ,

    Microsoft is urging organizations to harden Microsoft Teams as threat actors increasingly abuse its built-in collaboration features chat, meetings, voice/video, screen sharing, and app integrations to gain initial access, persist, move laterally, and exfiltrate data. While Microsoft’s Secure Future Initiative has strengthened defaults, effective defense requires actively tuning identity, endpoint, data/app, and network controls around […]

    The post Microsoft Alerts Users as Hackers Exploit Teams Features to Spread Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Federal shutdown deals blow to already-hobbled cybersecurity agency

    ·

    As the United States experiences its latest government shutdown, most of the daily operations of the federal government have ground to a halt. This includes much of the day-to-day work done by federal information technology and cybersecurity employees, including those at the nation’s leading civilian cybersecurity agency, the Cybersecurity and Infrastructure Security Agency.

    CISA is among the entities that will see the deepest staffing reductions during the shutdown that began Oct. 1, 2025, according to Department of Homeland Security documentation. Only about one-third of its employees remain on the job after federal employees were furloughed. As if cybersecurity wasn’t challenging enough, fewer CISA employees are being asked to do more and more work protecting American cyberspace during the shutdown. And they’ll be working with the promise of getting paid for their efforts at some date in the future once the shutdown ends.

    The current CISA situation is grim, from my vantage point as a cybersecurity researcher and former industry practitioner. The agency was already experiencing deep cuts to its staff and resources before the shutdown. And now, coinciding with the shutdown, a key law that enabled the agency to facilitate information-sharing with the private sector has expired.

    Taken together, the cyberdefense agency is being hobbled at a time when the need for its services has never been greater, from the ongoing China-led Salt Typhoon attack on U.S. telecommunications networks to ransomware, data breaches and threats to infrastructure.

    CISA was created in 2007 within the Department of Homeland Security. As its name implies, the agency is charged with digital security matters across the federal government. The agency also works with the companies that operate and secure the numerous critical infrastructure sectors of the American economy, such as phone networks, the electric grid and energy pipelines. Additionally, it helps state and local governments across the country secure their vulnerable networks and data.

    CISA also publishes threat and vulnerability alerts for the government and cybersecurity community and engages with public and private stakeholders on best practices in response to emerging vulnerabilities. Prior to the recent expiration of the 2015 Cybersecurity Information Sharing Act, the agency also made it easier for organizations to share useful information with the government to help cybersecurity teams better protect their systems.

    Shutdown-mandated furloughs at the nation’s cybersecurity agency present an opportunity for malicious hackers.

    Political football

    The agency takes a nonpartisan approach to cybersecurity matters. However, some politicians have accused the agency of political bias for its work helping states protect their voting infrastructure from cyberattacks and external influence. The agency was repeatedly maligned for calling the 2020 election the “most secure” in history. For some in elected office, this work on election security has tarnished CISA’s reputation and perhaps explains recent budgetary actions taken against the agency.

    Since the Trump administration took office in January 2025, nearly 1,000 CISA employees have departed the agency through voluntary buyouts or deferred resignations. By the end of May 2025, nearly all of CISA’s senior leaders had resigned or had announced plans to do so.

    For 2026, the president’s draft budget proposes to reduce CISA’s head count by nearly one-third, dramatically cutting staff from its risk management and stakeholder engagement divisions. Other cuts will significantly reduce the agency’s collaboration activities and funding for CISA’s various cybersecurity education and training programs.

    Making the problem worse, the government shutdown began at the same time that Congress failed to renew the Cybersecurity Information Sharing Act. This law provided a legal shield that allowed companies and infrastructure operators to share timely and often sensitive information with CISA about the cyberattacks, vulnerabilities and incidents that they were encountering.

    In the wake of the law’s expiration, prudent companies may consider restricting what information they share with the government. Without the indemnification provided by CISA, many companies will likely have their legal teams review any information to be shared with the government. And that takes time.

    Unfortunately, adversaries do not reduce their attacks against the U.S. based on available federal cyber defense funding or the status of cybersecurity laws. In fact, malicious hackers often strike when their target’s guard is down.

    Charting a better course

    Early in my career I had to work through a prolonged government shutdown. I’ve also participated in and developed assorted public-private information-sharing environments to exchange intelligence and analysis on cyber- and national security matters. And having been in the D.C. area for over 30 years, I’ve seen how government works. So I have a good idea of what’s needed to improve American cybersecurity. The following suggestions are a starting point.

    First, Congress could ensure that critical security agencies such as CISA are immune from the threat of recurring federal government shutdowns. If it desired, Congress could set budgets for America’s security agencies on a biennial basis – as 16 states already do for their entire budgets.

    In terms of cybersecurity funding, the White House’s proposed 2026 budget reduces research and education on cybersecurity. For example, the nation’s premiere federal cybersecurity scholarship program to recruit, educate and place future federal cybersecurity workers would be reduced by over 60%. Protecting this funding would allow CISA and the federal government to maintain the pipeline for a robust and capable cybersecurity workforce both today and into the future.

    Companies could develop new or expand existing nongovernmental information-sharing networks that are not completely dependent on the government to facilitate or fund, such as the Cyber Threat Alliance or the Center for Internet Security. Cybersecurity relies on trust. But right now, the instability of the federal government makes it difficult to rely on any entity under its policy or funding influence, no matter how well time-tested and trusted. Regardless, without legal protections, the information-sharing utility of these services will be limited.

    Cybersecurity risks remain even if the federal government shuts down. So this is another reminder that each of us is responsible for our own cybersecurity. Individual users should continue to remain vigilant, follow accepted best practices for cybersecurity and always be mindful about online risks.

    It’s ironic that the federal government is shutting down, CISA is being eviscerated and the Cybersecurity Information Sharing Act has expired just as the country begins to observe national Cybersecurity Awareness Month – another collaborative public engagement activity that CISA promotes to help improve cybersecurity for all Americans.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Skeptical senators grill White House pick to lead Indo-Pacific policy

    ·

    Senators across the political spectrum are worried the White House and Pentagon’s focus is drifting from the Indo-Pacific, leaving the U.S. vulnerable to China and other potential adversaries. 

    On Tuesday, lawmakers peppered John Noh, the Trump administration’s pick to lead the Pentagon’s Indo-Pacific affairs, with questions about his plans to restore confidence in the United States from its allies and partners in the region. 

    “The Chinese Communist Party, along with the nuclear-armed Russia and North Korea, pose a significant threat to the United States. The scale and scope of that threat put a premium on our alliances. In light of that, I'm disappointed with some of the decisions the department has made with respect to our allies in Japan, South Korea, Australia and Taiwan. A few of these choices have left me scratching my head,” said Sen. Roger Wicker, R-Miss., who leads the Senate Armed Services Committee. 

    Wicker pressed Noh to “inject more diplomatic skill and mutually beneficial approaches into our conversations with our close allies.”

    Sen. Jack Reed, D-R.I., the committee’s ranking member, went further, saying the administration so far has “undermined years of progress with these allies, threatening troop withdrawals, scaling back joint exercises, imposing erratic tariffs and diverting our strategic forces to unrelated regions and even domestic military deployments. These actions weaken our deterrence and damage trust with our allies.” 

    Noh, the deputy assistant defense secretary for East Asia, repeatedly affirmed the Indo-Pacific’s strategic importance, vowing to deepen existing alliances with Japan, the Republic of Korea, Australia, and the Philippines. 

    “China is undergoing really historic and unprecedented military buildup. It is the most rapid military buildup in history, and the largest since World War II, and it spans both conventional and nuclear as well as cyber and space capabilities,” he said. “This is an enormous concern of mine, and if confirmed, Senator, I will do everything in my power to make sure that we have combat-credible forces postured forward in the western Pacific, along, as you mentioned, the first island chain [and] second island chain.”

    But Noh waffled when pressed with more pointed questions about the Trump administration’s decision to cancel $400 million in military aid to Taiwan. 

    Wicker worried that “DOD may be using the Ukraine playbook with Taiwan by taking defense items procured with presidential drawdown authority and returning it to the defense stockpile” which misaligns with “congressional intent, and would require Taiwan to purchase these items that have already been authorized as PDA.”

    Noh responded by citing President Donald Trump’s stance that Taiwan should spend about 10 percent of its GDP on defense. 

    “Everything that Taiwan does, every extra dollar it spends, every capability it acquires, these are extremely important for the defense of Taiwan, and I certainly applaud the leadership in Taipei for taking those actions in terms of security assistance,” he said. “But Taiwan absolutely needs to do its part and spend more and increase its defense spending and acquire the kind of asymmetric capabilities that will be most relevant for an invasion scenario.” 

    Noh extended that stance to other U.S. allies and partners in the region when asked about combating China’s gray-zone tactics in the region, including incursions of Taiwan’s Air Defense Identification Zone. 

    “We need to make sure that our allies and partners in the region are doing more, are spending more, and are doing their part because…these are enormous difficulties, and these are not threats that the United States can or should address on its own. We need our allies and partners in the region to do their part, including Japan, including Australia, Republic of Korea, Taiwan…”

    But while pushing U.S. allies and partners to spend more on defense is good policy sense, it’s not the whole solution, said one of Noh’s prospective predecessors. 

    “It is profoundly in America's interest to have partners who can provide frontline defenses against China's coercion. When our allies are more capable, they can do more on their own. They can contribute more to our collective defense, and in doing so, they can help to strengthen deterrence and reduce the costs and risks shouldered by U.S. forces. This is why the Trump administration, tactics aside, is doing the right thing by urging our partners to spend more on defense,” Ely Ratner, who served as assistant defense secretary for Indo-Pacific security affairs in the Biden administration, said at a Senate Foreign Relations Subcommittee hearing on Tuesday. “But many of them can't do it entirely on their own, whether in the case of the Philippines or the Pacific Islands.”

    Ratner, now principal at The Marathon Initiative, went on to say he was concerned that current U.S. policy means less support for Taiwan, which could lead to instability in the region. 

    “To be frank, I'm concerned that the current direction of U.S. policy is reducing U.S. support for Taiwan and undermining America's commitment to peace and stability in the Taiwan Strait,” he said. “Congress can lead by advancing an all-of-the-above strategy for Taiwan's defense and resilience that uses the full set of tools available, consistent with and reaffirming our commitments under the Taiwan Relations Act. That should include timely foreign military sales, foreign military financing, presidential drawdown authority, and support for Taiwan's defense industrial base.”

    During Noh’s confirmation hearing, Sen. Mark Kelly, D-Ariz., said he is concerned about Trump administration’s plans to shift focus from the Indo-Pacific region in its upcoming national defense strategy. 

    “There are some rumors, I guess, circulating that the new national defense strategy is going to shift priority away from the PRC and away from the Indo-Pacific, and instead focus on the Western Hemisphere. We'll see what happens when that comes out,” Kelly said. “If that's true…this shift is alarming, because most of what is briefed to this committee focuses on how are we going to deter China. So suddenly shifting away from what I view as our biggest near-peer or peer adversary might strategically leave us in a very vulnerable place, with regards to the Ind- Pacific.” 

    To that, Noh vowed to keep the region a top priority “by making sure that we have all the resources we need to strengthen deterrence in the IndoPacific. That's what I've been doing since joining the department in January, and if confirmed, Senator, I will continue to do so.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Denied in July, DHS intelligence office resumes efforts to shed staff

    ·

    In July, stakeholder outcry scuttled a Department of Homeland Security plan to slash the staff of its Office of Intelligence and Analysis. Now DHS is trying again—with buyouts and early-retirement offers.

    The offers to apply to the deferred resignation program, or DRP, were modeled on the Office of Personnel Management’s “fork in the road” effort and sent twice to I&A staffers since July, according to a copy of one of those offer emails issued in September and a person familiar with the matter. The person spoke on the condition of anonymity because they were not authorized to publicly discuss the plans. The email also included options to participate in a Voluntary Separation Incentive Program and Voluntary Early Retirement Authority. 

    The offers were extended after Nextgov/FCW reported in July that the intelligence agency was seeking to jettison most of its employees. Those plans, which would have kept only about 275 of 1,000 staffers, drew pushback from law-enforcement groups and Jewish organizations that have long relied on the DHS spy agency to disseminate timely intelligence about threats to state, local, tribal, and territorial communities. One organization privately warned Congress that the proposed cuts would create “dangerous intelligence gaps.”

    The cuts were put on hold just days later, Nextgov/FCW first reported.

    But I&A is still working to halve its workforce, albeit more slowly, according to the person. The office has already shed about 300 people through early retirement and an initial DRP offering, the person said. It now aims to shed another 200 through a second round of DRP, essentially halving the workforce since January, the person said.

    I&A employees had until Sept. 14 to submit their information for the second deferred resignation, according to the email. Approved staff would remain on administrative leave for 12 weeks, giving them pay until early December, it adds. It is not clear how the current shutdown affects these agreements.

    The programs “provide an opportunity to make decisions as part of the restructuring effort underway in DHS headquarters,” the email says. It was not immediately clear how many people inside the agency elected to take the DRP.

    For years, intelligence insiders and outside experts have said I&A needed a reorganization to operate more effectively—and to install guardrails against the domestic overreach it has been widely accused of in the past. But the deep cuts proposed over the summer put the office at odds with the communities it serves.

    The office is one of 18 in the U.S. intelligence community, and one of two under DHS, along with Coast Guard Intelligence. I&A was created shortly after the September 11 terrorist attacks to help disseminate information about domestic threat.

    U.S. spy agencies, including major offices like the NSA and CIA, have been marked for workforce reductions in President Donald Trump’s second term. Various intelligence offices are also affected amid the ongoing government shutdown. I&A has 544 employees who are still working during the lapse in federal funding, according to a DHS planning document. 

    DHS did not immediately respond to a request for comment.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Warns of Hackers Abuse Teams Features and Capabilities to Deliver Malware

    ·

    , ,

    Microsoft has issued a warning that both cybercriminals and state-sponsored threat actors are increasingly abusing the features and capabilities of Microsoft Teams throughout their attack chains.

    The platform’s extensive adoption for collaboration makes it a high-value target, with its core functions for messaging, calls, and screen-sharing being weaponized for malicious purposes.

    The extensive collaboration features and global adoption of Microsoft Teams make it a high-value target for both cybercriminals and state-sponsored actors.

    Threat actors abuse its core capabilities, messaging (chat), calls, and meetings, and video-based screen-sharing at different points along the attack chain.

    This raises the stakes for defenders to proactively monitor, detect, and respond. While Microsoft’s Secure Future Initiative (SFI) has strengthened default security, the company emphasizes that defenders must utilize available security controls to harden their enterprise Teams environments.

    Hackers Abuse Teams Features

    Attackers are leveraging the entire attack lifecycle within the Teams ecosystem, from initial reconnaissance to final impact, Microsoft said.

    This involves a multi-stage process where the platform’s trusted status is exploited to infiltrate networks, steal data, and deploy malware.

    Teams Attack Chain
    Teams Attack Chain

    The attack chain often begins with reconnaissance, where threat actors use open-source tools like TeamsEnum and TeamFiltration to enumerate users, groups, and tenants.

    They map organizational structures and identify security weaknesses, such as permissive external communication settings.

    This is followed by resource development, where attackers may compromise legitimate tenants or create new ones, complete with custom branding, to impersonate trusted entities like IT support.

    Once they have established a credible persona, attackers move to initial access. This stage frequently involves social engineering tactics such as tech support scams.

    For example, the threat actor Storm-1811 has impersonated tech support to address fabricated email issues, using the pretext to deploy ransomware.

    Similarly, affiliates of the 3AM ransomware have flooded employees with junk email and then used Teams calls to convince them to grant remote access.

    Malicious links and payloads are also delivered directly through Teams chats, with tools like AADInternals and TeamsPhisher being used to distribute malware like DarkGate.

    Escalation and Lateral Movement

    After gaining a foothold, threat actors focus on maintaining persistence and escalating privileges. They may add their own guest accounts, abuse device code authentication flows to steal access tokens, or use phishing lures to deliver malware that ensures long-term access.

    The financially motivated group Octo Tempest has been observed using aggressive social engineering over Teams to compromise Multi-Factor Authentication (MFA) for privileged accounts.

    With elevated access, attackers begin discovery and lateral movement. They use tools like AzureHound to map the compromised organization’s Microsoft Entra ID configuration and search for valuable data.

    The state-sponsored actor Peach Sandstorm has used Teams to deliver malicious ZIP files and then explored on-premises Active Directory databases.

    If an attacker gains admin access, they can alter external communication settings to establish trust relationships with other organizations, enabling lateral movement between tenants.

    The final stages of the attack involve collection, command and control (C2), exfiltration, and impact. Attackers use tools like GraphRunner to search and export sensitive conversations and files from Teams, OneDrive, and SharePoint.

    Some malware, like a cracked version of Brute Ratel C4 (BRc4), is designed to establish C2 channels using Teams’ own communication protocols to send and receive commands.

    Data exfiltration can occur through Teams messages or shared links pointing to attacker-controlled cloud storage. The ultimate goal is often financial theft through extortion or ransomware.

    Octo Tempest, for instance, has used Teams to send threatening messages to pressure organizations into making payments after successfully gaining control of their systems.

    This demonstrates how the platform can be abused not just as an entry vector, but as a tool for direct financial coercion.

    In response, experts recommend a defense-in-depth strategy, focusing on hardening identity and access controls, monitoring for anomalous activity within Teams, and providing continuous security awareness training to users.

    Cyber Awareness Month Offer: Upskill With 100+ Premium Cybersecurity Courses From EHA's Diamond Membership: Join Today

    The post Microsoft Warns of Hackers Abuse Teams Features and Capabilities to Deliver Malware appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Why Threat Prioritization Is the Key SOC Performance Driver  

    ·

    CISOs face a paradox in their SOCs every day: more data and detections than ever before, yet limited capacity to act on them effectively.

    Hundreds of alerts stream in daily, but without clear prioritization, the team’s focus is scattered.

    Critical incidents risk being buried among lower-value events, slowing response and increasing business exposure.   

    The Cost of Losing Focus

    From a business perspective, the consequences of poor alert management are severe: 

    • Escalating operational costs as analysts spend time on irrelevant signals. 
    • Slower decision-making, leaving critical incidents unresolved for longer. 
    • Broader risk surface, as genuine threats can progress unchecked. 

    Ultimately, a SOC’s effectiveness is not measured by the number of alerts processed, but by how quickly it can identify and neutralize those that pose the greatest risk to the organization. 

    Why Prioritization Is Essential 

    The true driver of SOC performance is the ability to separate signal from noise.

    Prioritization ensures that resources, people, tools, and time, are allocated where they matter most. This requires more than detection; it requires context. 

    Threat context answers fundamental business questions: 

    • Is this alert tied to an active campaign in our industry? 
    • Does it represent a threat capable of financial or reputational harm? 
    • How urgent is the risk compared to others in the queue? 

    Without this context, the SOC cannot align operational focus with business risk. 
     
    The Power of Collective Intelligence 

    This is where solutions like ANY.RUN’s Threat Intelligence Lookup fundamentally change the equation.  

    TI Lookup: explore threats and indicators with 40+ search parameters 

    By aggregating threat data from over 15,000 SOCs globally, the platform creates a real-time intelligence ecosystem providing complete context about an alert: severity, associated campaigns, observed behaviors, fresh IOCs.

    Access to real-time intelligence from a global SOC network means your team sees emerging threats as they develop.  

    Instead of spending 30 minutes researching an indicator across multiple sources, analysts get consolidated intelligence instantly.

    With clear threat prioritization, your team can confidently deprioritize low-risk alerts and concentrate on genuine threats. 
     
    For CISOs, this means: 

    • Faster triage: Analysts spend seconds, not hours, validating alerts. 
    • Risk-based focus: Critical incidents are escalated first, reducing dwell time. 
    • Strategic efficiency: The SOC operates with greater ROI, ensuring investments in people and technology translate directly into stronger resilience. 

    Speed up detection and response to leave both attackers and competition behind Contact ANY.RUN for 50 trial searches in Threat Intelligence Lookup 

    A simple example: a suspicious IP address spotted in system logs can be checked in seconds:  

    destinationIP:”172.67.150.243″ 

    TI Lookup IP search: instant verdict, context, and IOCs 

    An analyst sees that the domain has been tagged as malicious and associated with ongoing phishing campaigns powered by the notorious EvilProxy phishkit.

    They can also browse sandbox analysis sessions, analyze TTPs and trends, and gather IOCs for detection and response.  

    From Reactive to Proactive 

    Effective threat prioritization doesn’t just make your SOC faster: it fundamentally transforms how security operations function. Teams shift from reactive alert processing to proactive threat hunting.

    Analysts spend less time on false positives and more time developing defensive strategies. MTTR for critical incidents drops dramatically. 

    For CISOs, this operational transformation delivers measurable business value: reduced risk exposure, more efficient security spending, and a team that’s engaged rather than exhausted. 

    The Bottom Line 

    In today’s threat landscape, success isn’t about processing more alerts — it’s about processing the right alerts with the appropriate urgency.

    Threat intelligence-driven prioritization provides the context that transforms security operations from overwhelmed to optimized. 

    The organizations winning the security battle aren’t necessarily those with the biggest budgets or the most tools.

    They’re the ones that have mastered the art of intelligent prioritization, leveraging solutions like Threat Intelligence Lookup to cut through noise and focus on threats that actually matter. 

    Start your TI Lookup trial, make your SOC proactive, focused, and efficient 

    The post Why Threat Prioritization Is the Key SOC Performance Driver   appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Top 10 Best Digital Risk Protection (DRP) Platforms in 2025

    ·

    , ,

    In today’s digital-first economy, the cyber risk landscape is evolving faster than ever before. Enterprises face threats ranging from phishing campaigns and social engineering to data breaches and brand impersonation. Digital Risk Protection (DRP) platforms are becoming indispensable for businesses to detect, analyze, and mitigate online threats that can impact brand integrity, digital assets, customer […]

    The post Top 10 Best Digital Risk Protection (DRP) Platforms in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • BK Technologies Data Breach – Hackers Compromise IT Systems and Exfiltrate Data

    ·

    , ,

    BK Technologies Corporation, a provider of communications equipment for public safety and government agencies, has disclosed a cybersecurity incident in which an unauthorized third party breached its information technology systems and potentially exfiltrated sensitive data.

    In a recent Form 8-K filing with the U.S. Securities and Exchange Commission (SEC), the company confirmed that it detected the suspicious activity on or around September 20, 2025.

    The investigation is ongoing, but initial findings suggest that data about current and former employees may have been compromised.

    Upon identifying the potential intrusion, BK Technologies immediately launched a response to contain and remediate the threat.

    The company took decisive action by isolating the affected IT systems to halt any further unauthorized activity and prevent lateral movement across its network.

    Incident Detection

    To support its internal teams, BK Technologies engaged the services of external cybersecurity advisors to conduct a thorough investigation.

    According to the filing, these containment and remediation efforts were successful in removing the threat actor from the company’s environment.

    While the incident caused minor disruptions to a limited number of non-critical systems, the company stated that its ability to access impacted information has been restored, and its core business operations have continued without any material interruption.

    While operational continuity was maintained, the investigation has confirmed that the attackers likely accessed and acquired non-public information stored within the company’s systems.

    The primary concern is the potential exposure of sensitive employee data. According to the disclosure, the exfiltrated files may contain records pertaining to individuals who are currently or were previously employed by BK Technologies.

    The company is continuing to investigate the precise nature and full extent of the data theft to understand exactly what information was compromised.

    In line with its legal and regulatory obligations, BK Technologies has already reported the incident to law enforcement authorities and plans to furnish formal notice to all affected parties and relevant regulatory agencies as appropriate.

    Despite the data breach, BK Technologies does not anticipate a material impact on its financial condition or results of operations.

    The company stated in its SEC filing that it expects a significant portion of the direct costs associated with containing, investigating, and remediating the incident to be reimbursed through its insurance coverage.

    Although the investigation is still in progress, the company has taken steps to secure its environment and prevent future occurrences.

    The cautionary statement included in the report notes that the full repercussions of the incident are still being assessed and that risks, including legal, reputational, and financial, could arise as more details emerge.

    The company remains committed to completing its investigation and ensuring all necessary remediation actions are taken.

    Cyber Awareness Month Offer: Upskill With 100+ Premium Cybersecurity Courses From EHA's Diamond Membership: Join Today

    The post BK Technologies Data Breach – Hackers Compromise IT Systems and Exfiltrate Data appeared first on Cyber Security News.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • BatShadow Group Uses New Go-Based ‘Vampire Bot’ Malware to Hunt Job Seekers

    ·

    A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot. “The attackers pose as recruiters, distributing malicious files disguised as job descriptions and corporate documents,” Aryaka Threat Research Labs

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Top 10 Best Cyber Threat Intelligence Companies in 2025

    ·

    , ,

    In 2025, cyber threat intelligence companies are more crucial than ever as organizations face increasingly sophisticated attacks from advanced persistent threats, ransomware gangs, and state-sponsored actors. Choosing the best CTI (Cyber Threat Intelligence) provider can mean the difference between preventing an attack and suffering costly breaches. This article explores the Top 10 Best Cyber Threat […]

    The post Top 10 Best Cyber Threat Intelligence Companies in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶