This is the monthly zero trust cybersecurity newsletter highlighting key news and actionable insights for enterprises looking to stop the next cyberattack by land, by sea, or in space. Our Cyber Risk Roundup offers a quick peek at this month's big stories.
🏢 A high-severity vulnerability (CVE-2025-0994) in Trimble Cityworks, an asset management tool widely used by local governments and infrastructure organizations, is being actively exploited, prompting CISA to urge immediate patching.
⌛🪱 Russian-backed hacking group Sandworm (Seashell Blizzard) is expanding its “BadPilot” initial access campaign beyond Eastern Europe and Asia, now targeting critical infrastructure in the US, UK, and Australia.
🎖️🪪 Hundreds of compromised credentials linked to DOD agencies and defense contractors have surfaced for sale, some including active session cookies that could allow attackers to bypass MFA.
₿⬇️ Ransomware payments declined 35% in 2024 ($813.55M vs. $1.25B in 2023), largely due to increased law enforcement action and victims refusing to pay. At the same time, nation-state-backed groups are increasingly using ransomware as a revenue stream.
Get the above stories and more in our February Cyber Risk Roundup. Keep scrolling for cyber guides, deep dives, and upcoming events.
