Contact Us
Curated Articles from 3rd parties

Metis Security Pulse

Welcome to Metis Security Pulse, your go-to source for cutting-edge insights and breaking news in the realm of cybersecurity, with a specific focus on Microsoft Cloud, Azure, M365, and network penetration testing. At Metis Security, we understand the critical importance of staying ahead of the curve in today’s rapidly evolving digital landscape.

Whether you’re a seasoned IT professional, a business owner safeguarding sensitive data, or simply someone with a keen interest in cybersecurity, Metis Security Pulse is your trusted companion. Our curated content covers everything from the latest advancements in AI cybersecurity to insights on risk management and real-world breaches and attacks.

Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack
Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack disrupting deliveries and impacting operations. Astral Foods is a South African...
Published on: 1 hour ago
Source: Security Affairs
Malaysia Airports Hit by Cyberattack: Hackers Demand $10M Ransom
Malaysia Airports Holdings Berhad (MAHB) recently became the target of a cyberattack, causing disruption to its digital systems. The MAHB cyberattack, which occurred in late...
Published on: 1 hour ago
Source: The Cyber Express
Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social Apps
Cybersecurity researchers are calling attention to an Android malware campaign that leverages Microsoft's .NET Multi-platform App UI (.NET MAUI) framework to create bogus banking and...
Published on: 2 hours ago
Source: The Hacker News
INTERPOL Arrests 306 Suspects, Seizes 1,842 Devices in Cross-Border Cybercrime Bust
Law enforcement authorities in seven African countries have arrested 306 suspects and confiscated 1,842 devices as part of an international operation codenamed Red Card that...
Published on: 4 hours ago
Source: The Hacker News
11 ways cybercriminals are making phishing more potent than ever
Phishing has long been a primary source for security breaches — a major issue that, despite years of security awareness training, remains a top cybersecurity...
Published on: 5 hours ago
Source: CSO Online
Data protection: Top trends in Backup and Recovery
Without a robust backup and recovery strategy, organisations risk significant data loss, workflow disruptions, reputational damage, fines, and lawsuits in the case of a data...
Published on: 6 hours ago
Source: Information Security Buzz
Hong Kong Tightens Cyber Laws—What It Means for Businesses and Tech Investments
Hong Kong has passed a cybersecurity law aimed at strengthening the city’s critical infrastructure against cyber threats. The new legislation, titled the Protection of Critical...
Published on: 7 hours ago
Source: The Cyber Express
Microsoft Expands Security Copilot with AI Agents
Microsoft announced a major expansion of its Security Copilot platform today, introducing a suite of AI agents designed to automate common security operations tasks and...
Published on: 12 hours ago
Source: Secure World
Chinese APT Weaver Ant infiltrated a telco in Asia for over four years
China-linked APT Weaver Ant infiltrated the network of a telecommunications services provider for over four years.  The China-linked threat actor Weaver Ant infiltrated the network...
Published on: 14 hours ago
Source: Security Affairs
Chinese Hacker Group Tracked Back to iSoon APT Operation
The group, called FishMonger or Aquatic Panda, is working under contract for the Chinese government to steal data from governmental organizations, Catholic charities, NGOs, think...
Published on: 15 hours ago
Source: Dark Reading
Fake Hiring Challenge for Developers Steals Sensitive Data
Cyble threat intelligence researchers have uncovered a GitHub repository masquerading as a hiring coding challenge that tricks developers into downloading a backdoor to steal sensitive...
Published on: 15 hours ago
Source: The Cyber Express
FBI Warns of Document Converter Tools Due to Uptick in Scams
The FBI's Denver field office says the tools will convert documents while also dropping malware and scraping users' systems for sensitive data....
Published on: 15 hours ago
Source: Dark Reading
Critical 'IngressNightmare' Vulns Imperil Kubernetes Environments
More than 40% of all Internet-facing container orchestration clusters are at risk....
Published on: 16 hours ago
Source: Dark Reading
Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication
A set of five critical security shortcomings have been disclosed in the Ingress NGINX Controller for Kubernetes that could result in unauthenticated remote code execution,...
Published on: 16 hours ago
Source: The Hacker News
New Phishing Campaign Targets macOS Users with Fake Security Alerts
LayerX Labs reports a sophisticated macOS phishing campaign, evading security measures. Learn how attackers adapt and steal credentials from Mac users....
Published on: 17 hours ago
Source: Hack Read
Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data Leaks
Microsoft on Monday announced a new feature called inline data protection for its enterprise-focused Edge for Business web browser. The native data security control is...
Published on: 19 hours ago
Source: The Hacker News
Critical flaw in Next.js lets hackers bypass authorization
A critical severity vulnerability has been discovered in the Next.js open-source web development framework, potentially allowing attackers to bypass authorization checks. [...]...
Published on: 19 hours ago
Source: Bleeping Computer
Microsoft unveils Microsoft Security Copilot agents and new protections for AI
Learn about the upcoming availability of Microsoft Security Copilot agents and other new offerings for a more secure AI future. The post Microsoft unveils Microsoft...
Published on: 19 hours ago
Source: Microsoft Security Blog
FCC Investigates China-Backed Tech Suppliers for Evading US Operations Ban
FCC chairman warns these companies may still be operating in the US because they don't believe that being added to its "Covered List" poses any...
Published on: 19 hours ago
Source: Dark Reading
Advances In Quantum Computing Signal an Urgent Post-Quantum Cryptography (PQC) Imperative for Enterprises
Estimates among experts vary on the timetable for the arrival of “Q-Day” – the day when quantum computers are powerful enough to crack current encryption...
Published on: 20 hours ago
Source: Cyber Defense Magazine
Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools
Medusa ransomware uses a malicious Windows driver ABYSSWORKER to disable security tools, making detection and mitigation more difficult. Elastic Security Labs tracked a financially driven...
Published on: 20 hours ago
Source: Security Affairs
VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, Multi-OS, and Double Extortion Tactics
A ransomware-as-a-service (RaaS) operation called VanHelsing has already claimed three victims since it launched on March 7, 2025. "The RaaS model allows a wide range...
Published on: 21 hours ago
Source: The Hacker News
Oracle Cloud breach may impact 140,000 enterprise customers
A threat actor has reportedly breached Oracle Cloud infrastructure, exfiltrating six million sensitive authentication records and potentially endangering more than 140,000 enterprise customers. The attacker...
Published on: 21 hours ago
Source: CSO Online
Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks
Acronis Threat Research found 2M+ malicious URLs & 5,000+ malware instances in Microsoft 365 backup data—demonstrating how built-in security isn't always enough. Don't let threats...
Published on: 21 hours ago
Source: Bleeping Computer
Key Cybersecurity Themes for 2025
Cyber threats are evolving faster than ever, and security leaders can’t afford to fall behind. That’s why we created the 2025 Fortra State of Cybersecurity Survey—to provide...
Published on: 22 hours ago
Source: Cyber Defense Magazine
New phishing campaign uses scareware to steal Apple credentials
A new phishing campaign targeting Mac systems employs scareware tactics to steal Apple IDs and passwords from unsuspecting users. Identified by LayerX Labs, the attack...
Published on: 23 hours ago
Source: CSO Online
Hackers Exploiting Cisco CSLU Backdoor—SANS Calls for Urgent Action
The SANS Technology Institute has issued a critical warning for organizations using Cisco's Smart Licensing Utility (CSLU), urging them to update their systems immediately to...
Published on: 23 hours ago
Source: The Cyber Express
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More
A quiet tweak in a popular open-source tool opened the door to a supply chain breach—what started as a targeted attack quickly spiraled, exposing secrets...
Published on: 23 hours ago
Source: The Hacker News
VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware
Cybersecurity researchers have uncovered two malicious extensions in the Visual Studio Code (VSCode) Marketplace that are designed to deploy ransomware that's under development to its...
Published on: 1 day ago
Source: The Hacker News
How to Balance Password Security Against User Experience
If given the choice, most users are likely to favor a seamless experience over complex security measures, as they don’t prioritize strong password security. However,...
Published on: 1 day ago
Source: The Hacker News
Oracle Denies Claim of Oracle Cloud Breach of 6M Records
A threat actor posted data on Breachforums from an alleged supply-chain attack that affected more than 140K tenants, claiming to have compromised the cloud via...
Published on: 1 day ago
Source: Dark Reading
Trump shifts cyberattack readiness to state and local governments in wake of info-sharing cuts
On March 19, the White House issued the first executive order (EO) to directly address cybersecurity policies under Trump’s second term. The order, “Achieving Efficiency...
Published on: 1 day ago
Source: CSO Online
Cloak ransomware group hacked the Virginia Attorney General’s Office
The Cloak ransomware group claims responsibility for a cyberattack on the Virginia Attorney General’s Office that occurred in February. The ransomware group Cloak has claimed...
Published on: 1 day ago
Source: Security Affairs
SHARED INTEL Q&A: Forrester highlights why companies need to strive for ‘cryptoagility’– today
Quantum computing’s ability to break today’s encryption may still be years away—but security leaders can’t afford to wait. Forrester’s The Future of Quantum Security makes...
Published on: 1 day ago
Source: The Last Watchdog
Hybrid Threats and AI: Shaping the Future of EU’s Organized Threat Landscape in 2025
The European Union’s landscape of serious and organized crime is undergoing a significant transformation, according to the latest EU-SOCTA 2025 report released by Europol. This...
Published on: 1 day ago
Source: The Cyber Express
Is the Middle East's Race to Digitize a Threat to Infrastructure?
As the region continues with its ambitious road map, cybersecurity must be woven into every step of the process....
Published on: 1 day ago
Source: Dark Reading
CISOs are taking on ever more responsibilities and functional roles – has it gone too far?
When George Gerchow was CISO at Sumo Logic, his responsibilities incorporated the kind of work typically assigned to a chief information security officer — no...
Published on: 1 day ago
Source: CSO Online
Cloud providers aren’t delivering on security promises
Security concerns around cloud environments has prompted 44% of CISOs to change cloud service provider, according to Arctic Wolf. This is being driven by the...
Published on: 1 day ago
Source: Help Net Security
UK CNI’s Overconfidence Puts National Security at Risk
Despite mounting threats and high incident rates, organizations in the UK’s critical national infrastructure (CNI) sector display an alarming overconfidence in their cybersecurity defenses. According...
Published on: 1 day ago
Source: Information Security Buzz
How Businesses Can Turn the Expanding Attack Surface into an Opportunity
Only 42% of companies discover breaches through their own security teams. CISOs are often “blind” to third-party security practices and crucial data pipelines. This lack of transparency...
Published on: 1 day ago
Source: Cyber Defense Magazine
Older posts