October is Cybersecurity Awareness Month: Strengthening Critical Infrastructure

Thursday, November 20, 2025 Top 5 Cybersecurity Stories You Should Know 1. October is Cybersecurity Awareness Month: Strengthening Critical Infrastructure — tl;dr: October marks Cybersecurity Awareness Month, emphasizing the importance of cybersecurity for U.S. critical infrastructure. The Cybersecurity and Infrastructure Security Agency (CISA) urges small and medium businesses, along

NY Business Council Data Breach Affects 47,329 Individuals

Tuesday, November 18, 2025 Top 5 Cybersecurity Stories You Should Know 1. NY Business Council Data Breach Affects 47,329 Individuals — tl;dr: The Business Council of New York State has reported a data breach impacting approximately 47,329 individuals, detected five months after the intrusion occurred on February 24,

APT28 Breaches US Firm via Wi-Fi Using Nearest Neighbor Attack Technique

Monday, November 17, 2025 Top 5 Cybersecurity Stories You Should Know 1. APT28 Breaches US Firm via Wi-Fi Using Nearest Neighbor Attack Technique — tl;dr: Russian state hackers APT28 exploited a 'nearest neighbor attack' to breach a U.S. firm by compromising a nearby organization's Wi-Fi

Mozilla Patches Critical Firefox 0-Day Vulnerabilities CVE-2025-4918 & CVE-2025-4919

Friday, November 14, 2025 Top 5 Cybersecurity Stories You Should Know 1. Mozilla Patches Critical Firefox 0-Day Vulnerabilities CVE-2025-4918 & CVE-2025-4919 — tl;dr: Mozilla has released an urgent update for Firefox to address two critical 0-day vulnerabilities, CVE-2025-4918 and CVE-2025-4919, which allow remote code execution. These flaws, discovered by security

Microsoft November 2025 Patch Tuesday Addresses 63 Vulnerabilities, Including CVE-2025-62215

Thursday, November 13, 2025 Top 5 Cybersecurity Stories You Should Know 1. Microsoft November 2025 Patch Tuesday Addresses 63 Vulnerabilities, Including CVE-2025-62215 — tl;dr: On November 2025 Patch Tuesday, Microsoft resolved 63 vulnerabilities across its ecosystem, including a critical zero-day flaw (CVE-2025-62215) affecting the Windows Kernel. This privilege escalation vulnerability,

LANDFALL Spyware Targets Samsung Devices via CVE-2025-21042 Exploit

Wednesday, November 12, 2025 Top 5 Cybersecurity Stories You Should Know 1. LANDFALL Spyware Targets Samsung Devices via CVE-2025-21042 Exploit — tl;dr: Unit 42 has identified LANDFALL, a new commercial-grade Android spyware targeting Samsung Galaxy devices, exploiting the zero-day vulnerability CVE-2025-21042 in Samsung's image processing library. Delivered through

Curly COMrades Use Hyper-V for Malware Deployment; AI Chat Vulnerabilities Exposed

Tuesday, November 11, 2025 Top 5 Cybersecurity Stories You Should Know 1. Curly COMrades Use Hyper-V for Malware Deployment; AI Chat Vulnerabilities Exposed — tl;dr: The week saw significant cybersecurity threats, including Curly COMrades exploiting Microsoft's Hyper-V to deploy malware in hidden virtual machines, bypassing endpoint security. A

AI-Generated Ransomware Extension Found in Microsoft VS Code Marketplace

Friday, November 7, 2025 Top 5 Cybersecurity Stories You Should Know 1. AI-Generated Ransomware Extension Found in Microsoft VS Code Marketplace — tl;dr: A malicious AI-generated ransomware extension named 'susvsex' infiltrated Microsoft’s Visual Studio Code marketplace, raising serious concerns about supply chain security. Disguised as a legitimate

Inside Cyber Minds — Launching Season 1 of the Lufsec Podcast

The world of cybersecurity is full of brilliant people — but behind every firewall and incident report are real humans navigating fear, doubt, and growth. That’s what Inside Cyber Minds is all about. Hosted by Luciano Ferrari, this new series from Lufsec Podcast explores how cybersecurity professionals think, lead, and

🎙️ Inside Cyber Minds launches today at 4 PM EST!

After months of recording, editing, and building, Season 1 of the Lufsec Podcast is ready to premiere. Our first episode features Ean Meyer, who opens up about imposter syndrome in cybersecurity — and why the feeling of “never knowing enough” might actually be a sign you’re growing. 🧠 Imposter syndrome is

The Future of Cybersecurity Hiring: Why Entry-Level Talent Will Shape the Industry in 2025

The ISC2 Cybersecurity Hiring Trends Report 2025 reveals why certifications, soft skills, and training programs are reshaping the cybersecurity job market. Learn how Lufsec helps bridge the gap.

October 2025 Data Breaches: Qantas, SimonMed, and Local Governments Hit Hard

Wednesday, November 5, 2025 Top 5 Cybersecurity Stories You Should Know 1. October 2025 Data Breaches: Qantas, SimonMed, and Local Governments Hit Hard — tl;dr: October 2025 witnessed significant data breaches affecting various sectors, including Qantas Airways and SimonMed Imaging, exposing millions of records. Qantas's breach involved 5.