Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why Your Security Training Is Failing

Mar 25, 2025 By Rubrik In Rubrik
"We have an attention span of around 1.8 seconds" - Carolin Desirée Toepfer explains why traditional security training isn't working. Learn how repetition and psychology-based approaches can drive real behavior change instead of just checking compliance boxes. Watch this episode of Data Security Decoded for research-backed insights from the founder of a cybersecurity edtech platform.
View Video
safeaeon

Ransomware Warning - A Silent Threat Hits Every 39 Seconds

Mar 25, 2025 By SafeAeon Inc. In SafeAeon
Assume starting your weekday with a cup of coffee and being prepared to take on the tasks of the day. Suddenly you notice something unusual as the machine starts. The previously accessed files disappear, and the screen flickers. A red notice appears stating the files have been encrypted and the data would be permanently deleted unless a total of ten million dollars in Bitcoin is paid within 48 hours.
Read Post
knowbe4

Hundreds of Malicious Android Apps Received 60 Million Downloads

Mar 21, 2025 By Stu Sjouwerman In KnowBe4
Bitdefender warns that a major ad fraud campaign in the Google Play Store resulted in more than 60 million downloads of malicious apps. The attackers managed to place at least 331 malicious apps in the Play Store. In addition to displaying full-screen ads, some of the apps also directed users to phishing sites designed to harvest their credentials. “Most applications first became active on Google Play in Q3 2024,” Bitdefender says.
Read Post
centripetal

Security Bulletin: QakBot/Qbot Malware

Mar 20, 2025 By Lauren Farrell In Centripetal
QakBot (also known as Qbot or Pinkslipbot) is a highly adaptive malware that has evolved over the past decade to evade security defenses. Initially developed as a banking trojan to steal financial data, it has since expanded its capabilities, employing advanced evasion techniques and a modular architecture to facilitate credential theft, lateral movement, and ransomware deployment.
Read Post
tripwire

BlackLock Ransomware: What You Need To Know

Mar 20, 2025 By Graham Cluley In Tripwire
BlackLock is a relatively new ransomware group. First seen in March 2024, the ransomware operation initially operated under the name El Dorado, before rebranding as BlackLock late last year. BlackLock follows a RaaS (ransomware-as-a-service) business model, leasing its tools and infrastructure to affiliates who launch attacks, sharing a proportion of the proceeds with BlackLock.
Read Post

How to Effectively Train Your Employees on Cybersecurity

Mar 19, 2025 By Rubrik In Rubrik
Welcome to the Data Security Decoded podcast. In this episode, our host, Richard Cassidy, is joined by Carolin Desirée Toepfer, founder of Cyttraction and CISO as a Service for multiple organizations across Europe and North America. Carolin shares her journey from building websites and online communities to becoming a cybersecurity leader, offering insights into the unique challenges of European cybersecurity, AI security frameworks, and transforming cybersecurity training into data integrity training that better aligns with business needs.
View Video
securitysenses

Cybersecurity Essentials for Startups

Mar 19, 2025 By SecuritySenses In SecuritySenses
Launching a startup is an exciting venture. From conducting market research to defining your value proposition and developing a solid business plan, laying the groundwork for your business requires careful planning and diligence. Another key factor to consider is funding. Whether through investors, crowdfunding, or alternative financing options like private loans, securing adequate capital is essential for success.
Read Post
gitprotect

How Attackers Use AI To Spread Malware On GitHub

Mar 18, 2025 By Wojciech Andryszek In GitProtect
Github Copilot became the subject of critical security concerns, mainly because of jailbreak vulnerabilities that allow attackers to modify the tool’s behavior. Two attack vectors – Affirmation Jailbreak and Proxy Hijack – lead to malicious code generation and unauthorized access to premium AI models. But that’s not all. Contents hide 1 Jailbreaking GitHub Copilot 1.1 Affirmation jailbreak? “Sure,” let’s exploit the AI system(s) 2 Proxy Hijack.
Read Post

When Security Fails: Be READY | Former Federal CIO Warning

Mar 18, 2025 By Rubrik In Rubrik
"Something's going to happen." Maria Roat, former Deputy Federal CIO, delivers a wake-up call about the inevitable nature of security incidents. In this crucial clip from Data Security Decoded, Maria reveals why response preparation is everything and how to minimize damage when (not if) breaches occur. Don't wait until "all your data went out the door" - learn proactive strategies from a federal tech leader who's seen it all!
View Video

Copyright © 2026 OpsMatters™. All rights reserved.