Cybersecurity — May 26, 2025

### NIST Proposes New Metric: "Likely Exploited Vulnerabilities" NIST has unveiled a new metric aimed at refining how organizations prioritize vulnerabilities, dubbed "Likely Exploited Vulnerabilities" (LEV). This initiative seeks community input to improve the accuracy of identifying which software flaws are being actively used in attacks. LEV aims to address the shortcomings in current vulnerability management systems by helping to pinpoint the threats most likely to be exploited in real-world scenarios. [Read more](https://www.helpnetsecurity.com/2025/05/26/nist-likely-exploited-vulnerabilities/) ### Operation ENDGAME: Massive Takedown of Ransomware Infrastructure Europol and Eurojust's Operation ENDGAME has significantly disrupted global ransomware activities by dismantling 300 servers and 650 domains, seizing €21.2 million in cryptocurrency. This massive operation led to 20 international arrest warrants, marking a significant step in combating organized cybercrime. [Read more](https://securityaffairs.com/178245/cyber-crime/operation-endgame-disrupted-global-ransomware-infrastructure.html) ### AsyncRAT Evolves with Rust for Enhanced Stealth The notorious AsyncRAT malware has been rewritten in Rust, enhancing its stealth capabilities and countering analysis efforts. This development indicates a trend towards using newer programming languages to evade detection, posing a novel challenge for cybersecurity professionals. [Read more](https://feeds.feedblitz.com/~/918988475/0/gdatasecurityblog-en~Reborn-in-Rust-AsyncRAT-makes-a-move-to-counter-analysis) ### LlamaFirewall: Meta's Open-Source Defense Against AI Risks Meta has introduced LlamaFirewall, an open-source framework to secure applications powered by large language models (LLMs). Designed to address security risks like indirect prompt injections and jailbreaking attacks, this tool underscores the growing need to protect AI-integrated systems. [Read more](https://www.helpnetsecurity.com/2025/05/26/llamafirewall-open-source-framework-detect-mitigate-ai-centric-security-risks/) ### Why Layoffs Increase Cybersecurity Risks Amidst extensive layoffs in the tech industry, cybersecurity risks have surged. Companies are struggling to revoke access quickly enough, with 45% of layoffs attributed to roles being replaceable by AI. This trend highlights the critical need for robust access management protocols. [Read more](https://www.helpnetsecurity.com/2025/05/26/layoffs-cybersecurity-risks/) ### You May Also Be Interested In... - **AT&T Data Breach Claims:** Hackers allege they've breached 31M records, though evidence remains contested. [Read more](https://cybernews.com/security/att-data-breach-millions-records-claimed/) - **AI Forces Rethink of Cloud Strategies:** Hybrid cloud infrastructures are challenged by AI-driven threats, demanding new security approaches. [Read more](https://www.helpnetsecurity.com/2025/05/26/ai-hybrid-cloud-infrastructure-concerns/) - **Vidar and StealC Malware Via TikTok:** Cybercriminals use fake activation tutorials to spread malware on TikTok. [Read more](https://securityaffairs.com/178269/cyber-crime/fake-software-activation-videos-on-tiktok-spread-vidar-stealc.html) - **Coca-Cola and DocuSign Breaches:** Claims of insider recruitment for data breaches emerge. [Read more](https://socradar.io/coca-cola-and-docusign-breaches-claimed-as-insider-recruiting-and-card-sales-surface/)

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.