Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Introduction

The National Institute of Standards and Technology carved a new path for vulnerability remediation by changing the way it prioritizes software flaws.

Sapphire Sleet uses fake job offers and phony Zoom updates to deliver ClickFix attacks that steal credentials and sensitive data from Macs.

A benign looking update Dragon Boss pushed out in March 2025 established persistence via scheduled tasks and arranged for future payloads to be excluded from Windows Defender.

Autonomous vehicles. Complex factories. Rising cyber threats. Discover how E80 tackled all three with Cisco industrial networking.

Discover how Cisco CX transformed AIDA Cruises’ digital infrastructure, delivering secure, scalable connectivity and AIOps for an unparalleled guest experience.

Threat actors know how to bypass security systems outside of traditional IT environments. Implementing 2FA could provide a needed extra security barrier in the physical world.

The Secure Boot refresh is one of the largest coordinated security maintenance efforts across the Windows ecosystem, Microsoft said. Update those PCs soon.

Scale infrastructure without costly upgrades using an autonomous, software-defined network model that protects existing investments.

Fortify your network edge against evolving DDoS threats. Discover how Cisco Secure DDoS Edge Protection transforms network security by moving mitigation directly to the edge—and how it can help you slash TCO by 60%.

AI is revolutionizing live broadcast, but it demands a network built for heavy lifting. Read how Cisco and NVIDIA are teaming up to power scalable, high-performance media production.