Cybersecurity Institute News Roundup 28 April 2025

Welcome to this week’s Cybersecurity Institute News Roundup: a weekly overview of the most interesting news and articles that have caught our attention recently from across the cybersecurity industry. In this week’s roundup, we cover the uncertain future of the Common Vulnerabilities and Exposures (CVE) program, targeted critical infrastructure cyberespionage attacks on the Netherlands, identity attacks now accounting for a third of intrusions, CISOs’ concerns of gen AI supply chain risks outweighing the potential benefits, and the International Civil Aviation Organization’s (ICAO) proposal to replace airline boarding and check-in processes with face biometrics. 

Future of CVE program remains in question 

https://www.bankinfosecurity.com/blogs/seeking-post-mitre-management-whats-next-for-cve-program-p-3858 

Just a week after CISA extended a last minute and interim funding reprieve, the future of the Common Vulnerabilities and Exposures (CVE) program remains in question as DHS looks for a less US-centric funding model. 

Russia and Chinese threat actors targeted Netherlands 

https://www.bankinfosecurity.com/russian-chinese-hackers-targeted-dutch-government-a-28064 

The Dutch Military Intelligence and Security Service has reported several targeted attacks on the country’s critical infrastructure mainly for sabotage by Russian and Chinese threat actors. 

Digital identity on frontlines of cyberwarfare 

https://www.biometricupdate.com/202504/identity-is-under-siege-as-ai-and-cyber-exploits-evolve-and-outpace-defenses 

Identity attacks now compromise a third of all intrusions as cybercrooks increasingly come to understand that identity is the key to access, lateral movement, and long-term exploitation. 

CISOs worried about generative AI supply chain risks 

https://www.helpnetsecurity.com/2025/04/21/ciso-genai-supply-chain/ 

Gen AI is changing the way supply chains run, but until legacy tech is retired and CISOs are fully in the loop on gen AI use, the risks may outweigh the benefits. 

ICAO proposes face biometrics to replace airline boarding passes and check-in processes 

https://www.biometricupdate.com/202504/global-airports-approach-replacement-of-passports-with-face-biometrics 

International Civil Aviation Organization’s (ICAO) digital travel credential (DTC), which securely stores a traveler’s passport data on their mobile device, is being positioned to replace traditional airline boarding passes and check-in protocols with a digital “journey pass”.