Google has reported the discovery of 75 zero-day vulnerabilities exploited in the wild in 2024—a drop from 98 in 2023, though still up from 63 in 2022. Nearly half (44%) of these flaws targeted enterprise products, with 20 found in security and networking appliances.
A critical vulnerability, CVE-2025-31324, in SAP’s NetWeaver platform, specifically within the Visual Composer’s Metadata Uploader component, is under active exploitation.
The Federal Reserve Board on Thursday announced the withdrawal of guidance for banks related to their crypto-asset and dollar token activities and related changes to its expectations for these activities.
The Federal Deposit Insurance Corporation (FDIC) has directed Discover Bank to return over $1.2 billion to merchants who were overcharged on swipe fees.
Source: Terra Security
Terra Security, an Agentic AI-native penetration testing service-as-a-software platform, raises $8M in a seed round led by SYN Ventures and FXP Ventures with participation from Underscore VC and notable angel investors including former Google CISO Gerhard Eschelback, Ofer Ben-Noon and Ohad Bobrov, founders of Talon Security, Travis McPeak and Itamar Friedman.
Check Point Research (CPR), the threat intelligence division of Check Point Software Technologies, has released its Q1 2025 Brand Phishing Ranking, revealing that Microsoft remains the most impersonated brand in phishing attacks, accounting for 36% of all attempts.
From late 2024 through early 2025, state-sponsored threat groups from North Korea, Iran, and Russia began using a social engineering technique known as ClickFix to distribute malware.
Block Inc. has been fined by the New York Department of Financial Services (NYDFS) for significant shortcomings in its anti-money laundering (AML) and compliance practices, particularly within its Cash App platform.
