Automotive IoT Cybersecurity in 2025: WP.29 and the Global Shift to Secure Connected Vehicles

The automotive industry is undergoing its most dramatic transformation in over a century. As vehicles become increasingly connected, autonomous, and software-defined, cybersecurity has emerged as a critical safety issue. What was once a niche concern is now a core requirement for manufacturers, regulators, and consumers. Automotive IoT security has become essential for protecting connected cars from security risks.

Ep 10: AI in the SOC

In this episode, we explore how AI is transforming security operations centers (SOCs) from basic log-watching teams into sophisticated threat-hunting command centers drowning in data. AI excels at processing security alerts faster than any human, but the challenge lies in balancing our growing dependence on algorithmic assistance with the irreplaceable value of human intuition in outsmarting creative attackers.

Partial Scans vs. Full Scans: Which Delivers Better Security Coverage and Efficiency?

Vulnerability scanning is no longer optional for modern teams. With new features released weekly, and sometimes resources deployed and removed within hours, businesses need constant vigilance to stay ahead of attackers. The real question is: how often should you scan without slowing down the development process? Full scans are thorough but time-intensive, sometimes taking hours or days. Partial (incremental) scans are faster and CI/CD-friendly but risk missing critical gaps.

Scattered Spider: What You Need to Know

Founded around 2022, Scattered Spider is a well-known group of young, English-speaking threat actors believed to be from the US and UK. The group—which has some members as young as 16—first gained global recognition in September 2023 when they successfully hacked the internal systems of both Caesars Entertainment and MGM Resorts, obtaining sensitive data they used to extort the casinos.

Say hello to your newest security team member. (and the multiplier you've been waiting for)

Security teams don’t need more fragmented tools. They need clear visibility, smarter AI-driven insights, and integrated workflows. Breach Risk unifies external threat management to help you act faster, report with confidence, and prove your security posture.

Snyk Ranked #51 on 2025 Forbes Cloud 100 List

We’re thrilled to share that Snyk has, for the sixth time and fifth consecutive year, been named to the Forbes Cloud 100 ranked at, recognizing the world’s most innovative private cloud companies. This year’s recognition is especially meaningful, reflecting the bold step we took in May to launch the AI Trust Platform, reorienting Snyk around a single mission — securing the future of AI-native software development.

Stopping BadUSB, Rubber Ducky, and Flipper Zero Attacks

BadUSB, Rubber Ducky, and Flipper Zero devices bypass traditional USB blocking by impersonating keyboards and executing commands at machine speed. Netwrix Endpoint Management combines Endpoint Protector’s device control with Policy Manager’s privilege enforcement to block rogue devices, remove unnecessary admin rights, and contain lateral movement before it escalates.

One Token to Rule Them All - The 443 Podcast - Episode 344

This week on the podcast, we cover a vulnerability in Entra ID that could have allowed attackers to gain Global Admin access to any and all Entra ID tenants. After that, we discuss the Shai Hulud NPM worm that ran rampant over the last week, infecting hundreds of packages. Finally, we end with a quick reminder to WatchGuard Firebox customers to update their devices to the latest firmware to resolve CVE-2025-9242z.

Intel Chat: PromptLock AI ransomware, "Shai-Hulud", ChatGPT calendar vulnerability & FileFix [250]

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.