SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Global Stories

January Patch Tuesday reveals 161 vulnerabilities
Email Security

January Patch Tuesday reveals 161 vulnerabilities

On January's Patch Tuesday, Microsoft revealed 161 vulnerabilities, including eight under active exploitation, with no browser flaws noted this month.

By Adam Barnett • 6 min read • Thu, 16th Jan 2025
Microsoft patches record 157 vulnerabilities in January 2025
Advanced Persistent Threat Protection

Microsoft patches record 157 vulnerabilities in January 2025

Microsoft has unveiled its January 2025 Patch Tuesday update, tackling a record 157 vulnerabilities, including eight critical zero-day flaws.

By Imee Dequito • 3 min read • Wed, 15th Jan 2025
How AI and software development will continue to shape the developer community in 2025
Supply Chain

How AI and software development will continue to shape the developer community in 2025

In 2025, organisations must navigate the complexities of AI integration in software development, balancing innovation with security and skilled developer support.

By Pieter Danhieux and Matias Madou • 7 min read • Tue, 14th Jan 2025
Mandiant reveals details of major Ivanti VPN vulnerability
Malware

Mandiant reveals details of major Ivanti VPN vulnerability

Mandiant unveils a critical zero-day vulnerability in Ivanti Connect Secure VPN appliances, exploited since December 2024 by a suspected China-linked group.

By Sean Mitchell • 2 min read • Fri, 10th Jan 2025
CVE-2025-0282: Ivanti Connect Secure zero-day exploited in the wild
Firewalls

CVE-2025-0282: Ivanti Connect Secure zero-day exploited in the wild

Ivanti has alerted users that the CVE-2025-0282 zero-day vulnerability in Connect Secure is being actively exploited, with patches now available.

By Caitlin Condon • 2 min read • Thu, 9th Jan 2025
Ivanti issues patch for critical security vulnerability
Advanced Persistent Threat Protection

Ivanti issues patch for critical security vulnerability

Ivanti has announced critical patches for two vulnerabilities in its Connect Secure and Policy Secure products, one of which is already under active exploitation.

By Sean Mitchell • 2 min read • Thu, 9th Jan 2025
Open source software challenges predicted to continue in 2025
Endpoint Protection

Open source software challenges predicted to continue in 2025

Chris Hughes predicts that open source software adoption will grow in 2025, alongside sophisticated attacks and challenges in governance and security.

By Catherine Knowles • 3 min read • Sun, 5th Jan 2025
CloudSEK report reveals surge in complex cyber threats
Firewalls

CloudSEK report reveals surge in complex cyber threats

CloudSEK's 2024 Threat Landscape Report reveals a staggering 994TB of data exfiltrated, with ransomware demands averaging over USD $2 million.

By Shannon Williams • 3 min read • Wed, 1st Jan 2025
2024 cyber threat landscape highlights key attack trends
Malware

2024 cyber threat landscape highlights key attack trends

Rapid7's analysis of the 2024 cyber threat landscape reveals alarming trends in ransomware and vulnerability exploits impacting organisations worldwide.

By Kaleah Salmon • 3 min read • Tue, 17th Dec 2024
December Patch Tuesday reveals 70 vulnerabilities
Ransomware

December Patch Tuesday reveals 70 vulnerabilities

This December, Microsoft addresses 70 vulnerabilities, including 16 critical remote code execution flaws, in its latest Patch Tuesday update.

By Adam Barnett • 4 min read • Wed, 11th Dec 2024
Ransomware attacks rise by 19% in October according to NCC Group
Ransomware

Ransomware attacks rise by 19% in October according to NCC Group

Ransomware attacks surged 19% in October, totalling 486 incidents globally, as threat actors increasingly targeted critical infrastructure sectors.

By Sean Mitchell • 3 min read • Mon, 25th Nov 2024
Critical needrestart vulnerabilities found in Ubuntu Servers
Malware

Critical needrestart vulnerabilities found in Ubuntu Servers

The Qualys Threat Research Unit has identified five critical vulnerabilities in needrestart used by Ubuntu Servers, risking unauthorized root access for users.

By Imee Dequito • 2 min read • Wed, 20th Nov 2024
Tenable discloses vulnerability in Open Policy Agent OPA
Identity and Access Management

Tenable discloses vulnerability in Open Policy Agent OPA

Tenable has disclosed a medium-severity SMB force-authentication vulnerability in all Windows versions of Open Policy Agent before version 0.68.0.

By Imee Dequito • 2 min read • Tue, 19th Nov 2024
Cybersecurity advisory highlights top vulnerabilities of 2023
Advanced Persistent Threat Protection

Cybersecurity advisory highlights top vulnerabilities of 2023

Leading cybersecurity agencies have issued an advisory identifying frequently exploited vulnerabilities in 2023, urging enhanced security measures across sectors.

By Sean Mitchell • 3 min read • Tue, 19th Nov 2024
November Patch Tuesday reveals 90 vulnerabilities
Cybersecurity

November Patch Tuesday reveals 90 vulnerabilities

Microsoft is rolling out patches for 90 vulnerabilities this November, including critical remote code execution flaws and several in-the-wild exploits.

By Adam Barnett • 7 min read • Wed, 13th Nov 2024
Critical vulnerabilities found in Unisoc systems-on-chip
Risk & Compliance

Critical vulnerabilities found in Unisoc systems-on-chip

Kaspersky's ICS CERT has revealed critical vulnerabilities in Unisoc SoCs, heightening risks of remote hijacking in devices.

By Catherine Knowles • 2 min read • Thu, 31st Oct 2024

Stories from Other Regions

Hackuity on cyber security challenges & trends for 2025
Skills shortage

Hackuity on cyber security challenges & trends for 2025

Pierre Samson of Hackuity warns that balancing cyber security compliance costs will pose a major challenge for organisations in 2025.

By Sean Mitchell • 3 min read • Sat, 23rd Nov 2024
Androxgh0st botnet expands with Mozi IoT capabilities
DataCentre infrastructure

Androxgh0st botnet expands with Mozi IoT capabilities

CloudSEK warns that the Androxgh0st botnet has significantly expanded its reach, now targeting critical vulnerabilities in various systems and IoT devices.

By Catherine Knowles • 3 min read • Wed, 13th Nov 2024