InfoSec News Nuggets 7/2/2025

Microsoft Defender for Office 365 now blocks email bombing attacks  Microsoft says its Defender for Office 365 cloud-based email security suite will now automatically detect and block email bombing attacks. Defender for Office 365 (formerly known as Office 365 Advanced Threat Protection or Office 365 ATP) protects organizations operating in high-risk industries and dealing with sophisticated threat actors from malicious threats from email messages, links, and collaboration tools. "We're introducing a new detection capability in Microsoft Defender…
Read More

InfoSec News Nuggets 5/6/2025

White House Proposes $500 Million Cut to CISA President Donald Trump has proposed slashing the budget of the federal cyber defense agency by nearly $500 million as part of the administration's forthcoming spending plan. The White House provided a series of recommendations on discretionary spending levels for fiscal year 2026 in a Friday letter sent to the Senate appropriations committee, detailing a "rigorous, line-by-line review" of the previous year's budget which it said was found…
Read More

InfoSec News Nuggets 10/19/2022

CVE-2022-42889: Keep Calm and Stop Saying "4Shell"  A previous version of this blog indicated that five JDK versions (JDK 15+) were not impacted due to the exclusion of the Nashorn JavaScript engine. However, an updated PoC came out that uses the JEXL engine as an exploit path. If JEXL is present, the code executes successfully, so this issue can be exploited on any JDK where a relevant engine can be leveraged. CVE-2022-42889, which some have begun calling “Text4Shell,” is a vulnerability in…
Read More