Skip to content

External Attack Surface Management

Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches: July 02-09, 2025

Between July 2 and July 10, 2025, the cybersecurity landscape was marked by high-impact ransomware attacks, critical vulnerabilities in widely used platforms, and advanced persistent threat (APT) campaigns targeting government and enterprise sectors. This report provides an authoritative, technically exhaustive breakdown of each incident, strictly covering only those breaches and attacks that occurred within this… Read More »Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches: July 02-09, 2025

Weekly Cybersecurity Breach Report June 24-30, 2025

The final week of June 2025 marked one of the most devastating periods in cybersecurity history, with unprecedented credential theft affecting 16 billion login credentials and a surge in sophisticated nation-state attacks targeting critical infrastructure and major corporations. This period witnessed the emergence of advanced AI-powered attack techniques, including deepfake Zoom meetings by North Korean… Read More »Weekly Cybersecurity Breach Report June 24-30, 2025

Weekly Report: New Hacking Techniques and Critical CVEs June 18–June 25, 2025

This week’s intelligence reveals an escalation in targeted exploitation of emerging software flaws, novel stealthy attack techniques leveraging legitimate infrastructure, and politically driven data leaks orchestrated via dark web channels. Three high-severity vulnerabilities—affecting Langflow AI servers, Citrix NetScaler appliances, and default Linux configurations—have been weaponized in the wild. Attackers are also innovating with JavaScript-based credential… Read More »Weekly Report: New Hacking Techniques and Critical CVEs June 18–June 25, 2025

Weekly Cybersecurity Breach Report: June 19–25, 2025

This week’s landscape was dominated by sophisticated espionage and ransomware campaigns spanning telecommunications, insurance, finance, supply chain, critical infrastructure, and software supply chains. State-sponsored and criminal threat actors alike leveraged zero-day exploits, social engineering, code-signing abuse, and destructive malware to breach high-value targets. Key incidents include the Salt Typhoon compromise of Cisco infrastructure, Scattered Spider’s… Read More »Weekly Cybersecurity Breach Report: June 19–25, 2025

The Future of AI Pen Testing: Insights from Bruce Schneier & Renee Guttman At Cyber Risk Alliance Event, USA

At a May 2025 executive panel hosted by Cyber Risk Alliance, security influencers Bruce Schneier and Renee Guttman delivered a clear message: cybersecurity must evolve from static checks to continuous, intelligent validation. Their perspectives are especially close to home for us — both Renee and Bruce are Strategic Advisors at FireCompass, helping guide our mission to bring ethical, AI-powered… Read More »The Future of AI Pen Testing: Insights from Bruce Schneier & Renee Guttman At Cyber Risk Alliance Event, USA