Cybersecurity — May 12, 2025

### Critical Loss for Cyber Defense: CVE-Free Future Discussion Help Net Security highlights the potential impact of a future without the Common Vulnerabilities and Exposures (CVE) program following MITRE's announcement to cease support. The piece delves into the repercussions for cybersecurity operations and management, emphasizing the disarray and challenges it poses for traditional patch management practices. For those in the cybersecurity field, this raises questions about alternative approaches to vulnerability management and the need for new frameworks. Read more: [Help Net Security](https://www.helpnetsecurity.com/2025/05/11/week-in-review-the-impact-of-a-cve-free-future-on-cyber-defense-patch-tuesday-forecast/) ### Bluetooth 6.1: Enhanced Privacy and Efficiency The recent release of Bluetooth 6.1 introduces significant advancements in privacy and power efficiency, notably through Bluetooth Randomized RPA (resolvable private address) Updates. These updates are crucial for making it harder to track devices, a major step forward for privacy in IOT communications. This enhancement reduces battery consumption and strengthens user privacy—a win for end-users and device manufacturers alike. Read more: [Bleeping Computer](https://www.bleepingcomputer.com/news/security/bluetooth-61-enhances-privacy-with-randomized-rpa-timing/) ### Ongoing Cyber Risks: Business Email Compromise (BEC) and Ransomware Despite a stabilization in ransomware claims, Business Email Compromise (BEC) incidents continue to grow, noted by Help Net Security. BEC, often leading to funds transfer fraud, remains a pressing challenge for businesses with increasing severity in financial loss impacts. This underscores the importance of continuous employee training in recognizing phishing attempts and anomalies to mitigate these threats. Read more: [Help Net Security](https://www.helpnetsecurity.com/2025/05/12/businesses-ransomware-claims/) ### AI Guardrails: Not Bulletproof After All An investigation by Mindgard CEO Dr. Peter Garraghan reveals vulnerabilities in AI guardrails meant to protect large language models (LLMs). Current AI-driven protections can be circumvented using simple techniques, casting doubt on the reliability of using AI-based solutions as the sole line of defense against sophisticated cyberattacks. This insight is crucial for firms relying on AI for cybersecurity measures. Read more: [Help Net Security](https://www.helpnetsecurity.com/2025/05/12/peter-garraghan-mindgard-ai-guardrails/) ### You May Also Be Interested In... - **Google Settles for $1.4 Billion Over Privacy Violations**: Read about Google's settlement with Texas concerning unauthorized location tracking and data privacy violations. [Security Affairs](https://securityaffairs.com/177683/laws-and-regulations/google-will-pay-texas-1-4-billion-over-its-location-tracking-practices.html) - **Malware Exploiting Fake AI Tools**: Understand how fake AI tools are being deployed to distribute malware targeting over 62,000 victims. [TheHackerNews](https://thehackernews.com/2025/05/fake-ai-tools-used-to-spread.html) - **New Hacker Tool Can Disable Windows Defender**: Explore the vulnerabilities that allow hackers to disable Microsoft Windows Defender, exposing systems widely to cyber attacks. [Forbes Security](https://www.forbes.com/sites/daveywinder/2025/05/12/warning---microsoft-windows-defender-can-be-disabled-by-hackers/)

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.