Jai Vijayan

Naperville

Independent journalist and tech content creation specialist covering data security and privacy, business intelligence, big data and data analytics

Articles

Chinese Actor Hit Taiwanese Drone Makers, Supply Chains

1 day ago | darkreading.com | Jai Vijayan

The Chinese-speaking threat group Earth Ammit targeted a broader range of industries than just Taiwanese drone manufacturers, as initially assumed. In a report last year, Trend Micro detailed an Earth Ammit campaign dubbed Tidrone that, at the time, it believed specifically targeted military and satellite-related industrial supply chains and drone manufacturers.
North Korea's TA406 Targets Ukraine for Intel

1 day ago | darkreading.com | Jai Vijayan

North Korea-backed threat group TA406 is targeting government agencies in Ukraine in an apparent effort to collect intelligence on the country's continued desire and ability to fight back against Russia's invasion. The campaign appears to be aimed at helping Pyongyang assess the risk to North Korean personnel already deployed in Ukraine alongside Russian forces, and to gauge the likelihood of future requests from Moscow for additional military support, according to a new report from Proofpoint.
Vulnerability Patch Works as Intended

5 days ago | darkreading.com | Jai Vijayan

Commvault has disputed a security researcher's claims that an exploit for a recently disclosed maximum severity vulnerability, tracked as CVE-2025-34028, in its Command Center Web-based management interface remains effective even in recently updated versions of the software. In comments to Dark Reading, Commvault spokesperson Ross Camp called researcher Will Dormann's observation earlier this week inaccurate.
Play Ransomware Group Used Windows Zero-Day

1 week ago | darkreading.com | Jai Vijayan

More than one ransomware actor appears to have exploited a recently disclosed Windows privilege escalation bug before Microsoft issued a patch for it in its April 2025 security update. When it disclosed the zero-day vulnerability, tracked as CVE-2025-29824, last month, Microsoft identified a group it tracks as Storm-2460 as exploiting the vulnerability to deploy ransomware on a small number of victim organizations in the US, Venezuela, Spain, and Saudi Arabia.
SaaS risk is on the rise: 7 action items for better management

1 week ago | securityboulevard.com | Jai Vijayan

The rapid rise in the use of SaaS applications — often without the IT organization’s knowledge or consent — has spawned a whole new set of challenges for security teams. These include visibility gaps, unmanaged data flows, and an expanding attack surface that traditional tools aren’t equipped to handle. A recent study by BetterCloud found that, on average, organizations use 105 SaaS apps — and those apps can have different configurations, security settings, and use cases.
Researcher Says Fixed Commvault Bug Still Exploitable

1 week ago | darkreading.com | Jai Vijayan

Certain versions of Commvault Command Center remain open to attack via a recently disclosed maximum severity vulnerability, even in supposedly patched builds of the software. Attackers are actively exploiting CVE-2025-34028, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to add the flaw to its Known Exploited Vulnerabilities catalog. Broken Fix?
Prolific RansomHub Operation Goes Dark

2 weeks ago | darkreading.com | Jai Vijayan

RansomHub, an aggressive ransomware-as-a-service (RaaS) operation that gained prominence over the past year in the wake of law enforcement actions against LockBit and ALPHV, appears to have abruptly gone dark earlier this month. In a new report this week that offers an in-depth look at RansomHub's affiliate recruitment methods, negotiation tactics, and aggressive extortion strategies, researchers at Group-IB described the operation as inactive since April 1. Migrated to Qilin?
Secrets leaks increase - and expand beyond the codebase

2 weeks ago | securityboulevard.com | Jai Vijayan

Organizations that assume secrets protection is solely about scanning public repositories and codebases for API keys, passwords, and tokens may be overlooking a major blind spot. Collaboration and project management platforms such as Slack, Jira, and Confluence have become high-risk zones for leaked credentials due to their widespread — and largely unmonitored — use in enterprise environments.
Secrets leaks increase - and expand beyond the codebase

2 weeks ago | reversinglabs.com | Jaikumar Vijayan |Jai Vijayan

Organizations that assume secrets protection is solely about scanning public repositories and codebases for API keys, passwords, and tokens may be overlooking a major blind spot. Collaboration and project management platforms such as Slack, Jira, and Confluence have become high-risk zones for leaked credentials due to their widespread — and largely unmonitored — use in enterprise environments.
Many Fuel Tank Monitoring Systems Vulnerable to Disruption

2 weeks ago | darkreading.com | Jai Vijayan

Internet-connected automatic tank gauges (ATGs) pose a serious but often overlooked cyber-risk to the thousands of gas stations, fuel depots, and facilities that rely on these devices to monitor tank levels, temperatures, leaks, and other critical operational parameters.