Keep yourself in the loop and stay updated.

Information Technology Resources for Security Awareness

CPE Webinar | Modernized IGA: 5 Game-Changing Capabilities You Won’t Find in Legacy Tools

Modern IGA platforms deliver unified visibility, continuous control, and automated compliance across SAP, Oracle, Workday, and Salesforce. Learn how automation replaces manual effort, closes governance gaps, and ensures secure, audit-ready identity management in today’s dynamic risk landscape.

Webinars

NIST

Cybersecurity Resilience

| Dec 17, 2025

CPE Webinar | NIST 2.0: Common Failures and Their Impact on Cybersecurity Resilience

This webinar explores challenges in implementing the NIST Cybersecurity Framework 2.0, highlighting pitfalls like weak governance, supply chain risk, and misaligned assessments. Gain actionable strategies, real-world insights, and proven methods to strengthen resilience, improve compliance, and align with NIST 2.0 standards.

Auditboard

NIST CSF 2.0

| Dec 17, 2025

NIST CSF 2.0:  A CISO’s Guide

AuditBoard’s guide to NIST CSF 2.0 explains the new Govern function, expanded scope, and tools to help CISOs strengthen resilience, align governance, and improve cybersecurity posture across industries with actionable strategies and real‑world insights.

Phishing

| Dec 12, 2025

Researchers Warn of Four Sophisticated Phishing Kits Targeting Global Users

Cybersecurity researchers have uncovered four advanced phishing kits—BlackForce, GhostFrame, InboxPrime AI, and Spiderman—designed to steal credentials, bypass MFA, and target banks, businesses, and consumers worldwide, raising urgent concerns over evolving threats and detection challenges.

Sabel Systems Leverages Anchore SBOM and SECURE to Scale Compliance While Reducing Vulnerability Review Time by 75%

Sabel Systems cut vulnerability review time by 75% with Anchore Enterprise, scaling secure DevSecOps for DoD IL5 environments. Automated scanning, SBOMs, and real‑time compliance dashboards deliver zero critical vulnerabilities and faster ATO approvals.

Microsoft

Cybersecurity

Vulnerability Management

| Dec 10, 2025

Effective third-party risk management: Harnessing AI-powered technology for success

Discover proven tactics and AI‑powered strategies to strengthen third‑party risk management. Our ultimate guide helps organizations tackle vendor risks, reduce breaches, and streamline processes with best practices for identifying, assessing, and mitigating threats across the vendor lifecycle.

WebXR

Chromium

| Dec 4, 2025

The WebXR Leak: A Hidden Browser Flaw Exposed Millions to Risk

A newly discovered flaw in WebXR exposed Chromium-based browsers to memory leaks, risking over 4 billion devices. AISLE rated it medium severity, but its scale was vast. Google patched CVE‑2025‑12443 swiftly, underscoring the need for users to update browsers to safeguard sensitive data.

Reversing Labs

SBOM

Software Supply Chain

| Dec 4, 2025

The 2025 Software Supply Chain Security Report

The 2025 Software Supply Chain Security Report reveals rising risks in AI, crypto, open‑source, and commercial software. Learn how advanced attacks exploit vulnerabilities, secrets, and binaries—and how enterprises can modernize defenses.

Modern TPRM: Strategies for Securely Onboarding Vendor Software

Cyber threats in the software supply chain are rising. Learn how to manage third-party vendor risk, identify vulnerabilities before deployment, collaborate with vendors, and apply best practices for continuous monitoring to protect enterprise security.

Data Breach

Ransomware

| Dec 3, 2025

Marquis Software Breach Exposes 400,000 Bank Customers

Marquis Software Solutions confirms a ransomware breach affecting 400,000 bank and credit union customers. Hackers exploited a SonicWall firewall to steal names, Social Security numbers, and financial data. Law enforcement notified; Marquis works with clients on consumer alerts.

Wordpress

Cyber Attacks

| Dec 3, 2025

WordPress Sites Under Attack

A critical flaw in the King Addons WordPress plugin (CVE‑2025‑8489) lets attackers gain admin access. Actively exploited since October 2025, the bug affects 10,000+ sites. Update to version 51.1.35 and audit for suspicious accounts to stay secure.

A Modern Approach to Third-Party Risk Assessments

Learn how modern third‑party risk assessments use automation, intelligence, and continuous monitoring to improve compliance, reduce vendor fatigue, and strengthen organizational resilience.

Ransomware

| Dec 2, 2025

Everest Ransomware Group Alleges ASUS Breach, Claims 1TB Data Theft

Everest ransomware group claims to have breached ASUS, stealing over 1TB of data including alleged camera source code. The hackers demand contact via Qtox within 21 hours. ASUS has yet to confirm or deny the incident, leaving the scope and credibility of the breach unverified

Binary Analysis

Reversing Labs

SBOM

Software Supply Chain

| Dec 1, 2025

Closing the Software Supply Chain Security Gap

Close software supply chain security gaps with complex binary analysis. Detect malware, tampering, exposed secrets, and vulnerabilities across binaries to protect applications and strengthen third‑party risk management.

New Android MaaS Threats Expand On-Device Fraud and Remote Control Capabilities

New Android malware Albiriox, sold as MaaS, enables on-device fraud, remote control, and credential theft using VNC and accessibility abuse. Paired with emerging threats like RadzaRat, it highlights a growing ecosystem of advanced malware spread through fake apps and social engineering.

Payment Security

| Dec 1, 2025

EU Reaches Deal on New Payment Services Regulation to Bolster Fraud Prevention

EU lawmakers agree on a new Payment Services Regulation strengthening anti-fraud measures, boosting fee transparency, and improving cash access. The framework targets spoofing scams, mandates IBAN name checks, and tightens rules for platforms advertising financial services.

Governance

Auditboard

| Nov 29, 2025

AI governance at a crossroads: Turning policy into practice

AI adoption is surging—82% of organizations use it—yet governance lags. This AuditBoard and Panterra report, based on insights from 400+ GRC professionals, reveals the policy‑practice gap and offers five strategic actions to build scalable, effective AI governance programs.

Legacy Python Packages Expose Risk of PyPI Supply Chain Attacks

Researchers uncovered vulnerable legacy Python packages that still reference an abandoned domain, creating a supply chain risk on PyPI through potential domain takeover. Outdated bootstrap scripts could deliver malicious code, underscoring ongoing threats, including a recent RAT-infected PyPI package.

Build and Scope Better Vendor Due Diligence Questionnaires

Learn how to build and scope better vendor due diligence questionnaires with automation, risk intelligence, and tailored assessments to improve compliance, reduce vendor fatigue, and strengthen third‑party risk management.

OpenAI Confirms Mixpanel Breach: Limited API User Data Exposed, ChatGPT Unaffected

OpenAI confirmed a third-party breach at Mixpanel that exposed limited API user metadata—names, emails, and browser details—but no passwords, keys, chats, or payments. ChatGPT users were not affected. OpenAI removed Mixpanel, notified users, and urged vigilance against phishing.

Ransomware

Cyberattacks

| Nov 27, 2025

Nationwide Cyberattack Disrupts CodeRED Emergency Alert System

A ransomware attack on the CodeRED emergency alert system exposed user data and disrupted services nationwide. Learn how the breach impacts communities, why password changes are critical, and steps to protect yourself after a cyberattack.

Microsoft

Malware

| Nov 26, 2025

Critical Microsoft Teams Flaw Puts Millions of Corporate Users at Risk

A major security flaw in Microsoft Teams’ B2B Guest Access lets attackers bypass Microsoft Defender protections. Guests entering external tenants lose key safeguards, exposing organizations to phishing, malware, and data theft. Experts urge restricting access to trusted domains immediately.

SitusAMC

Cybersecurity

| Nov 26, 2025

Mortgage Tech Breach Sends Shockwaves Through US Banking Sector

Cyber breach at mortgage tech provider SitusAMC may have exposed sensitive banking and borrower data, affecting major lenders like JPMorgan, Citigroup, and Morgan Stanley. The incident highlights growing risks from third-party technology vendors in the financial sector.

TPRM

ProcessUnity

| Nov 24, 2025

Best Practices for Ongoing Vendor Monitoring

Discover best practices for ongoing vendor monitoring in Third‑Party Risk Management. Learn how to assess risk, streamline workflows, reduce vendor fatigue, and leverage intelligence for proactive, compliant, and resilient vendor relationships.

Unlock Enterprise Value with SBOMs: Use-Cases for the Entire Organization

Anchore’s white paper shows how SBOMs unlock enterprise value across security, DevOps, compliance, legal, and sales—enabling rapid zero‑day response, automated audits, license risk management, and customer trust to strengthen the software supply chain.

Malvertising

TamperedChef

| Nov 20, 2025

TamperedChef: Global Malvertising Attack Disguises Malware as Trusted Software

TamperedChef is a global malvertising campaign that lures users into downloading fake software installers signed with fraudulent certificates. The malware establishes persistence and deploys a JavaScript backdoor for remote access. Healthcare, construction, and manufacturing sectors are most affected as attackers target users searching for common tools and product manuals online.

From burden to business growth: The power of compliance technology

The regulatory landscape is evolving faster and becoming more complex, with new requirements covering more domains. On average, the financial industry spends $181B on compliance each year. Learn how to transform regulatory compliance from a check-the-box exercise to an innovation enabler in this ebook from RegTech Analyst and AuditBoard.

Building a future-ready compliance program in a volatile regulatory environment

Discover key gaps in compliance programs with insights from 400+ audit, risk, and compliance leaders. Learn how accelerating regulations, cross-domain complexity, and fragmented tools create vulnerabilities—and explore strategies to build resilient, connected compliance systems.

IAM

Pathlock

| Nov 18, 2025

Mastering User Access Certifications: A Comprehensive Guide

Mastering User Access Certifications explores modern access governance, showing how centralized, cross-application certification and automated, risk-based processes reduce manual effort, uncover hidden risks, streamline compliance, and enhance security across complex IT environments.

Cloudflare

| Nov 18, 2025

Cloudflare Outage Takes Down Major Websites

A global outage at Cloudflare briefly disrupted access to major websites including OpenAI, Spotify, and X. The issue stemmed from an oversized configuration file that crashed software managing threat traffic. Service was restored within hours, but the incident highlights heavy reliance on content delivery networks, where a single failure can trigger widespread disruption across today’s digital services and platforms.

Ransomware

Tevora

| Nov 17, 2025

Practical Steps to Helping Your Business Avoid or Survive a Ransomware Attack

Protect your business from ransomware with practical strategies to detect threats, respond quickly, recover data, and strengthen cybersecurity. Learn how to monitor networks, assess breaches, comply with legal requirements, work with security experts, and restore critical systems, ensuring your organization stays resilient against evolving cyberattacks. Take proactive steps today to safeguard your operations and maintain a strong cybersecurity posture.

Contact

DRM Policy

Data Security

Our Newsletter

Get regular updates on CPE programs, news, and more.

I would like to receive news, tips and tricks, and other promotional material

Thank you!

Information Technology Resources for Security Awareness

CPE Webinar | Modernized IGA: 5 Game-Changing Capabilities You Won’t Find in Legacy Tools

CPE Webinar | NIST 2.0: Common Failures and Their Impact on Cybersecurity Resilience

NIST CSF 2.0: A CISO’s Guide

Researchers Warn of Four Sophisticated Phishing Kits Targeting Global Users

Sabel Systems Leverages Anchore SBOM and SECURE to Scale Compliance While Reducing Vulnerability Review Time by 75%

Microsoft Ends 2025 with 56 Security Fixes, Including Actively Exploited Flaw

Cloudflare Glitch Shuts Down Banks, Zoom, LinkedIn

CommBank launches national AI and cybersecurity programme for SMEs

Cl0p Ransomware Breach Hits Barts Health NHS Trust

U.S. Warns of Brickstorm Backdoor Malware Targeting U.S. Infrastructure

Effective third-party risk management: Harnessing AI-powered technology for success

The WebXR Leak: A Hidden Browser Flaw Exposed Millions to Risk

The 2025 Software Supply Chain Security Report

Modern TPRM: Strategies for Securely Onboarding Vendor Software

Marquis Software Breach Exposes 400,000 Bank Customers

WordPress Sites Under Attack

A Modern Approach to Third-Party Risk Assessments

Everest Ransomware Group Alleges ASUS Breach, Claims 1TB Data Theft

Closing the Software Supply Chain Security Gap

New Android MaaS Threats Expand On-Device Fraud and Remote Control Capabilities

EU Reaches Deal on New Payment Services Regulation to Bolster Fraud Prevention

AI governance at a crossroads: Turning policy into practice

Legacy Python Packages Expose Risk of PyPI Supply Chain Attacks

Build and Scope Better Vendor Due Diligence Questionnaires

OpenAI Confirms Mixpanel Breach: Limited API User Data Exposed, ChatGPT Unaffected

Nationwide Cyberattack Disrupts CodeRED Emergency Alert System

Critical Microsoft Teams Flaw Puts Millions of Corporate Users at Risk

Mortgage Tech Breach Sends Shockwaves Through US Banking Sector

Best Practices for Ongoing Vendor Monitoring

Unlock Enterprise Value with SBOMs: Use-Cases for the Entire Organization

TamperedChef: Global Malvertising Attack Disguises Malware as Trusted Software

From burden to business growth: The power of compliance technology

Building a future-ready compliance program in a volatile regulatory environment

Mastering User Access Certifications: A Comprehensive Guide

Cloudflare Outage Takes Down Major Websites

Practical Steps to Helping Your Business Avoid or Survive a Ransomware Attack

Executive IT Forums, Inc.

Company

Legal

Our Newsletter

Let us introduce our school

NIST CSF 2.0:  A CISO’s Guide