January 2025
555 posts. Browse all months
- Google offers ‘voluntary exit’ to all US platforms and devices employees | The Verge
Google offers a voluntary exit program to US employees on the Platforms and Devices team, which includes Android and Pixel hardware. This move comes after …
- OpenAI o3-mini | OpenAI
OpenAI is releasing OpenAI o3-mini, a new, cost-efficient reasoning model with strong STEM capabilities, particularly in science, math, and coding. It supports …
- NorthBay Health Data Breach Impacts 569,000 Individuals - SecurityWeek
NorthBay Health, a non-profit healthcare system, suffered a data breach impacting 569,000 individuals. Hackers accessed personal information, including Social …
- Google Bans 158,000 Malicious Android App Developer Accounts in 2024
Google blocked over 2.36 million policy-violating Android apps and banned 158,000 developer accounts in 2024. They also prevented 1.3 million apps from …
- VMware offers fixes to severe vulnerabilities in VMware Aria | CSO Online
VMware Aria, a cloud management platform, has multiple vulnerabilities, including information disclosure flaws and cross-site scripting vulnerabilities. These …
- NY Blood Center Attack Disrupts Suppliers in Several States
A ransomware attack on New York Blood Center Enterprises (NYBCe) is disrupting blood supply centers in several states, including New York, New Jersey, …
- Backdoor found in two healthcare patient monitors, linked to IP in China
CISA warns of a backdoor in Contec CMS8000 healthcare patient monitors, sending patient data to a Chinese university IP address and allowing remote file …
- Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform · GitHub
A 15-year-old hacker discovered a 0-click deanonymization attack targeting Signal, Discord, and other apps using Cloudflare’s caching feature. The attack …
- DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked
DeepSeek, a prominent Chinese AI startup, exposed a database containing over a million lines of log streams, including sensitive information like chat history, …
- Windows 11’s 24H2 January update is causing havoc on people’s PCs
The latest Windows 11 24H2 update, KB5050009, is causing issues with Bluetooth, USB DAC, and some webcams. Users experiencing problems after installing the …
- NordVPN’s new feature gets around networks that block VPNs | The Verge
NordVPN introduces NordWhisper, a new protocol that utilizes web tunnel technology to disguise VPN connections as ordinary internet traffic, enabling users to …
- Apple’s New ‘Game Changer’ iPhone Update Brings Starlink Satellite Access
Apple’s latest iPhone update, iOS 18.3, includes compatibility with the Starlink satellite network, enabling text messaging from virtually anywhere. This new …
- Microsoft CEO: AI Scaling Laws Drive Efficiency, Lower Costs
Microsoft CEO Satya Nadella believes AI advancements, particularly those driven by scaling laws and Moore’s Law, will lead to increased efficiency and cost …
- Security Roundup January 2025 - BH Consulting
The World Economic Forum’s Global Risk Report 2025 highlights cyber risks, including misinformation and disinformation, cyber espionage, and warfare, as …
- Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits
Three unpatched vulnerabilities in the open-source PHP package Voyager allow attackers to achieve remote code execution on affected servers. These …
- Operation Talent: FBI Seizes Nulled.to, Cracked.to, Sellix.io and more
The FBI seized several cybercrime forums and illicit marketplaces, including Nulled.to, Cracked.to, Sellix.io, and StarkRDP.io, as part of Operation Talent. …
- IT Services Vendor Hack Affects 293,000 AHN Patients
Allegheny Health Network (AHN) is notifying 293,000 patients of a data breach involving their IT services vendor, IntraSystems. The breach, which occurred in …
- CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia
A Chinese threat actor, tracked as CL-STA-0048, targeted high-value organizations in South Asia using a sophisticated espionage operation. The actor employed …
- Russian UAC-0063 Targets Europe and Central Asia with Advanced Malware
Russian APT28-linked threat actor UAC-0063 is actively targeting Central Asia and European countries with sophisticated cyberespionage campaigns. The actor …
- Threat actors using Google Gemini to amplify attacks: Report | CSO Online
Government-backed threat actors are utilizing Google’s Gemini AI service for various purposes, including research, code troubleshooting, and content …
- U.S. CISA adds Apple products' flaw to its Known Exploited Vulnerabilities catalog
CISA added a privilege escalation vulnerability in Apple products, CVE-2025-24085, to its Known Exploited Vulnerabilities catalog. The vulnerability, actively …
- FBI Seizes Leading Hacking Forums Cracked.to and Nulled.to
Two prominent hacking forums, Nulled.to and Cracked.io, appear to have been seized by the FBI based on DNS record changes. While no official confirmation has …
- These are the 10 worst PIN codes | Malwarebytes
A study of 29 million PIN codes revealed a concerning lack of security, with predictable choices like 1234 and 0000 being common. Using easily guessable PINs, …
- Mishing Cyber Attack from malicious PDF - Cybersecurity Insiders
A new mishing campaign, targeting mobile users with malicious PDFs disguised as USPS alerts, is on the rise. The campaign, uncovered by Zimperium, exploits …
- Old Ways of Vendor Risk Management Are No Longer Enough
Traditional third-party risk management (TPRM) strategies are inadequate for managing SaaS vendor risk in today’s evolving threat landscape. Organizations must …
- Top 10 Exploited Vulnerabilities of 2024 - SOCRadar® Cyber Intelligence Inc.
In 2024, organizations faced a surge in cyber threats, with vulnerabilities exploited rapidly, often within days of disclosure. Notable examples include Cleo …
- Aquabot Botnet Targeting Vulnerable Mitel Phones - SecurityWeek
A Mirai-based malware family, Aquabot, is targeting vulnerable Mitel SIP phones to exploit CVE-2024-41710, a command injection vulnerability. The malware, …
- New phishing campaign targets users in Poland and Germany | CSO Online
An ongoing phishing campaign, likely by an APT actor, targets users in Poland and Germany, delivering TorNet backdoors for stealthy C2 operations. The …
- Hackers Claim 2nd Breach at HP Enterprise, Plan to Sell Access
IntelBroker, a notorious hacker, claims responsibility for a second data breach at Hewlett-Packard Enterprise (HPE), exposing sensitive data and infrastructure …
- Unmasking FleshStealer: A New Infostealer Threat in 2025 | Flashpoint
FleshStealer, a new C#-based infostealer, is rapidly gaining attention due to its advanced evasion techniques and aggressive data harvesting capabilities. It …
- OAuth Flaw Exposed Airline Users to Account Takeovers
A vulnerability in a major travel services company’s OAuth authentication process exposed millions of airline customers to potential account takeovers. The …
- Unknown threat actor targeting Juniper routers with backdoor: Report | Network World
An unknown threat actor has been installing a backdoor in Juniper routers since at least 2023, allowing them to control the routers and potentially steal data. …
- Only 13% of organizations fully recover data after a ransomware attack - Help Net Security
Ransomware attacks are increasingly disruptive, with 58% of organizations shutting down operations and 40% experiencing significant revenue loss. Despite 29% …
- API Supply Chain Attacks Surge, Exposing Critical Security Gaps
API attack traffic surged by 681% over the past year, highlighting threat actors’ growing focus on APIs as attack vectors. Despite the risks, many …
- Cybersecurity crisis in numbers - Help Net Security
The number of US data compromises decreased slightly in 2024, but a surge in data breach notices, primarily due to six mega-breaches, resulted in over 1.7 …
- Building Resilience Against Zero-Day Threats In Third-Party Risk Management
Organizations must adopt proactive third-party risk management (TPRM) to build resilience against zero-day threats. This involves continuous monitoring, …
- UAC-0063 Expands Cyber Attacks to European Embassies Using Stolen Documents
The APT group UAC-0063, linked to Russian state-sponsored actors, has expanded its cyber attacks beyond Central Asia, targeting European embassies with stolen …
- How Lazarus Group built a cyber espionage empire - Help Net Security
Lazarus Group, a North Korean cyber espionage group, used a centralized control panel to orchestrate a global software supply chain attack. The attack, which …
- Ex-worker arrested after ‘shutdown’ of British Museum computer systems
A former IT contractor was arrested after allegedly trespassing onto the British Museum site and shutting down computer systems, including the ticketing …
- Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution
A critical security flaw (CVE-2025-22604) in Cacti allows authenticated attackers to execute arbitrary code on susceptible instances. The flaw, present in all …
- SimpleHelp Remote Access Software Exploited in Attacks - SecurityWeek
Threat actors are exploiting vulnerabilities in SimpleHelp remote access software, CVE-2024-57727, CVE-2024-57728, and CVE-2024-57726, to gain administrative …
- Cyber Insights 2025: Artificial Intelligence - SecurityWeek
Artificial Intelligence (AI) is rapidly evolving, with both positive and negative implications for cybersecurity. While AI offers enhanced capabilities for …
- Smiths Group Scrambling to Restore Systems Following Cyberattack - SecurityWeek
Smiths Group, a British engineering firm, is recovering from a cyberattack that resulted in unauthorized access to its systems. The company is working with …
- Is DeepSeek Safe? A Q&A on the Cybersecurity Risks of the AI Platform - SOCRadar® Cyber Intelligence Inc.
DeepSeek, a rising AI platform, has faced a large-scale cyberattack and security concerns, including data privacy issues and potential misuse. While its …
- Looking Back To Look Forward: 2024’s Top Email Threats
VIPRE Security Group’s 2024 email threat landscape report reveals that 90% of emails were spam, with 62% being malicious. Malware families like PikaBot, IceID, …
- ExxonMobil Lobbyist Caught Hacking Climate Activists - Schneier on Security
The Department of Justice is investigating a lobbying firm representing ExxonMobil for allegedly commissioning the hacking of climate activists’ phones. The …
- Apple chips can be hacked to leak secrets from Gmail, iCloud, and more - Ars Technica
Two newly discovered vulnerabilities, FLOP and SLAP, affect Apple-designed chips powering Macs, iPhones, and iPads. These vulnerabilities enable side-channel …
- Let’s Secure Insurance failed to secure their own data storage. Now they have a breach. – DataBreaches.Net
Let’s Secure Insurance Brokers Pvt Ltd. fell victim to a ransomware attack by the Kill Security group, who claim to have accessed company data. However, the …
- Prompt Injection Tricks AI Into Downloading And Executing Malware | Hackaday
A proof-of-concept demonstrates how prompt injection can trick an AI service into downloading and executing malware, compromising the system. This highlights …
- South Korea sees cyber-attack damage increase by 48% year on year - Telecompaper
According to a report by Telecompaper, South Korea experienced a 48% year-on-year increase in damages from cyber-attacks in 2024. Notably, while ransomware …
- Faridabad police arrest 41 cyber criminals in week - The Tribune
Faridabad police arrested 41 individuals in connection with 17 cybercrime cases, recovering Rs 26.79 lakh from the accused. The modus operandi of these …
- Cyber-attacks on the tech supply chain spiked in 2024
Cyber-attacks on the global technology supply chain surged in 2024, with a 179% increase in weekly attacks on the hardware and semiconductor industries. The …
- EU Sanctions Three Russians For 2020 Cyber-Attack on Estonia - Infosecurity Magazine
The EU sanctioned three Russian nationals, Nikolay Korchagin, Vitaly Shevchenko, and Yuriy Denisov, for their involvement in a 2020 cyber espionage operation …
- Smiths Group Manages Cyber Security Incident - TipRanks.com
Smiths Group plc is addressing a cyber security incident involving unauthorized access to its systems. The company has isolated the affected systems and is …
- Tech selloff deepens as DeepSeek upsets global AI race | Reuters
The emergence of DeepSeek, a low-cost Chinese AI model, has sparked a global tech sell-off, questioning the valuations and dominance of AI bellwethers. …
- Now Apple tells us how to update AirPods - The Verge
Apple updated its AirPods firmware support page with a step-by-step guide on how to update AirPods, AirPods Pro, and AirPods Max. The guide includes specific …
- Swedish Authorities Seize Vessel in Cable Sabotage Probe
Swedish authorities seized a Malta-flagged vessel, the Vezhen, in the Baltic Sea as part of a criminal probe into alleged sabotage of an undersea cable between …
- SonicWall’s Zero-Day Provokes Patch Alerts - GovInfoSecurity
SonicWall’s Secure Mobile Access 1000 Series devices are vulnerable to a critical flaw (CVE-2025-23006) allowing remote code execution without authentication. …
- DeepSeek’s Popular AI App Is Explicitly Sending US Data to China | WIRED
DeepSeek, a Chinese AI platform, is gaining popularity for its generative AI model, raising concerns about US user data being sent to China. The platform’s …
- Meta AI Tracks Canadians on Facebook, Messenger, WhatsApp • iPhone in Canada Blog
Meta AI is getting a “memory” feature in Canada and the U.S., allowing it to remember personal details and preferences from one-on-one conversations. This …
- Attackers Exploit PDFs In Sophisticated Mishing Attack
A sophisticated phishing campaign, dubbed the “PDF Mishing Attack,” is targeting mobile device users in over 50 countries. The campaign, which impersonates the …
- InvisibleFerret: Everything About Lazarus APT’s New Backdoor - Cybersecurity Insiders
Lazarus Group, a North Korean cyber threat actor, is using fake job interviews to deliver malware, including InvisibleFerret, a Python-based backdoor. …
- Compliance Scorecard Version 7 simplifies compliance management for MSPs - Help Net Security
Compliance Scorecard Version 7 simplifies compliance management for MSPs with new features and integrations. The platform now includes security training …
- Data Protection Day 2025: three takeaways for embedding privacy principles - BH Consulting
Data Protection Day 2025 emphasizes the evolving nature of data protection, highlighting the need for continuous improvement beyond initial compliance. …
- A method to assess ‘forgivable’ vs ‘unforgivable’… - NCSC.GOV.UK
The rising number of Common Vulnerabilities and Exposures (CVEs) reflects a critical challenge in secure software development. While some vulnerabilities are …
- Dark Web Profile: FunkSec - SOCRadar® Cyber Intelligence Inc.
FunkSec, a new ransomware group, has been active since December 2024, claiming responsibility for numerous attacks on organizations across various industries …
- E.U. Sanctions 3 Russian Nationals for Cyber Attacks Targeting Estonia’s Key Ministries
The European Union has sanctioned three Russian nationals for cyber attacks targeting Estonia’s key ministries. The individuals, linked to GRU Unit 29155, are …
- Top-Rated Chinese AI App DeepSeek Limits Registrations Amid Cyberattacks
DeepSeek, a Chinese AI startup, is limiting new registrations due to cyberattacks. The company, known for its AI language models and iOS chatbot app, has …
- Nursing Home, Rehab Chain Says Hack Affects Nearly 70,000
HCF Management, a healthcare and nursing home chain, suffered a data breach affecting nearly 70,000 individuals. The Russian-speaking cybercriminal gang …
- ESXi ransomware attacks use SSH tunnels to avoid detection
ESXi ransomware attacks exploit unmonitored appliances, using SSH tunneling for undetected communication with C2 servers. Attackers gain access through …
- CISOs’ top 12 cybersecurity priorities for 2025 | CSO Online
CISOs are prioritizing strengthening security posture, upgrading IT security, and securing cloud data in 2025. AI is also a top priority, with CISOs seeking to …
- Hackers allegedly stole $69M from cryptocurrency platform Phemex
Singapore-based cryptocurrency platform Phemex suffered a cyberattack resulting in the theft of $69 million worth of cryptocurrency. The company is restoring …
- GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities
A new threat actor, GamaCopy, is mimicking the tactics of the Gamaredon hacking group in cyber attacks targeting Russian entities. GamaCopy uses military …
- A Strategic Approach To Container Security
Containerization technologies have revolutionized application development, but their rapid adoption introduces unique security challenges. A comprehensive …
- MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks
A cyber campaign uses MintsLoader, a PowerShell-based malware loader, to deliver StealC information stealer and BOINC to targeted sectors in the US and Europe. …
- How to use Apple’s App Privacy Report to monitor data tracking - Help Net Security
Apple’s App Privacy Report, introduced in iOS 15.2, allows users to monitor how apps access data and interact with third-party services. The report provides …
- Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware – The DFIR Report
A LockBit ransomware attack began with the download and execution of a Cobalt Strike beacon disguised as a legitimate Windows utility. The threat actor used …
- Abusing multicast poisoning for pre-authenticated Kerberos relay over
Kerberos relaying over HTTP is possible through multicast poisoning, as discovered by James Forshaw. This attack vector, implemented in Responder and …
- Cisco warns of a ClamAV bug with PoC exploit
Cisco released security updates for a ClamAV denial-of-service (DoS) vulnerability, CVE-2025-20128, which allows remote attackers to crash scans and cause a …
- Meta’s Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks
A high-severity security flaw in Meta’s Llama large language model framework allows attackers to execute arbitrary code on llama-stack inference servers. The …
- OpenAI Launches AI Agent ‘Operator’ - GovInfoSecurity
OpenAI launched Operator, an AI agent capable of independent action, designed to perform tasks such as travel booking and online shopping. While initially …
- Patching Lags for Vulnerabilities Targeted by Salt Typhoon
Chinese nation-state hackers, known as Salt Typhoon, have exploited known vulnerabilities in networking gear from Microsoft, Sophos, Fortinet, and Ivanti, …
- Massive Data Leak of information on Georgians/JAMnews
Sensitive personal data of nearly the entire Georgian population was leaked online, including identification numbers, full names, and phone numbers. The data, …
- UnitedHealth Group’s Massive Data Breach Impacts 190 Million Americans
UnitedHealth Group’s subsidiary Change Healthcare experienced a ransomware attack in February 2024, impacting 190 million Americans and exposing sensitive …
- TalkTalk investigates breach after data for sale on hacking forum
TalkTalk is investigating a potential data breach involving a third-party supplier, Ascendon SaaS. A threat actor is selling alleged customer data on a hacking …
- American National Insurance Company (ANICO) Data Leaked in MOVEit Breach
American National Insurance Company (ANICO) customer data, including personal information and policy details, was leaked online. The data, potentially linked …
- Crunchyroll password leaks: What’s happening with Crunchyroll Premium accounts now | esports.gg
Crunchyroll Premium accounts may be at risk due to a recent password leak. While Crunchyroll has not issued an official response, users are advised to reset …
- OpenAI launches Operator, an AI agent that performs tasks autonomously | TechCrunch
OpenAI launches Operator, a research preview of an AI agent capable of autonomously performing tasks within a web browser. Operator, powered by a …
- Introducing GhostGPT—The New Cybercrime AI Used By Hackers
GhostGPT, an uncensored AI chatbot, is being used by cybercriminals for malicious activities such as malware creation and phishing scams. Unlike traditional AI …
- $4.88M was the average cost of a data breach in 2024 | Security Magazine
The average cost of a data breach in 2024 was $4.88 million, with criminal activities being the primary cause of cyber insurance claims. Ransomware and …
- New Law Could Mean Prison for Reporting Data Leaks | Tripwire
Turkey’s proposed cybersecurity law criminalizes reporting on data breaches, raising concerns about stifling journalism and free speech. Critics argue the law …
- Belgium: Private Investigation Act — How it impacts your internal investigations - Global Compliance News
Belgium’s new Private Investigation Act (PIA) significantly impacts businesses, including those conducting internal investigations. The PIA, which applies to …
- Nearly half of CISOs now report to CEOs, showing their rising influence - Help Net Security
CISOs are increasingly reporting to CEOs and participating in board meetings, reflecting their growing influence. While boards with CISO experience have …
- 2025 State of SaaS Backup and Recovery Report
The 2025 State of SaaS Backup and Recovery Report reveals a concerning lack of confidence in SaaS data recovery, with 87% of IT professionals experiencing data …
- RANsacked: Over 100 Security Flaws Found in LTE and 5G Network Implementations
Over 100 security vulnerabilities were discovered in LTE and 5G network implementations, including buffer overflows and memory corruption errors. These …
- A New Wave Of Ransomware Campaigns Is Targeting Microsoft Teams - SOCRadar® Cyber Intelligence Inc.
Two ransomware campaigns, STAC5143 and STAC5777, are exploiting Microsoft Teams’ external sharing settings to infiltrate organizations. Threat actors use …
- North Korean Fake IT Workers More Aggressively Extorting Enterprises - SecurityWeek
North Korean fake IT workers are increasingly extorting their employers, stealing sensitive data, and facilitating cybercrime to generate revenue for the …
- This Corporate Data Breach Lasted 3 Years and Exposed 3 Billion Accounts - 24/7 Wall St.
This article highlights the largest corporate data breaches in history, including MySpace, Friend Finder Networks, Marriott International, Facebook, Sina …
- Ransomware Groups Abuse Microsoft Services for Initial Access - SecurityWeek
Two threat actors, STAC5143 and STAC5777, are abusing Microsoft 365 services and exploiting default Microsoft Teams configurations to initiate conversations …
- US experiences 47% of global utilities cyberattacks | Security Magazine
Cyberattacks against the utilities sector are on the rise, with a 80% increase in ransomware incidents since 2023. The United States, with its outdated …
- FTC finalizes COPPA rule amendments | Data Protection Report
The Federal Trade Commission (FTC) has finalized significant amendments to the Children’s Online Privacy Protection Act (COPPA) Rule, strengthening protections …
- Medical Device Company Tells Hospitals They’re No Longer Allowed to Fix Machine That Costs Six Figures
Terumo Cardiovascular, a medical device manufacturer, has informed hospitals that they will no longer allow in-house repair technicians to maintain or fix …
- MasterCard DNS Error Went Unnoticed for Years – Krebs on Security
MasterCard had a DNS error for nearly five years, allowing anyone to intercept or divert traffic by registering the unused domain “akam.ne.” Security …
- Microsoft 365 Subject to Email Bombing, ‘Vishing’ Attacks
Sophos warns of ransomware attacks using email bombing and vishing tactics through Microsoft Office 365. Two threat groups, STAC5143 and STAC5777, are …
- Redline, Vidar and Raccoon Malware Stole 1 Billion Passwords in 2024
Over 1 billion passwords were stolen by malware in 2024, highlighting the need for stronger password policies and user education. Malware like Redline, Vidar, …
- Russian ransomware hackers increasingly posing as tech support on Microsoft Teams - The Cyber Post
Russian cybercriminals are using Microsoft Teams to pose as tech support, tricking victims into installing ransomware. The attackers, possibly linked to …
- 37% of privacy professionals cite lack of resources as cause of stress | Security Magazine
Privacy professionals face increased stress due to rapid technology evolution, compliance challenges, and resource shortages, including underfunded budgets and …
- Kaspersky finds US Cybersecurity budgets up by 9 percent in next 2 years - Cybersecurity Insiders
Kaspersky’s IT Security Economics report shows a 9% increase in cybersecurity budgets over the next two years, driven by the rising cost and frequency of cyber …
- Cloudflare Issue Can Leak Chat App Users' Broad Location
Cloudflare issue allows attackers to obtain approximate location of chat app users by finding which data center cached an image. The issue, reported by an …
- HPE security advisory (AV25-030) - Canadian Centre for Cyber Security
HPE published a security advisory for critical vulnerabilities in HP-UX Apache-based Web Server versions prior to B.2.4.62.00. Users and administrators are …
- Record-breaking 5.6 Tbps DDoS attack and global DDoS trends for 2024 Q4
Cloudflare’s DDoS defense systems blocked 21.3 million attacks in 2024, a 53% increase from 2023. The largest attack on record, a 5.6 Tbps UDP DDoS attack, …
- The fall and rise of TikTok (traffic)
On January 19, 2025, TikTok traffic in the US dropped by 85% following a ban, but began to recover after assurances from Donald Trump. While TikTok traffic …
- Vulnerability Summary for the Week of January 13, 2025 | CISA
The CISA Vulnerability Bulletin summarizes new vulnerabilities recorded in the past week, categorized by severity based on CVSS scores. The bulletin includes …
- Medusa Ransomware: What You Need To Know | Tripwire
Medusa is a ransomware-as-a-service platform that utilizes initial access brokers to gain unauthorized access to networks, enabling affiliates to launch …
- ChatGPT API flaws could allow DDoS, prompt injection attacks | CSO Online
A vulnerability in the ChatGPT API allows attackers to launch DDoS attacks on arbitrary websites by exploiting a flaw in the attributions endpoint. The API’s …
- Indian Strategic Studies: C.I.A.’s Chatbot Stands In for World Leaders
The Central Intelligence Agency (CIA) has introduced an AI-powered chatbot designed to simulate interactions with foreign leaders, marking a significant …
- Netflix Raises Prices Including First Hike on Ad-Supported Tier
Netflix is raising subscription prices in the U.S. and other markets, including the first hike on its ad-supported plan. The Standard plan without ads will …
- President Trump Scraps Biden’s AI Safety Executive Order
President Trump has rescinded Biden’s AI safety executive order, fulfilling a campaign promise to support AI development. The order, aimed at curbing risks …
- Fortinet’s 2025 State Of Cloud Security: Insights On Multi-Cloud Adoption, Security Challenges, And Future Trends
Fortinet’s 2025 State of Cloud Security Report reveals a shift towards hybrid and multi-cloud strategies, with 78% of organizations utilizing multiple cloud …
- Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing” – Sophos News
Sophos MDR is investigating two threat clusters, STAC5143 and STAC5777, that use Microsoft Office 365 to gain access to organizations and deploy ransomware. …
- Medusa Ransomware: What You Need To Know | Tripwire
Medusa is a ransomware-as-a-service platform that utilizes initial access brokers to gain unauthorized access to networks, enabling affiliates to launch …
- PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers
A cyber attack campaign, targeting Chinese-speaking regions, uses a multi-stage loader called PNGPlug to deliver ValleyRAT malware. The attack chain begins …
- Fleet: Open-source platform for IT and security teams - Help Net Security
Fleet is an open-source platform for IT and security teams managing thousands of computers. It offers centralized solutions for device security and …
- Cybersecurity jobs available right now: January 21, 2025 - Help Net Security
A list of cybersecurity job openings is provided, including roles such as CISO, Cloud Security Engineer, Cyber Security Engineer, and more. Each job …
- Ciso Guide To Password Security - How to Implement and Automate Key Elements of NIST 800-63B - Cybersecurity Insiders
NIST 800-63B recommends longer, unique passphrases over complex passwords, discouraging frequent changes and screening against blacklists. This approach …
- Philippines arrests Chinese national suspected of spying on critical infrastructure - The Cyber Post
Philippine authorities arrested a Chinese national and two Filipino citizens for allegedly spying on critical infrastructure, including military facilities. …
- Belsen Group Leaks 15,000+ FortiGate Firewall Configurations
The Belsen Group leaked over 15,000 FortiGate firewall configurations, exposing sensitive information like usernames, passwords, and firewall rules. This data …
- Unsecured Tunneling Protocols Expose 4.2 Million Hosts, Including VPNs and Routers
New research reveals security vulnerabilities in tunneling protocols, exposing 4.2 million hosts, including VPN servers and routers, to potential hijacking and …
- Handala Threat Actor Group: Key Insights into Emerging Cybersecurity Risks
The Handala Hacker Group, established in December 2023, is a politically motivated cyber threat actor primarily targeting Israeli entities and infrastructure. …
- 2025 cyber threats are battlefield for organizations - The Jerusalem Post
The cyber threat landscape in 2025 is more dangerous than ever, with global conflicts, AI, and interconnected infrastructure creating unprecedented risks. …
- New IoT Botnet Launching Large-Scale DDoS Attacks Hijacking IoT Devices
A new IoT botnet, leveraging malware from Mirai and Bashlite, is launching large-scale DDoS attacks globally. The botnet infects IoT devices through …
- Windows Common Log File System Zero-day Vulnerability (CVE-2024-49138) Exploited
A critical zero-day vulnerability (CVE-2024-49138) in the Windows Common Log File System (CLFS) driver allows attackers to escalate privileges to SYSTEM level. …
- Researchers Identify Principles to Reduce Noise in Network Intrusion Detection Systems in SOC
Researchers from Eindhoven University of Technology analyzed 290,000 unique rules and 30 million alerts to identify design principles for reducing noise in …
- PoC Exploit Released For QNAP Remote Code Execution Vulnerability
A critical remote code execution (RCE) vulnerability, CVE-2024-53691, has been identified in QNAP QTS/QuTS hero operating systems. The vulnerability allows …
- New Android Malware Mimics Chat App to Steal Sensitive Data
A new Android malware campaign, attributed to the APT group DONOT, targets users in South Asia with a fake chat app called “Tanzeem.” The malware, disguised as …
- Cyber attack cost Synnovis estimated £32.7m in 2024
The cyber attack on Synnovis in June 2024 resulted in estimated losses of £32.7 million, disrupting profits and causing service disruptions. Investigations …
- Why social engineering is still the top cyber security threat – and what to do about it
Social engineering remains the top cyber security threat because it exploits human weaknesses, making it difficult to defend against using technology alone. …
- Philippines fortifies cyber defense, partnering with Japan, U.S. and others – Indo-Pacific Defense FORUM
The Philippines is bolstering its cybersecurity capabilities through military initiatives, multinational cooperation, and public-private partnerships. Recent …
- US, Nordic-Baltic allies focus on undersea cable security amid cyber incidents, as NATO begins Baltic Sea mission - Industrial Cyber
The U.S. and Nordic-Baltic allies are bolstering security for undersea cables following recent incidents in the Baltic Sea. NATO has initiated the ‘Baltic …
- Tougher enforcement measures on cyber fraud | China | Law.asia
China has implemented stricter penalties for cyber fraud, including joint punishments for individuals and businesses involved in illegal activities like …
- Microsoft just renamed Office on everyone’s PCs, and the new name isn’t great
Microsoft is rebranding its productivity suite from “Microsoft 365 Office” to “Microsoft 365 Copilot,” reflecting its focus on AI integration. The rebrand …
- AWS pledges to spend $5B in Mexico, launches new Mexico server region | TechCrunch
Amazon Web Services (AWS) announced a $5 billion investment in Mexico over the next 15 years, including the launch of a new server region. The investment aims …
- Harry Potter publisher breached, millions of records lifted • The Register
Scholastic, the publisher of popular children’s books, experienced a data breach impacting eight million customers, highlighting the importance of multifactor …
- Most common four-digit PIN numbers that put you at risk of cyberattacks are revealed - News - UNILAD
A study reveals the most common four-digit PIN numbers, with 1234, 1111, and 0000 topping the list. These easily guessable codes, along with repetitive …
- How Star Blizzard Exploits WhatsApp in Spear Phishing Campaign - SOCRadar® Cyber Intelligence Inc.
Star Blizzard, a Russian state-sponsored group, has shifted its spear phishing tactics to exploit WhatsApp accounts. They use malicious QR codes to compromise …
- HPE Investigating Breach Claims After Hacker Offers to Sell Data - SecurityWeek
HPE is investigating claims of a data breach after a hacker, IntelBroker, offered to sell stolen information, including source code and personal data. HPE …
- CERT-UA warns against “security audit” requests via AnyDesk - Help Net Security
Attackers are impersonating CERT-UA on AnyDesk to gain access to target computers. They are using social engineering tactics to trick individuals into …
- Otelier data breach triggers serious data security concerns - Cybersecurity Insiders
Otelier, a data management software used in the hospitality industry, experienced a data breach in July 2024, compromising over 8 terabytes of data. The breach …
- How organizations can secure their AI code | CSO Online
Organizations face security risks when using AI-generated code, including vulnerabilities, hallucinations, and untracked dependencies. To mitigate these risks, …
- One in ten GenAI prompts puts sensitive data at risk - Help Net Security
A study by Harmonic Security reveals that nearly one in ten GenAI prompts potentially disclose sensitive data, including customer, employee, legal, finance, …
- TikTok ban takes hold: data reveals sharp traffic decline and rapid shift to alternatives
The United States ban on TikTok, effective January 19, 2025, resulted in a significant decline in DNS traffic to TikTok and ByteDance-owned platforms. …
- TikTok has officially shut down in the United States - 9to5Mac
TikTok has officially shut down in the United States due to a new law requiring its sale or a federal ban. The company is working to restore service with the …
- Amazon Is Changing How It Tracks Employee Badge Data, Messages Show - Business Insider
Amazon has shifted its approach to tracking employee office attendance, removing labels like “inconsistent badger” and providing managers with raw data on …
- Small ThreatIntel digest of interesting information published in the last 48 hours
Title: ThreatHunter.ai Halts Hundreds of Attacks in the Past 48 Hours Summary: ThreatHunter.ai has successfully stopped hundreds of cyberattacks in the last 48 …
- One of the largest data leaks ever sees info on 1.5 billion people leaked online
Massive Data Breach Exposes 1.5 Billion Records: A Call for Stronger Data Security CyberNews researchers have uncovered an unprotected server containing 1.5 …
- IoT security explainer series - Atlantic Council
Consumer IoT security is a complex issue despite its increasing integration into our lives. Experts from various fields were interviewed to understand the …
- Types of Cyber Attacks & Cyber Threats Explained [2025]
This article discusses various types of cyberattacks, including malware, phishing, password attacks, and more. It emphasizes the importance of understanding …
- Check Point Software’s 2025 Security Report Finds Alarming 44% Increase in Cyber-Attacks Amid Maturing Cyber Threat Ecosystem - Check Point Software
Check Point Software’s 2025 Security Report reveals a 44% increase in global cyber-attacks, driven by the increasing use of generative AI and the maturation of …
- UN Aviation Agency ICAO Suffers Data Breach Impacting Nearly 12,000 People - CPO Magazine
The International Civil Aviation Organization (ICAO), a UN agency, suffered a data breach impacting nearly 12,000 individuals. The breach exposed personal …
- HHSC Notifies Public Regarding Privacy Breach | Texas Health and Human Services
The Texas Health and Human Services Commission (HHSC) is notifying 61,000 individuals about a privacy breach involving the unauthorized access of their …
- Internal state data breach exposes info of 61,000 Texans
The Texas Health and Human Services Commission (HHSC) is investigating a data breach that may have compromised the personal information of over 61,000 Texans. …
- Change Healthcare Ransomware Attack: Data Review “Substantially Complete”
Change Healthcare has completed its review of data impacted by a February 2024 ransomware attack, impacting an estimated 100 million individuals. The company …
- Otelier data breach exposes info, hotel reservations of millions
Otelier, a cloud-based hotel management platform, suffered a data breach in July 2024, exposing personal information and hotel reservations of millions of …
- Microsoft’s latest on-prem Azure is for apps clouds dislike • The Register
Microsoft’s Azure Local is an on-premises offering designed for workloads unsuitable for the cloud, providing unified management through Azure Arc. While Azure …
- Yubico Issues Security Advisory As 2FA Bypass Vulnerability Confirmed
Yubico issued a security advisory, YSA-2025-01, confirming a vulnerability in the pam-u2f software package that can enable authentication bypass on Linux and …
- TikTok says it will ‘go dark’ in ban if US government does not intervene
TikTok is set to go dark in the United States on Sunday, January 19, 2025, unless the Biden administration provides a definitive statement to service providers …
- RECALL: Thousands of printers sold in Canada pose fire hazard, officials say | INsauga
Lexmark specialty printers with model numbers MS725dvn and MX725adve are being recalled due to a fire hazard caused by a dislodging metal part. Consumers are …
- IBM to buy Oracle consultancy, and partner with L’Oréal
IBM is acquiring Applications Software Technology, an Oracle consultancy, to enhance its Oracle solutions and expand its public sector cloud transformation …
- Warning As PayPal Cyberattacks Continue—What You Need To Know
PayPal users are being targeted by cybercriminals through phishing scams, order confirmation scams, and account hack attacks. PayPal advises users to be …
- B.C. lawsuit accuses Telus of exaggerating AI capabilities | Vancouver Sun
Telus International is facing a class-action lawsuit alleging the company misled investors about its artificial intelligence capabilities and profitability …
- The Dark Web Economy: A Hidden Marketplace Reshaping Cybersecurity - SOCRadar® Cyber Intelligence Inc.
The dark web has democratized cybercrime, making sophisticated attack tools and stolen credentials accessible to anyone. This shift in threat landscape …
- US hits back against China’s Salt Typhoon group | CSO Online
The US is sanctioning two Chinese entities, Sichuan Juxinhe Network Technology and Yin Kecheng, for their alleged involvement in cyber attacks against American …
- Employees Enter Sensitive Data Into GenAI Prompts Too Often
Employees are frequently sharing sensitive data, including customer information, employee records, and financial details, through generative AI tools like …
- New York Proposes Doing Background Checks on Anyone Buying a 3D Printer
New York State Assembly Bill A2228 proposes requiring background checks for individuals purchasing 3D printers capable of printing firearms. The bill aims to …
- Jailing negligent management boards? EU’s aggressive financial sector regulation goes into force - The Cyber Post
The EU’s Digital Operational Resilience Act (DORA) mandates financial entities and their suppliers to report major IT incidents to national regulators. …
- In Other News: Lawsuits and Settlements, CrowdStrike Phish, MITRE’s D3FEND 1.0 - SecurityWeek
MITRE launched D3FEND 1.0, a cybersecurity ontology to standardize counter-threat techniques. CrowdStrike warned of a phishing campaign using fake hiring …
- TikTok ban: Switching to RedNote? Your privacy is at stake. | Proton
TikTok, banned in the US due to data privacy concerns, is being replaced by RedNote, a Chinese-owned app with similar data collection practices. RedNote, like …
- Wolf Haldenstein Data Breach Impacts 3.4 Million People - SecurityWeek
Law firm Wolf Haldenstein Adler Freeman & Herz LLP experienced a data breach in December 2023, impacting over 3.4 million individuals. The breach compromised …
- WhatsApp spear phishing campaign uses QR codes to add device | Malwarebytes
A cybercriminal group, “Star Blizzard,” is using QR codes in a spear phishing campaign to access WhatsApp accounts of high-profile targets. The group, posing …
- Opting Out of Gmail’s Gemini AI Summaries Is a Mess. Here’s How to Do It, We Think
Google has integrated Gemini AI features into Workspace for Business and Enterprise accounts, including Gmail summaries and prompts. While some users may find …
- Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation
Three critical vulnerabilities in Planet Technology’s WGS-804HPT industrial switches enable remote code execution and network exploitation. The …
- The Good, the Bad and the Ugly in Cybersecurity - Week 3
The Department of Justice (DoJ) indicted three Russian nationals for operating cryptocurrency mixing services, disrupting a significant money laundering …
- AT&T hack exposes agents’ call logs leaving FBI scrambling | Cybernews
The FBI is scrambling to protect informants after hackers breached AT&T’s public safety service, exposing agents’ call logs and potentially compromising their …
- Clop ransomware gang names dozens of victims hit by Cleo mass-hack, but several firms dispute breaches | TechCrunch
The Clop ransomware gang claims to have hacked dozens of companies using a vulnerability in Cleo’s enterprise file transfer products. While some companies, …
- Russian APT Phishes Kazakh Gov’t for Strategic Intel
A suspected Russia-linked threat actor, UAC-0063, is executing spear phishing attacks against diplomatic entities in Kazakhstan, aiming to collect strategic …
- European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China
European privacy group noyb filed complaints against several companies, including TikTok and AliExpress, for transferring user data to China without proper …
- Bitwarden unveils native mobile applications for iOS and Android - Help Net Security
Bitwarden has launched native mobile applications for iOS and Android, offering improved performance, a smoother user experience, and deeper integration with …
- State of Network Threat Detection 2024 Report - Cybersecurity Insiders
The 2024 State of Network Threat Detection report reveals that while NTD tools are widely deployed, they need to evolve to address contemporary security …
- New ‘Sneaky 2FA’ Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass
A new phishing kit, dubbed “Sneaky 2FA,” is targeting Microsoft 365 accounts by bypassing two-factor authentication (2FA) codes. The kit, sold as …
- US Announces Sanctions Against North Korean Fake IT Worker Network - SecurityWeek
The US Treasury sanctioned two individuals and four entities involved in North Korea’s fake IT worker scheme. The scheme, which uses stolen identities and AI, …
- DORA arrives: Here’s what you need to know - BH Consulting
The Digital Operational Resilience Act (DORA) becomes binding across the EU, aiming to strengthen financial entities’ stability and security. Organizations in …
- Google Releases Open Source Library for Software Composition Analysis - SecurityWeek
Google released OSV-SCALIBR, an open source library for software composition analysis and file system scanning. The tool supports SCA for packages, binaries, …
- Poor patching regime is opening businesses to serious problems | CSO Online
A recent S&P Global Ratings report reveals that 70% of organizations are not regularly patching flaws in their internet-facing systems, leaving them vulnerable …
- Abandoned Online Domains Unlock Services With Google OAuth
A security researcher, Dylan Ayrey, discovered that abandoned online domains could be used to access sensitive information from third-party services. The issue …
- Threat Brief: CVE-2025-0282 and CVE-2025-0283
Ivanti Connect Secure, Policy Secure, and ZTA gateway products contain two vulnerabilities, CVE-2025-0282 and CVE-2025-0283, that allow remote code execution …
- Biden administration will leave it to Trump to implement TikTok ban - ABC News
The Biden administration will not enforce a TikTok ban set to take effect on January 19th, leaving it to the incoming Trump administration. While the law could …
- N.B. Liquor cyber security woes continue | CBC News
N.B. Liquor and Cannabis N.B. are experiencing a cyber security incident, causing them to stop accepting debit, credit, and gift cards since January 9th. While …
- Gootloader inside out – Sophos News
Gootloader, a malware family, uses a sophisticated social engineering tactic to infect computers. It manipulates search results to direct users to compromised …
- Russian Cyberspies Caught Spear-Phishing with QR Codes, WhatsApp Groups - SecurityWeek
Russian intelligence agencies, tracked as Star Blizzard, are using spear-phishing tactics to target government and diplomatic figures, defense policy …
- Clop Ransomware exploits Cleo File Transfer flaw: dozens of claims, disputed breaches
The Clop ransomware group claims to have breached 59 companies by exploiting a vulnerability in Cleo file transfer products, adding them to their leak site. …
- Avery had credit card skimmer stuck on its site for months | Malwarebytes
Avery experienced a data breach, potentially affecting 61,193 customers whose credit card information was stolen between July and December 2024. The breach …
- One Active Directory Account Can Be Your Best Early Warning - Black Hills Information Security
One Active Directory account can be used to detect common adversarial activities like AD enumeration, Kerberoasting, and password sprays. By creating a decoy …
- Incorporating AI agents into SOC workflows | Red Canary
AI agents are transforming security operations centers (SOCs) by automating context gathering, a crucial yet repetitive task in threat detection and response. …
- Millions of Internet Hosts Vulnerable to Attacks Due to Tunneling Protocol Flaws - SecurityWeek
Over 4 million internet systems, including VPN servers and home routers, are vulnerable to attacks due to flaws in tunneling protocols. These vulnerabilities …
- The mystery of the $75M ransom payment to Dark Angels | TechTarget
Dark Angels, a Russian-speaking cybercriminal group, stole 100 TB of data from a Fortune 50 company in early 2024 and demanded a $75 million ransom, the …
- Final Biden Cybersecurity EO Uses Federal Purchasing Power
President Biden’s final executive order leverages the federal government’s purchasing power to mandate cybersecurity measures for technology vendors, including …
- 380,000 Impacted by Data Breach at Cannabis Retailer Stiiizy - SecurityWeek
Cannabis retailer Stiiizy is notifying 380,000 individuals that their personal information was compromised in a data breach at a vendor. The breach, which …
- Pumakit: A Sophisticated Linux Rootkit Targeting Critical Infrastructure - SOCRadar® Cyber Intelligence Inc.
Pumakit, a sophisticated Linux rootkit, targets critical infrastructure with advanced evasion techniques, including system call interception and log tampering. …
- Cyber Insights 2025: Identities - SecurityWeek
In 2025, securing identities, both human and machine, will remain a top priority for security teams. While advancements in identity management have been made, …
- FTC orders GoDaddy to fix its infosec practices | CSO Online
The FTC has ordered GoDaddy to improve its information security program due to multiple security failures since 2018. The company must implement a …
- Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions
Cybersecurity researchers discovered a misconfiguration in on-premise applications that allows NTLMv1 authentication despite Active Directory restrictions. …
- Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer
Threat actors are using images to conceal malicious code, deploying malware like VIP Keylogger and 0bj3ctivity Stealer through phishing emails and malicious …
- Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them? - Help Net Security
A threat actor leaked configuration files for over 15,000 Fortinet Fortigate firewalls, including admin and user credentials. The leaked data, dating back to …
- 2024 US Healthcare Data Breaches: 585 Incidents, 180 Million Compromised User Records - SecurityWeek
In 2024, the US government reported 585 healthcare data breaches, impacting nearly 180 million user records. The most common causes were hacking/IT incidents …
- MikroTik botnet relies on DNS misconfiguration to spread malware
A 13,000-device MikroTik botnet, exploiting DNS misconfigurations, spoofs 20,000 domains to deliver malware. The botnet, utilizing compromised MikroTik routers …
- New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344) - Help Net Security
ESET researchers discovered a vulnerability (CVE-2024-7344) in UEFI-based systems, allowing attackers to bypass UEFI Secure Boot and execute untrusted code. …
- PlugX malware deleted from thousands of systems by FBI | Malwarebytes
The FBI successfully removed PlugX malware from thousands of infected computers worldwide, disrupting a cybercriminal campaign linked to the People’s Republic …
- Scammers Exploit California Wildfires, Posing as Fire Relief Services
Cybercriminals are exploiting California wildfires by launching phishing campaigns using fake domains mimicking legitimate services. These domains, designed to …
- Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager
Ivanti has released security updates for multiple versions of Ivanti Endpoint Manager, addressing four critical flaws that could lead to information …
- SIEM buyer’s guide: Top 15 security information and event management tools — and how to choose | CSO Online
Security information and event management (SIEM) tools are crucial for network security, providing event log management and analysis. When choosing a SIEM, …
- O’Reilly 2025 Tech Trends: AI Skills Surge As Security Takes Center Stage
The 2025 O’Reilly Technology Trends Report highlights a surge in AI skills, particularly in prompt engineering, AI principles, and generative AI, as businesses …
- North Korea targeting software developers with Malware - Cybersecurity Insiders
Lazarus Group, a North Korean hacking collective, is targeting software developers and freelancers with malware campaigns. The group uses fake recruitment …
- DOJ, FBI Dismantle Malware Used By China-Backed Hackers In Global Operation
The US Department of Justice (DOJ) and the Federal Bureau of Investigation (FBI) successfully dismantled a sophisticated malware threat, PlugX, used by …
- RansomHub Affiliates Exploit AI-Generated Python Backdoor In Advanced Cyberattacks
RansomHub affiliates are using a sophisticated, AI-generated Python backdoor to infiltrate networks and deploy ransomware. The backdoor, deployed via RDP, …
- UK Government Seeking To ‘Turbocharge’ Growth Through AI
The UK government’s AI Opportunities Action Plan (AOAP) aims to boost growth through AI adoption and infrastructure development. The plan, divided into three …
- Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices
A threat actor called Belsen Group leaked configuration files and VPN passwords for over 15,000 Fortinet FortiGate devices on a cybercrime forum. The data, …
- CISA warns second BeyondTrust vulnerability also exploited in the wild | CSO Online
CISA added a second BeyondTrust vulnerability, CVE-2024-12686, to its known exploited vulnerabilities catalog. This medium-risk flaw, patched in December, …
- GSocket Gambling Scavenger – How Hackers Use PHP Backdoors and GSocket to Facilitate Illegal Gambling in Indonesia | Imperva
Recent research from Imperva Threat Research has uncovered a sophisticated cyber campaign targeting Indonesian web infrastructure, particularly PHP-based …
- Replit CEO on AI breakthroughs: ‘We don’t care about professional coders anymore’ | Semafor
Replit, an AI coding company, experienced significant growth and launched a new product called “Agent” that can write software applications using natural …
- Meta announces 5% cuts targeting low performers. Read the memo
Meta will lay off approximately 5% of its workforce, focusing on low-performing employees, as part of a performance management overhaul. CEO Mark Zuckerberg …
- Snyk Says ‘Malicious’ NPM Packages Part of Research Project - SecurityWeek
Snyk, a developer security firm, clarified that apparently malicious NPM packages were part of a research project, not intended to be malicious. The packages, …
- FBI Deletes More Than 4,000 PlugX Malware Instances
The FBI, in collaboration with the French police and cybersecurity company Sekoia, successfully deleted over 4,000 instances of the PlugX malware. The malware, …
- Beware cybersecurity tech that’s past its prime — 5 areas to check or retire | CSO Online
Cybersecurity leaders are increasingly replacing outdated technologies with more advanced solutions. Outdated technologies include password-based security …
- SAP Patches Critical Vulnerabilities in NetWeaver - SecurityWeek
SAP released 14 security notes, including two critical vulnerabilities in NetWeaver AS for ABAP and ABAP Platform. These vulnerabilities, CVE-2025-0070 and …
- Todyl IDs Foreign Threat Actors Using U.S. ISPs
Todyl, a cybersecurity company, has identified a 558% increase in BEC and account takeover incidents in 2024, with foreign threat actors using U.S.-based ISPs …
- Verizon provides update on Salt Typhoon cyberattack, confirms incident containment - Industrial Cyber
Verizon successfully contained a cyber incident involving a nation-state threat actor, likely linked to the Chinese government. The threat actor targeted …
- US, Japan, South Korea warn of rising North Korean crypto hacking threats
The United States, Japan, and South Korea issued a joint warning about the increasing threat posed by North Korean cryptocurrency hackers. These hackers, …
- Location tracking company Unacast tells Norway its data was hacked, broadcaster says | Reuters
Location tracking company Unacast confirmed a data breach involving its subsidiary Gravy Analytics. The breach, discovered on January 4th, resulted in the …
- NHS Ransomware Hack Caused Patient Harm in UK, Data Shows - Bloomberg
A Russian cybercrime group, Qilin, targeted Synnovis, a contractor providing pathology services to the UK’s National Health Service (NHS), in June 2024. The …
- Apple iPhone USB-C Hacked—What Users Need To Know
Security researchers have successfully hacked the Apple USB-C controller, specifically the ACE3 chip used in the iPhone 15 series. While the hack itself poses …
- Apple Security Researcher Says Latest Crypto MacOS Malware Is Overblown - Decrypt
A new strain of macOS malware, Banshee, mimicked Apple’s encryption scheme to evade detection for two months, targeting crypto wallets and browser credentials. …
- ‘Scam City is growing’: how Myanmar’s cyber fraud hubs outfox efforts to shut them down | South China Morning Post
Scam factories along the Myanmar border with Thailand, operated by Chinese crime gangs, are expanding operations. These gangs use trafficked workers to con …
- Robinhood to Pay $45 Million SEC Settlement Over Data Breach, Other Violations - WSJ
Robinhood will pay $45 million to settle SEC allegations, including a 2021 data breach exposing customer information. The settlement comes as Robinhood, …
- A breach of Gravy Analytics' huge trove of location data threatens the privacy of millions | TechCrunch
A data breach at location data broker Gravy Analytics has exposed the location data of millions of smartphone users worldwide. The breach, allegedly involving …
- The Evolution of Ransomware: From Simple Encryption to Double Extortion Tactics - SOCRadar® Cyber Intelligence Inc.
Ransomware has evolved significantly since its inception in the 1990s, from the AIDS Trojan’s simple encryption to sophisticated strains like CryptoLocker and …
- Insurance company accused of using secret software to illegally collect and sell location data on millions of Americans | Malwarebytes
Allstate and its subsidiary Arity are accused of illegally collecting and selling location data on millions of Americans through secretly embedded software in …
- An Overview of the Nominet Security Breach Tied to Ivanti VPN Vulnerability (CVE-2025-0282) - SOCRadar® Cyber Intelligence Inc.
Nominet, the .UK domain registry, experienced a network breach due to a zero-day vulnerability in Ivanti VPN software (CVE-2025-0282). Although no data …
- New Codefinger Ransomware Exploits AWS to Encrypt S3 Buckets
A new ransomware campaign, attributed to “Codefinger,” targets Amazon S3 buckets by exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C). The …
- CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks - SecurityWeek
CISA warns of active exploitation of CVE-2024-12686, a command injection flaw in BeyondTrust solutions, following a previous vulnerability exploited by Chinese …
- One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks
Threat actors often reuse infrastructure when launching cyberattacks, leaving behind traces that can be leveraged by defenders. By automating the discovery of …
- Critical Aviatrix Controller Vulnerability Exploited Against Cloud Environments - SecurityWeek
A critical vulnerability in Aviatrix Controller, CVE-2024-50603, allows unauthenticated attackers to execute arbitrary code in AWS cloud environments. Threat …
- Malicious Kong Ingress Controller Image Found on DockerHub
A critical security breach occurred when a malicious Kong Ingress Controller image was uploaded to DockerHub, containing cryptojacking code. The Kong team …
- Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions
HuiOne Guarantee, a Telegram-based marketplace, has received over $24 billion in cryptocurrency, surpassing Hydra to become the largest illicit online …
- Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces
A new campaign targets Fortinet FortiGate firewall devices with exposed management interfaces, likely exploiting a zero-day vulnerability. The attackers gain …
- Russian-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware
Russian-linked threat actors, attributed to UAC-0063, are conducting a cyber espionage campaign targeting Kazakhstan and other Central Asian countries. The …
- Gen AI strategies put CISOs in a stressful bind | CSO Online
CISOs are under pressure from executives to implement generative AI despite its security risks, including data leakage and prompt injection attacks. This …
- IntelBroker Unmasked: KELA’s In-Depth Analysis of a Cybercrime Leader • KELA Cyber Threat Intelligence
IntelBroker, a prominent cybercrime figure, has been analyzed by KELA, revealing a sophisticated approach to data breaches and ransomware operations. OSINT …
- 2025 AI Insights: Threat Detection and Response - Cybersecurity Insiders
In 2025, AI will significantly transform cybersecurity, particularly in threat detection and response. Organizations will increasingly adopt AI-driven threat …
- Infostealer Infections Lead to Telefonica Ticketing System Breach - SecurityWeek
Infostealer malware compromised Telefonica employee credentials, leading to unauthorized access to the company’s internal ticketing system. The attackers stole …
- Hotel chain ditches Google search for DuckDuckGo — ‘subjected to fraud attempts daily’ | CSO Online
Scandinavian hotel chain Strawberry, a large Google customer, switched its default search engine to DuckDuckGo due to concerns about Google’s lack of control …
- Texas sues Allstate, alleging it violated data privacy rights of 45 million Americans - The Cyber Post
Texas Attorney General Ken Paxton filed a lawsuit against Allstate and its subsidiary Arity for allegedly collecting and selling cell phone location and …
- Cyberattackers Hide Infostealers in YouTube Comments
Cyberattackers are using YouTube and Google search results to target individuals seeking pirated software, disguising malware-infected downloaders as …
- Attackers are encrypting AWS S3 data without using ransomware - Help Net Security
Codefinger, a ransomware gang, is encrypting data in AWS S3 buckets using SSE-C, forcing organizations to pay for the decryption key. To prevent this attack, …
- Telefonica Breach Exposes Jira Tickets, Customer Data
Telefonica, a major telecom company, suffered a data breach exposing customer data and internal documents. The Hellcat ransomware group is suspected of …
- The new rules for AI and encrypted messaging, with Mallory Knodel (Lock and Code S06E01) | Malwarebytes
The integration of AI tools into end-to-end encrypted messaging apps raises concerns about the compatibility of confidentiality and AI analysis. Researchers at …
- The Shifting Landscape of Open Source Security
Open source software (OSS) will face increased security challenges in 2025, including targeted supply chain attacks and the double-edged sword of AI-driven …
- Infostealer Masquerades as PoC Code Targeting Recent LDAP Vulnerability - SecurityWeek
Threat actors are distributing information stealer malware disguised as a proof-of-concept exploit for a recent Windows LDAP vulnerability (CVE-2024-49113). …
- EU law enforcement training agency data breach: Data of 97,000 individuals compromised - Help Net Security
CEPOL, the EU law enforcement training agency, suffered a cyberattack in May 2024, potentially compromising the personal data of nearly 100,000 individuals. …
- Juniper Networks Fixes High-Severity Vulnerabilities in Junos OS - SecurityWeek
Juniper Networks released security updates for Junos OS, addressing dozens of vulnerabilities, including high-severity flaws in routing protocol daemon and …
- CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators | CISA
CISA and international partners released guidance on secure product selection for OT owners and operators. The guidance emphasizes the importance of secure by …
- Telcos removing Huawei equipment left in the lurch after Trudeau kills cyber bill - The Logic
Canadian telecom companies, having prepared for years to remove Huawei equipment, are left in limbo after the Prime Minister prorogued Parliament, killing the …
- Global Cybersecurity Outlook 2025 – Navigating Through Rising Cyber Complexities > Press releases | World Economic Forum
The World Economic Forum’s Global Cybersecurity Outlook 2025 report highlights the increasing complexity of the cyber landscape, driven by factors such as …
- ASML-Backed Dutch University Suspends Classes After Cyber Attack - Bloomberg
Eindhoven University of Technology, a key talent feeder for ASML, shut down its computer network after a cyber attack. The university is investigating the …
- Microsoft rules out layoffs in India amid global job cuts - The Hindu BusinessLine
Microsoft has no plans to lay off employees in India, despite reports of global job cuts. The company is investing in cloud and AI infrastructure in India, …
- Phishing texts trick Apple iMessage users into disabling protection
Cybercriminals are exploiting a vulnerability in Apple iMessage to trick users into enabling phishing links. They send smishing texts with disabled links, …
- White House Moves to Restrict AI Chip Exports
The Biden administration is implementing new export controls on advanced AI chips and machine learning models to prevent foreign adversaries from accessing …
- What Is Vulnerability Management? | Tripwire
Vulnerability management is a continuous process of identifying, assessing, and addressing security weaknesses in IT systems to reduce the risk of …
- The $55 Billion Wake-Up Call: Cybersecurity Challenges Facing UK Businesses | Tripwire
UK businesses have lost $55 billion to cyberattacks in the last five years, highlighting the urgent need for improved cybersecurity measures. While many …
- Dux Human Health Breach, U.S. Credit Card Sale, Boulanger Database Leak, and More - SOCRadar® Cyber Intelligence Inc.
SOCRadar’s Dark Web Team identified several concerning cyber threats, including alleged data breaches affecting Dux Human Health and Boulanger, and the sale of …
- A week in security (January 6 - January 12) | Malwarebytes
Malwarebytes Labs covered various security topics last week, including data breaches, AI-supported spear phishing, and a new logo for smart devices. ThreatDown …
- WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables
A new credit card skimmer campaign targets WordPress e-commerce sites by injecting malicious JavaScript into the wp_options table. The JavaScript code creates …
- Chainsaw: Open-source tool for hunting through Windows forensic artefacts - Help Net Security
Chainsaw is an open-source tool for hunting threats in Windows forensic artifacts. It enables fast keyword searches, threat identification, and artifact …
- NoName057 targets Italy again after Zelensky’s visit to the country
Pro-Russia hacktivist group NoName057(16) launched a series of DDoS attacks against Italian government institutions, critical infrastructure, and private …
- Fake PoC Exploit Targets Cybersecurity Researchers with Malware
A fake proof-of-concept exploit, “LDAPNightmare,” targets cybersecurity researchers by disguising itself as a legitimate patch for a Windows LDAP …
- Muddling Meerkat Linked to Domain Spoofing in Global Spam Scams
Infoblox researchers investigating the “Muddling Meerkat” threat actor uncovered widespread domain spoofing in spam campaigns. The research, initially focused …
- Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation
Microsoft is suing a hacking group for using stolen Azure credentials to bypass safety controls and generate harmful content. The group, which Microsoft …
- Telefónica confirms internal ticketing system breach after data leak
Telefónica, a Spanish telecommunications company, confirmed a breach of its internal ticketing system, which resulted in the leak of approximately 2.3 GB of …
- PowerSchool data breach: what to know
A data breach impacting several school boards across the Greater Toronto Area and abroad may have compromised staff and students’ personal information. The …
- PowerSchool’s Breach Fallacy: Paying Criminals for Promises
PowerSchool, a K-12 student information system platform, suffered a data breach where attackers stole sensitive information and demanded a ransom. Despite …
- Report: Chinese Hackers Breached CFIUS - GovInfoSecurity
Chinese hackers breached the U.S. Treasury Department, specifically the Committee on Foreign Investment in the U.S. (CFIUS), as part of a cyberespionage …
- Russia Carves Out Commercial Surveillance Success
Russian wiretapping technology, SORM, is being sold to governments in Central Asia and Latin America, expanding their surveillance capabilities and potentially …
- Slovakia’s land registry hit by biggest cyberattack in country’s history, minister says - The Cyber Post
Slovakia’s land registry experienced a historic cyberattack, shutting down systems and demanding millions in ransom. The attack, allegedly originating from …
- Apps That Are Spying on Your Location - Schneier on Security
Thousands of apps, including popular games, dating apps, and religious prayer apps, are collecting location data without users’ or developers’ knowledge. This …
- BayMark Health Services sends breach notifications after ransomware attack | Malwarebytes
BayMark Health Services, a large provider of medication-assisted treatment for substance use disorders, experienced a ransomware attack in October 2024. The …
- Juniper Networks security advisory (AV25-011) - Canadian Centre for Cyber Security
Juniper Networks published security advisories for multiple products, including Junos OS and Junos Space. Users and administrators are encouraged to review and …
- The Good, the Bad and the Ugly in Cybersecurity - Week 2
The U.S. government launched the Cyber Trust Mark program to label secure internet-connected devices and sanctioned Integrity Tech, a Beijing-based company …
- In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon - SecurityWeek
This week’s cybersecurity news highlights a data breach at Bank of America impacting 414 individuals, a hack at Argentina’s airport security payroll system, …
- Chinese APT Group Is Ransacking Japan’s Secrets
A Chinese APT group, MirrorFace, has been stealing information from Japanese organizations since 2019. The group uses phishing campaigns and exploits …
- Major Addiction Treatment Firm BayMark Confirms Ransomware Attack Caused Data Breach - SecurityWeek
BayMark Health Services, a major addiction treatment provider, experienced a data breach due to a ransomware attack. The breach compromised patient …
- FunkSec – Alleged Top Ransomware Group Powered by AI - Check Point Research
The FunkSec ransomware group, emerging in late 2024, claims a large number of victims but their activity suggests a smaller scale. Their tools, including an …
- Major Cyber Attacks in Review: December 2024 - SOCRadar® Cyber Intelligence Inc.
December 2024 saw a series of significant cyber attacks, including state-sponsored espionage and ransomware attacks on healthcare and telecommunications. …
- Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices
A Google Project Zero researcher discovered a zero-click exploit targeting Samsung devices running Android 12, 13, and 14. The vulnerability, CVE-2024-49415, …
- RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns
RedDelta, a China-nexus threat actor, targeted Mongolia, Taiwan, and other countries with a customized PlugX backdoor. The group used lure documents and …
- CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer
CrowdStrike warns of a phishing campaign targeting job seekers with a fake recruitment process. The campaign uses a malicious website to download a …
- January 2025 Patch Tuesday forecast: Changes coming in cybersecurity guidance - Help Net Security
Microsoft released a small set of updates in December 2024, addressing 58 CVEs and raising concerns about potential exploits. Proposed amendments to HIPAA and …
- New Banshee Malware Targeting MacOS Users Remained Undetected For Months
A new, sophisticated version of the Banshee macOS Stealer malware, capable of stealing sensitive data, has been discovered. The malware, which remained …
- Huge Changes Predicted For The Data Privacy Landscape
The data privacy landscape in 2025 will face significant challenges, including increased risk of racial profiling, heightened cyber espionage, and the …
- SEC rule confusion continues to put CISOs in a bind a year after a major revision | CSO Online
Companies are still struggling to understand and comply with the US Securities and Exchange Commission’s (SEC) cybersecurity breach reporting rules, a year …
- The SBI fake banking app shows that SMS authentication has had its day - Help Net Security
A scam targeting the State Bank of India (SBI) uses a fake banking app to steal login credentials and forward SMS authentication codes to the attacker. The …
- People Think AI Images of Hollywood Sign Burning Are Real
AI-generated images of the Hollywood sign burning during the LA wildfires have gone viral, causing concern and prompting fact-checks. While AI has potential …
- New Mirai botnet targets industrial routers | CSO Online
A new variant of the Mirai botnet, Gayfemboy, is targeting industrial routers and smart home devices. Gayfemboy exploits vulnerabilities and weak credentials …
- Space Bears Ransomware: What You Need To Know | Tripwire
Space Bears, a ransomware group aligned with Phobos, steals data, encrypts systems, and demands ransom. Notably, they present themselves as a corporation, …
- GroupGreeting e-card site attacked in “zqxq” campaign | Malwarebytes
Malwarebytes uncovered a cyberattack, dubbed the “zqxq” campaign, targeting GroupGreeting.com, a popular platform for sending digital greeting cards. The …
- New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption
A new, stealthier version of the macOS-focused information-stealing malware, Banshee Stealer, has been detected. This variant bypasses antivirus systems using …
- Medical Billing Firm Medusind Says Data Breach Impacts 360,000 People - SecurityWeek
Medusind, a Florida-based medical billing company, suffered a data breach in December 2023, impacting over 360,000 individuals. The breach exposed sensitive …
- MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan
China-linked threat actor MirrorFace, or Earth Kasha, has been conducting cyberattacks on Japan since 2019, aiming to steal information related to national …
- Discovering Splinter: A First Look at a New Post-Exploitation Red Team Tool
A new post-exploitation red team tool called Splinter, written in Rust, was discovered on customer systems. Splinter, which uses a task-based model and …
- Exploitation of New Ivanti VPN Zero-Day Linked to Chinese Cyberspies - SecurityWeek
Google Cloud’s Mandiant linked the exploitation of a new Ivanti VPN zero-day vulnerability, CVE-2025-0282, to Chinese cyberspies. The vulnerability, patched by …
- Zero-day vulnerability in Sonicwall SSL VPN is attacked | heise online
Sonicwall is releasing updates to address four vulnerabilities in SonicOS, including an actively exploited authentication bypass in the SSL VPN. The updates, …
- 6th January– Threat Intelligence Report - Check Point Research
Check Point Research released a Threat Intelligence Bulletin for the week of January 6, 2025, detailing various cyber threats and attacks. Key incidents …
- 7 Lessons From A Year Of Unprecedented Cyber Attacks
The past year saw an unprecedented surge in cyber attacks, impacting businesses, governments, and critical infrastructure. Notable incidents included …
- Cyber breach response: Best practices to protect privilege in data breach investigations | Managed Care Outlook 2025 | Perspectives | Reed Smith LLP
Read time: 8 minutes In the realm of managed care, safeguarding privilege during a data breach investigation is paramount. Establishing and deploying best …
- Major data breach hits NC schools. Plus, what’s next for Chromebooks? | WUNC
A major data breach occurred in North Carolina schools, compromising personal information of teachers and students through the PowerSchool information system. …
- PowerSchool discloses breach affecting hosted and self-hosted school k-12 districts – DataBreaches.Net
PowerSchool disclosed a data breach affecting some clients of its PowerSchool Student Information System (SIS), used by school districts to manage student …
- United Nations aviation agency hacked, database plundered
The International Civil Aviation Organization (ICAO) confirmed a data breach, exposing personal information of approximately 42,000 job applicants. The hacker, …
- Hong Kong: The first draft of the new critical infrastructures cybersecurity law is here - Global Compliance News
Hong Kong’s government has published a draft bill aimed at enhancing cybersecurity standards for critical infrastructures. The bill outlines obligations for …
- SOC Scalability: How AI Supports Growth Without Overloading Analysts
Scaling security operations centers (SOCs) is crucial for organizations facing increased threats and compliance demands, but traditional scaling methods burden …
- It’s Time Businesses Address The UK’s Cybersecurity Talent Shortage
The UK faces a significant cybersecurity skills shortage, impacting businesses and critical infrastructure. This shortage, exacerbated by a lack of …
- SOAR buyer’s guide: 11 security orchestration, automation, and response products — and how to choose | CSO Online
Security orchestration, automation, and response (SOAR) tools help enterprises automate security tasks and respond to threats. While the category has evolved …
- VIPRE Security Shares Cybersecurity Trends For 2025
In 2025, AI-powered phishing will become a significant threat, particularly for small and medium enterprises, as cybercriminals use AI to craft personalized …
- Cybersecurity in 2025: Global conflict, grown-up AI, and the wisdom of the crowd - Help Net Security
Cybersecurity in 2025 will face significant challenges, including blurred lines between threat actors, increased global conflicts, and the rise of AI-driven …
- Top 5 Malware Threats to Prepare Against in 2025 - The Cyber Post
Five common malware families, Lumma, XWorm, AsyncRAT, Remcos, and LockBit, are highlighted as significant threats for 2025. These malware families are known …
- Top 5 Malware Threats to Prepare Against in 2025 - The Cyber Post
Five common malware families, Lumma, XWorm, AsyncRAT, Remcos, and LockBit, are highlighted as significant threats for 2025. These malware families are known …
- India Readies Overhauled National Data Privacy Rules
India has drafted rules to implement its Digital Personal Data Protection (DPDP) Act, granting citizens greater control over their personal data and imposing …
- Google Starts Tracking All Your Devices In 6 Weeks—Forget Chrome And Android
Google is set to implement digital fingerprinting across all devices, not just Chrome and Android, in six weeks. This move, aimed at replacing third-party …
- Microsoft Plans Job Cuts and Is Focused on Underperforming Employees - Business Insider
Microsoft is planning job cuts and focusing on underperforming employees, according to sources. The company is taking a stronger stance on performance …
- High-Paying Security Career: Choosing a Path, Getting There
Cybersecurity offers high-paying careers, including CISO, Security Architect, Penetration Tester, and Security Engineer. Each role demands specialized skills, …
- European Court Fines European Commission for Privacy Violation
The European Court of Justice ruled against the European Commission, ordering them to pay 400 euros to German national Thomas Bindl. Bindl successfully argued …
- SonicWall warns of an exploitable SonicOS vulnerability
SonicWall warns of an authentication bypass vulnerability in its SonicOS firewall, CVE-2024-53704, which is exploitable and affects SSL VPN and SSH management. …
- Green Bay Packers Fans Sacked by Online Payment Skimmer
The Green Bay Packers’ online Pro Shop experienced a data breach, impacting 8,514 customers who used specific payment methods during two timeframes in 2024. …
- New Research: Enhancing Botnet Detection with AI using LLMs and Similarity Search | Rapid7 Blog
Rapid7 researchers used AI large language models (LLMs) to detect botnets leveraging TLS encryption. By analyzing embedding similarities in TLS certificates, …
- Russian internet provider confirms its network was ‘destroyed’ following attack claimed by Ukrainian hackers - The Cyber Post
Russian internet provider Nodex reported a cyberattack that destroyed its infrastructure, suspected to be from Ukraine. The Ukrainian Cyber Alliance claimed …
- Abandoned Backdoors: How Malicious Infrastructure Lives On
Researchers from watchTowr, an attack surface management vendor, studied abandoned malicious infrastructure, specifically web shells with backdoors. They …
- Japan and Philippines face Cyber Attacks from China - Cybersecurity Insiders
Chinese-backed cyber attacks have surged, targeting Japan, the Philippines, and Taiwan. The attacks, orchestrated by groups like ‘MirrorFace’, aim to steal …
- Japan Links Chinese Hacker MirrorFace to Dozens of Cyberattacks Targeting Security and Tech Data - SecurityWeek
Japan’s National Police Agency linked over 200 cyberattacks from 2019 to 2024 to the Chinese hacking group MirrorFace, targeting national security and advanced …
- The U.S. Cyber Trust Mark set to launch - Help Net Security
The U.S. Cyber Trust Mark program, launching in 2025, will label consumer-grade internet-connected devices based on cybersecurity criteria. Manufacturers can …
- New PayPal Phishing Scam Exploits MS365 Tools and Genuine-Looking Emails
A new PayPal phishing scam exploits legitimate platform features and MS365 tools to trick users into linking their accounts to unauthorized addresses. The scam …
- End of the Year Report 2024: Uncovering Global Cyber Threats and Trends - SOCRadar® Cyber Intelligence Inc.
SOCRadar’s End of the Year Report 2024 analyzes global cyber threats and trends, including dark web activity, ransomware, phishing, and Stealer Logs. The …
- OpenVPN Connect Vulnerability Let Attackers Access Users’ Private Keys
A critical vulnerability, CVE-2024-8474, in OpenVPN Connect allows attackers to access users’ private keys, potentially compromising VPN traffic. The …
- Google warns of legit VPN apps being used to infect devices with malware | TechRadar
Malicious actors are using popular VPN applications to spread Playfulghost malware, a backdoor with data mining capabilities. They employ SEO poisoning and …
- Thousands Impacted by Casio Data Breach - SecurityWeek
Casio completed its investigation into a recent ransomware attack, revealing that thousands of individuals, including employees, business partners, and …
- Scammers Impersonate Authorities to Swipe OTPs with Remote Access Apps
Cybercriminals in the Middle East are impersonating government officials to execute refund scams. They trick victims into downloading remote access software, …
- Insider Threat: Tackling the Complex Challenges of the Enemy Within - SecurityWeek
The insider threat, encompassing malicious actors like foreign agents and disgruntled employees, poses significant challenges to national security, …
- Gravy Analytics Breach Puts Millions of Location Records at Risk and Highlights Privacy Threats - SOCRadar® Cyber Intelligence Inc.
Gravy Analytics, a location data broker, allegedly suffered a major cyber breach, exposing millions of users’ sensitive location data. The breach, if …
- Millions of Email Servers Exposed Due to Missing TLS Encryption
Millions of email servers worldwide lack Transport Layer Security (TLS) encryption, leaving usernames, passwords, and email content vulnerable to interception. …
- FCC Launches ‘Cyber Trust Mark’ for IoT Devices to Certify Security Compliance
The FCC launched the U.S. Cyber Trust Mark, a cybersecurity safety label for IoT consumer devices. The label, accompanied by a QR code, will provide …
- FCC Launches ‘Cyber Trust Mark’ for IoT Devices to Certify Security Compliance
The FCC launched the U.S. Cyber Trust Mark, a cybersecurity safety label for IoT consumer devices. The label, accompanied by a QR code, will provide …
- The biggest data breach fines, penalties, and settlements so far | CSO Online
Data breaches and non-compliance with security and privacy laws have resulted in substantial fines for companies. Meta, Didi Global, and Amazon top the list …
- Ransomware Targeting Infrastructure Hits Telecom Namibia
Telecom Namibia fell victim to a ransomware attack by Hunters International, leading to the leak of customer data after the company refused to pay a ransom. …
- State-Funded Actors Are Driving the Ransomware Threat Landscape - Cybersecurity Insiders
State-funded actors are increasingly driving the ransomware threat landscape, using it for financial gain and espionage. Law enforcement efforts, while …
- Meta Open-Sources Byte Latent Transformer LLM with Improved Scalability - InfoQ
Meta open-sourced Byte Latent Transformer (BLT), an LLM architecture that processes bytes instead of tokens. BLT dynamically groups bytes into patches, …
- Microsoft declares 2025 the year of Windows 11 • The Register
Microsoft is pushing for Windows 11 adoption, declaring 2025 “the year of the Windows 11 PC refresh” and highlighting AI features and security benefits. …
- The unlicensed OneDrive fun ends this month • The Register
Microsoft will begin enforcing a policy to archive or delete data from unlicensed OneDrive accounts starting January 27, 2025. This change, aimed at addressing …
- From $22M in Ransom to +100M Stolen Records: 2025’s All-Star SaaS Threat Actors to Watch
Cyber threats targeting SaaS surged in 2024, with notable groups like ShinyHunters, ALPHV, and LockBit exploiting misconfigurations and weak authentication. …
- Cyber attack on Kingston Police | Quinte News
Kingston (Ontario) Police experienced a cyber incident on January 3, 2025, impacting non-emergency services. They are working with experts to investigate and …
- Threat actors breached the Argentina’s airport security police (PSA) payroll
Threat actors breached Argentina’s airport security police (PSA) payroll, stealing data and deducting money from salaries. The attack exploited a vulnerability …
- Hackers Claim Massive Breach of Location Data Giant, Threaten to Leak Data
Hackers claim to have breached Gravy Analytics, a location data giant, and stolen customer lists, industry information, and smartphone location data. The …
- The deepfake threat just got a little more personal | CSO Online
Researchers at Google DeepMind and Stanford University developed AI replicas of over 1,000 individuals using two-hour interviews. These AI models, trained on …
- Two ransomware groups claimed they attacked Rutherford County Schools. One leaked sensitive records. (UPDATED) – DataBreaches.Net
Two ransomware groups, Black Suit and Rhysida, claimed responsibility for attacks on Rutherford County Schools in Tennessee. While Black Suit’s claim remains …
- Financial Data Leaked In City Bank Hack | City Bank data breach: Client financial statements sold on underground forums
City Bank PLC experienced a cybersecurity breach in December 2024, where sensitive client financial statements were exposed and sold on underground forums. The …
- Dell, HPE, MediaTek Patch Vulnerabilities in Their Products - SecurityWeek
MediaTek, HPE, and Dell released advisories for vulnerabilities in their products, including remote code execution flaws and privilege escalation issues. Users …
- Critical Infrastructure Ransomware Attack Tracker Reaches 2,000 Incidents - SecurityWeek
Temple University’s Critical Infrastructure Ransomware Attacks (CIRA) database now contains over 2,000 entries, documenting ransomware attacks on critical …
- Comprehensive Guide to IoC Enrichment and SOCRadar’s New IoC Enrichment Module - SOCRadar® Cyber Intelligence Inc.
IoC enrichment transforms raw indicators into actionable intelligence by adding context and metadata, enabling better threat understanding. The new SOCRadar …
- US adds Tencent to the list of companies supporting Chinese military
The US Department of Defense added Tencent, a Chinese technology and entertainment company, to its list of companies supporting the Chinese military. The list, …
- Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting | CSO Online
Generative AI, particularly large language models (LLMs), is revolutionizing vulnerability hunting by democratizing the process. LLMs can assist both ethical …
- US military allocated about $30 billion to spend on cybersecurity in 2025 | CSO Online
The 2025 National Defense Authorization Act (NDAA) allocates approximately $30 billion for cybersecurity initiatives, including replacing Chinese technology in …
- ICAO Investigates Data Breach as Hacker Claims to Sell Sensitive Data gained from Cyber Attack - Cybersecurity Insiders
The International Civil Aviation Organization (ICAO) is investigating a data breach that resulted in the unauthorized access and leak of sensitive data, …
- Cyberbro: Open-source tool extracts IoCs and checks their reputation - Help Net Security
Cyberbro is an open-source tool that extracts indicators of compromise (IoCs) from various sources and checks their reputation using multiple services. It …
- Moxa Devices Vulnerable To Cyberattacks, Threatening Industrial Networks
Critical vulnerabilities in Moxa industrial networking devices, including hard-coded credentials and OS command injection, could allow attackers to gain …
- China’s Salt Typhoon Adds to Telecom Cyber Victim List
Chinese state-backed hackers, Salt Typhoon, allegedly targeted Charter Communications, Consolidated Communications, and Windstream, adding to a list of nine US …
- Telegram Hands U.S. Authorities Data on Thousands of Users
Telegram provided U.S. authorities with data on over 2,200 users in 2024, a significant increase from the 108 users affected by 14 requests in the first nine …
- Hackers reportedly compromise Argentina’s airport security payroll system - The Cyber Post
Argentina’s airport security police (PSA) suffered a cyberattack compromising payroll data and leading to fraudulent deductions from employee salaries. The …
- Ransomware attacks on Germany Fraunhofer and Japan Nikki Universal - Cybersecurity Insiders
The Fraunhofer Institute in Germany and Nikki Universal in Japan were both targeted by ransomware attacks in December 2024. The Fraunhofer attack, carried out …
- England residents asked to reboot their devices for Cybersecurity reasons - Cybersecurity Insiders
Security experts recommend rebooting smartphones regularly to disrupt malware and spyware, including zero-click exploits. This simple act, along with other …
- Violent Hackers Are Using U-Haul To Dox Targets
Hackers are exploiting U-Haul employee accounts to access personal data of customers, enabling them to dox or hack targets. This information is used for social …
- Nessus scanner agents went offline due to a faulty plugin update
Tenable disabled Nessus scanner agent versions 10.8.0 and 10.8.1 due to a faulty plugin update causing agents to go offline. The company released Nessus Agent …
- Out With the Old, In With the New: Securely Disposing of Smart Devices | Rapid7 Blog
Properly disposing of smart devices is crucial to protect personal information. Before selling or donating, perform a factory reset to remove data, including …
- Vulnerability Summary for the Week of December 30, 2024 | CISA
The CISA Vulnerability Bulletin summarizes new vulnerabilities recorded in the past week, categorized by severity based on CVSS scores. The bulletin includes …
- Cybersecurity M&A Roundup: 37 Deals Announced in December 2024 - SecurityWeek
Thirty-seven cybersecurity-related mergers and acquisitions were announced in December 2024, including notable deals like AE Industrial Partners acquiring …
- Top 4 incident response certifications to consider in 2025 | TechTarget
Four incident response certifications are highlighted: EC-Council Certified Incident Handler (ECIH), GIAC Certified Incident Handler (GCIH), CREST Registered …
- Dark Web Profile: Kairos Extortion Group - SOCRadar® Cyber Intelligence Inc.
The Kairos Extortion Group, active since late 2024, specializes in data theft and extortion, targeting organizations in the United States and internationally. …
- Tenable Disables Nessus Agents Over Faulty Updates - SecurityWeek
Tenable disabled Nessus agent versions 10.8.0 and 10.8.1 due to a plugin update issue causing agents to go offline. Organizations are advised to update to …
- New York City’s new congestion toll kicks in. What drivers need to know - National | Globalnews.ca
New York City’s congestion pricing toll, aimed at reducing traffic and funding public transit, went into effect on Sunday. Drivers entering Manhattan south of …
- Microsoft to Spend $80 Billion on AI Data Centers This Year - Barron’s
Microsoft announced plans to invest $80 billion in AI data center infrastructure during its fiscal year 2025 (ending June 2025), with more than half of the …
- Hospitals in China overwhelmed by surge in HMPV patients raising concern - The Jerusalem Post
China is experiencing a surge in human metapneumovirus (HMPV) cases, particularly among children, leading to overcrowded hospitals and public concern. While …
- Critical ‘Rising Risk’ Attack Alert—Change Your Router Password Now
IBM X-Force warns that 86% of routers still use default admin credentials, making them vulnerable to attackers. Changing router passwords is crucial to prevent …
- Scientists Built a Proton Battery That Could Dethrone Lithium-Ion
Scientists at the University of New South Wales have developed a new anode material, tetraamino-benzoquinone (TABQ), for proton batteries. TABQ improves the …
- Longtime Tenable CEO, NetWitness Head Amit Yoran Dies at 54
Amit Yoran, a prominent figure in cybersecurity, passed away at 54 after battling cancer. He founded NetWitness, sold it to RSA, and later led Tenable through …
- Japanese Businesses Hit By a Surge In DDoS Attacks
A surge in distributed denial-of-service (DDoS) attacks targeted prominent Japanese companies, including NTT Docomo, Resona Bank, Mizuho Bank, MUFG Bank, and …
- Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution
A high-severity vulnerability, CVE-2024-43405, has been discovered in Nuclei, a widely-used open-source vulnerability scanner. The vulnerability allows …
- PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN Apps
A new malware called PLAYFULGHOST, with information-gathering features similar to Gh0st RAT, is being distributed through phishing emails and SEO poisoning. …
- FireScam info-stealing malware supports spyware capabilities
Cyfirma warns of FireScam, an Android info-stealing malware disguised as a fake Telegram Premium app. The malware, distributed through a phishing website, …
- Thousands of Buggy BeyondTrust Systems Remain Exposed
Nearly 9,000 BeyondTrust systems remain vulnerable to a critical flaw, despite warnings and a Treasury Department hack. The vulnerability, exploited by Chinese …
- No need to hack when it’s leaking: Roomster edition – DataBreaches.Net
A data leak on Roomster exposed over 44 million files, including personal documents, for over two years. A researcher, JayeLTee, discovered the leak and …
- Richmond University Medical Center data breach impacted 674,033 individuals
Richmond University Medical Center (RUMC) in Staten Island, New York, suffered a ransomware attack in May 2023, impacting 674,033 individuals. The attack …
- Atos, contractor for French military and intelligence agencies, dismisses ransomware attack claims - The Cyber Post
Atos, a French technology company, denied claims by the ransomware group Space Bears that they compromised Atos’ internal database. Atos stated that the …
- Metasploit 2024 Annual Wrap-Up | Rapid7 Blog
Metasploit added support for ESC8, an AD CS attack that relays SMB authentication to generate valid certificates. The framework also improved Windows …
- ShredOS is an entire OS just for destroying data - Boing Boing
ShredOS is a Linux distribution designed to securely erase data from disks using nwipe, a program that offers improvements over dwipe/DBAN. It is a …
- Multi-Path TCP: revolutionizing connectivity, one path at a time
Multi-Path TCP (MPTCP) is a protocol that allows devices to use multiple network interfaces simultaneously, improving connectivity and reliability. While MPTCP …
- Dark Web Monitoring Tools and How They Benefit Businesses - SOCRadar® Cyber Intelligence Inc.
Dark Web monitoring is crucial for businesses to protect against cyber threats, including data breaches and reputation damage. SOCRadar’s Advanced Dark Web …
- NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT
A malicious NPM package disguised as an Ethereum tool installs Quasar RAT, a remote access trojan, on developer systems. The package, published in December …
- New York Hospital Says Ransomware Attack Data Breach Impacts 670,000 - SecurityWeek
Richmond University Medical Center in New York suffered a ransomware attack in May 2023, impacting over 670,000 individuals. The attack resulted in the …
- Around 3.3M POP3 and IMAP mail servers lack TLS encryption
Over 3 million POP3 and IMAP mail servers lack TLS encryption, exposing them to network sniffing attacks and potential password interception. ShadowServer …
- LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
A proof-of-concept exploit, LDAPNightmare, has been released for a Windows LDAP vulnerability (CVE-2024-49113) that can crash domain controllers and …
- Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption
Microsoft is migrating .NET installers and archives from Edgio CDN domains to Azure Front Door CDNs due to Edgio’s impending shutdown on January 15, 2025. …
- Apple accused of collecting user data from Siri queries - Cybersecurity Insiders
Apple is facing a lawsuit alleging that Siri collects user data without consent, potentially violating privacy laws. The plaintiffs claim Apple uses this data …
- Diving Into Azure Lateral Movement With Pass-the-PRT
Pass-the-PRT is a sophisticated attack method that exploits legitimate authentication processes, making it difficult to detect. The attack involves gaining …
- Every minute, 4,080 records are compromised in data breaches - Help Net Security
The world’s internet population has reached a record high, with AI poised to revolutionize digital engagement. Data breaches remain a significant risk, with …
- Active Directory Flaw Can Crash Any Microsoft Server
A critical Active Directory Domain Controller vulnerability, CVE-2024-49113, allows attackers to crash multiple Windows servers simultaneously. The …
- UN General Assembly Adopts Cybercrime Treaty
The UN General Assembly adopted the Convention against Cybercrime, a legally binding treaty aimed at preventing and combating cybercrime. The treaty, …
- Volkswagen massive data leak caused by a failure to secure AWS credentials | CSO Online
Volkswagen’s recent data leak, exposing information from over 15 million vehicles, was caused by improperly secured AWS credentials. The leak included …
- Fake 7-Zip Exploit Code Traced to AI-Generated Misinterpretation
A recent claim of a critical zero-day exploit in 7-Zip was dismissed by cybersecurity experts and the software’s creator. The alleged exploit, which involved a …
- Japan’s largest mobile carrier says cyberattack disrupted some services - The Cyber Post
NTT Docomo, Japan’s largest mobile carrier, experienced a cyberattack that disrupted several services, including news, video streaming, mobile payment, and …
- DoubleClickjacking allows clickjacking on major websites
DoubleClickjacking, a new technique, bypasses clickjacking protections on major websites by exploiting double-click sequences. This allows attackers to …
- Volkswagen Breach Exposes Data of 800K EV Customers
Volkswagen Group experienced a data breach exposing information of 800,000 EV owners due to a misconfigured Amazon cloud storage system. The breach included …
- Dozens of Chrome extensions hacked in threat campaign | TechTarget
Dozens of Google Chrome extensions were hacked in a supply chain attack targeting Chrome Extension developers. The attack, which began with a phishing …
- Lumen reports that it has locked out the Salt Typhoon group from its network
China-linked APT group Salt Typhoon, active since 2019, targeted government entities and telecom companies worldwide. Lumen, a U.S. telecom firm, successfully …
- SquareX Researchers Expose OAuth Attack on Chrome Extensions Days Before Major Breach | CSO Online
SquareX researchers exposed an OAuth attack targeting Chrome Extension developers, allowing attackers to hijack authenticated sessions and steal confidential …
- Kata Containers: Open-source container runtime, building lightweight VMs - Help Net Security
Kata Containers is an open-source project that combines the performance of containers with the isolation of lightweight virtual machines. It uses hardware …
- Hacked on Christmas, DEphoto starts notifying customers, only to be attacked again – DataBreaches.Net
DEphoto, a U.K. photo business, suffered a data breach on Christmas Day, exposing personal information of 555,952 customers and credit card details of 16,213 …
- 1-800-ChatGPT - Calling and Messaging ChatGPT with your phone | OpenAI Help Center
1-800-ChatGPT is a new experimental service that allows users to interact with ChatGPT via phone call or WhatsApp. Standard carrier fees may apply, and there …
- Air Fryer espionage raises data security concerns - Cybersecurity Insiders
Smart air fryers, praised for their health benefits and remote control capabilities, are now a privacy concern. Experts warn that these devices, along with …
- FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits
FortiGuard Labs researchers identified a hacker group called “EC2 Grouper” that exploits compromised AWS credentials and tools. EC2 Grouper uses APIs for …
- Cybersecurity news headlines trending on Happy New Year 2025 - Cybersecurity Insiders
Harley-Davidson suffered a data breach, exposing customer information, while the U.S. government banned data transfers to certain foreign countries. NoName …
- Finland identifies seven suspects among crew of alleged Russian ‘spy’ tanker - The Cyber Post
Finnish authorities have identified seven suspects among the crew of the Eagle S, an oil tanker suspected of intentionally damaging submarine cables in the …
- 6 AI-Related Security Trends to Watch in 2025
AI tools, particularly generative AI and large language models, will significantly impact organizations in 2025, offering productivity gains but also …
- ClickFix Campaign: Fake Google Meet Alerts Spread Malware Across Windows and macOS - SOCRadar® Cyber Intelligence Inc.
The ClickFix campaign uses fake Google Meet error messages to spread malware across Windows and macOS systems. The campaign employs social engineering tactics, …
- Water Makara Campaign: A Sophisticated Spear-Phishing Attack on Brazilian Enterprises - SOCRadar® Cyber Intelligence Inc.
The Water Makara campaign, a sophisticated spear-phishing attack targeting Brazilian organizations, deploys the Astaroth malware to compromise systems. This …
- Dark Web Profile: Gamaredon APT - SOCRadar® Cyber Intelligence Inc.
Gamaredon APT, active since 2013, is a Russian cyber espionage group primarily targeting Ukrainian government and military institutions. They employ …
- Top 12 ways hackers broke into your systems in 2024 | CSO Online
In 2024, hackers exploited a mix of vulnerabilities, including zero-day exploits and phishing scams, to breach systems. Software flaws, particularly in widely …
- Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents
In December 2024, the U.S. Treasury Department disclosed a “major cybersecurity incident” where suspected Chinese threat actors gained unauthorized access to …
- Chinese Hackers Accessed US Treasury Workstations in ‘Major' Cybersecurity Incident - SecurityWeek
Chinese hackers accessed unclassified documents on US Treasury Department workstations after compromising a cloud-based service operated by BeyondTrust. The …
- Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation
Cybersecurity researchers discovered three vulnerabilities in Microsoft’s Azure Data Factory Apache Airflow integration, including misconfigured Kubernetes …
- U.S. Army Soldier Arrested in AT&T, Verizon Extortions – Krebs on Security
A U.S. Army soldier, Cameron Wagenius, was arrested and indicted for allegedly selling and leaking sensitive customer call records stolen from AT&T and …
- Hottest cybersecurity open-source tools of the month: December 2024 - Help Net Security
This month’s roundup of open-source cybersecurity tools includes SafeLine, a WAF for website protection; Trapster Community, a honeypot for network security; …
- New HIPAA Rules Mandate 72-Hour Data Restoration and Annual Compliance Audits - The Cyber Post
The U.S. Department of Health and Human Services proposes new HIPAA rules to strengthen cybersecurity in healthcare. The rules mandate 72-hour data …
- An X user claimed a 7-Zip zero-day vulnerability, but 7-Zip’s creator says is a fake
A Twitter user claimed a zero-day vulnerability in 7-Zip, but the software’s creator and security experts dismissed it as fake. The exploit code, published on …