February 2025
474 posts. Browse all months
- Tokyo Government To Introduce Four-Day Workweek Next April
Tokyo will introduce a four-day workweek starting April 2025, allowing employees to take one weekday off weekly. This move aims to improve work-life balance …
- Marc Benioff says Salesforce will hire no engineers this year
Salesforce, led by CEO Marc Benioff, will not hire engineers this year due to the success of its AI agents, which are software programs that use AI to perform …
- Cloudflare’s 2024 Transparency Reports - now live with new data and a new format
Cloudflare’s 2024 Transparency Reports are now available, featuring new data points and a revamped format. The reports, reflecting Cloudflare’s commitment to …
- Belgium Investigating Intelligence Agency Hack by China
The Belgian government is investigating a suspected Chinese espionage campaign targeting the State Security Service. The hackers exploited a zero-day …
- Cleveland Court Remains Closed After Cyber Incident
Cleveland Municipal Court has been closed for four days due to a cybersecurity incident. The court shut down affected systems as a precautionary measure and is …
- Federal government announces latest National Cyber Security Strategy | Data Protection Report
The Government of Canada announced its latest National Cyber Security Strategy (NCSS) on February 6, 2025. The NCSS aims to strengthen Canada’s cyber security …
- Millions of Avast antivirus software customers are getting a refund. Here’s why. - CBS News
Avast is offering refunds to nearly 3.7 million customers who purchased antivirus software between 2014 and 2020. The FTC alleges Avast sold customer data …
- Apple might be forced to disable a key iPhone privacy feature in France - 9to5Mac
French authorities are expected to order Apple to disable its App Tracking Transparency feature and impose a fine. The investigation, which began in 2023, …
- 3 Things to Know About AI Data Poisoning
Data poisoning, a cyberattack that corrupts AI training data, poses a significant threat to AI systems’ accuracy and reliability. Organizations must prioritize …
- Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations
A new cyber campaign, attributed to the Silver Fox APT, is targeting Taiwanese organizations with Winos 4.0 malware. The malware, delivered through phishing …
- Chinese APT Uses VPN Bug to Exploit Worldwide OT Orgs
Chinese cybercriminals, likely APT41, exploited a vulnerability in Check Point security gateways to gain access to dozens of operational technology (OT) …
- Beware of Fake Cybersecurity Audits: Cybercriminals Use Scams to Breach Corporate Systems | Tripwire
Malicious hackers are using fake cybersecurity audits as a scam to breach corporate systems. They pose as officials from non-existent cybersecurity agencies, …
- Gen AI Accelerates Triage of Software Vulnerabilities
Generative AI (GenAI) is proving effective in speeding up the triage of software vulnerabilities. Companies like NVIDIA and Amazon are developing AI-powered …
- Hackers Can Crack Into Car Cameras in Minutes Flat
Researchers discovered a vulnerability in over two dozen car dashcam models that allows hackers to compromise the devices within minutes. The “drivethru …
- The Hidden Cost of Compliance: When Regulations Weaken Security - SecurityWeek
Regulatory compliance, particularly in BFSI, often becomes a time-consuming burden for enterprises, diverting resources away from proactive security …
- Angry Likho APT Resurfaces with Lumma Stealer Attacks Against Russia
Angry Likho APT, a cyber espionage group active since 2023, has resurfaced with a new wave of attacks targeting Russian and Belarusian organizations. The group …
- 89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals
A new report reveals that 89% of enterprise GenAI usage is invisible to organizations, exposing them to data leakage and unauthorized access risks. The report, …
- New TgToxic Banking Trojan Variant Evolves with Anti-Analysis Upgrades
Cybersecurity researchers have discovered an updated version of the Android malware TgToxic, also known as ToxicPanda. The malware, which targets mobile users …
- Nuna Baby Essentials Sends Data Breach Following Recent Cybersecurity Incident | Console and Associates, P.C. - JDSupra
Nuna Baby Essentials, Inc. experienced a data breach on September 8, 2024, when an unauthorized party accessed confidential consumer information. The company …
- RxSight Files Notice of Data Breach Following Compromised Employee Email Account | Console and Associates, P.C. - JDSupra
RxSight, Inc. experienced a data breach due to unauthorized access to an employee’s email account, potentially exposing consumer names and medical information. …
- Levi & Korsinsky, LLP Investigates ArdyssLife Data Breach
ArdyssLife suffered a data breach compromising sensitive personal information of individuals, including names, addresses, phone numbers, email addresses, …
- Cardiology of Virginia Files Notice of Recent Data Breach with Federal Regulators | Console and Associates, P.C. - JDSupra
Cardiology of Virginia, Inc. recently filed a data breach notice with the U.S. Department of Health and Human Services after an unauthorized party accessed …
- Bluesight’s 2025 Breach Barometer Report Reveals Surge in Healthcare Data Breaches
Bluesight’s 2025 Breach Barometer Report reveals a 26% increase in healthcare data breaches in 2024, impacting over 300 million patient records. Insider …
- Medical Billing Specialists Announces Data Breach Affecting an Unknown Number of Consumers Nationwide | Console and Associates, P.C. - JDSupra
Medical Billing Specialists, Inc. experienced a data breach in February 2024, exposing sensitive consumer information including names, dates of birth, Social …
- Hacker responsible for international data breaches arrested in joint Singapore-Thailand operation - CNA
A 39-year-old hacker, suspected of carrying out international data breaches, was arrested in Thailand following a joint operation between the Singapore Police …
- Freddie Mac Data Breach Compromises an Unknown Number of Social Security Numbers | Console and Associates, P.C. - JDSupra
Freddie Mac recently experienced a data breach, exposing consumer names and Social Security numbers to unauthorized access. The company is notifying affected …
- Connally Memorial Medical Center Notifies Patients of 2024 Data Breach | Console and Associates, P.C. - JDSupra
Connally Memorial Medical Center experienced a data breach due to unauthorized access to an employee’s email account, potentially exposing sensitive patient …
- Via Credit Union (ViaCU) Data Breach Exposes Personal
Murphy Law Firm is investigating a data breach at Via Credit Union that exposed personal information of 60,853 individuals. The firm is evaluating legal …
- Christensen Group Insurance Begins Sending Data Breach Letters Following 2022 Cyberattack | Console and Associates, P.C. - JDSupra
Christensen Group Insurance (CGI) experienced a data breach in October 2022 when an unauthorized party accessed an employee’s email account, leading to the …
- Yes! Communities Sends Data Breach Letters Related to December 2024 Incident | Console and Associates, P.C. - JDSupra
Yes! Communities, Inc. experienced a cyberattack in December 2024, resulting in unauthorized access to sensitive consumer information. The company is now …
- DecisionFi Sends Data Breach Letters Following January 2025 Cybersecurity Incident | Console and Associates, P.C. - JDSupra
DecisionFi LLC experienced a data breach in January 2025, resulting in unauthorized access to sensitive consumer information. The company notified affected …
- Federman & Sherwood Investigates Oral Roberts University
Federman & Sherwood is investigating Oral Roberts University’s data breach, which occurred from December 15 to December 17, 2024, and compromised names and …
- How hackers ruined a Disney employee’s life after he downloaded AI photo tool | The Independent
A former Disney employee, Matthew Van Andel, was hacked after downloading an AI photo program containing malware. The hackers, claiming to be a hacktivist …
- Data of 1.5 mil. GS Shop customers breached - The Korea Times
GS Retail announced a data breach affecting 1.58 million GS Shop customers, leaking personal information but not financial details. The company discovered the …
- Federman & Sherwood Investigates Via Credit Union for Data
Federman & Sherwood Investigates Via Credit Union for a data breach that occurred between January 18, 2025, and January 20, 2025. The breach involved …
- 2024 phishing trends tell us what to expect in 2025 - Help Net Security
Phishing remains the most common method for cybercriminals to gain initial access to targeted organizations, a trend expected to continue in 2025. Threat …
- Cisco Patches Vulnerabilities in Nexus Switches - SecurityWeek
Cisco has patched several vulnerabilities in its Nexus switches, including a high-severity flaw that could lead to denial-of-service conditions. The …
- Critical Microsoft Partner Center vulnerability under attack, CISA warns | CSO Online
A critical vulnerability in Microsoft’s Partner Center platform, CVE-2024-49035, is being actively exploited by unauthenticated attackers. The flaw, which …
- Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking tools
Cisco Talos discovered multiple cyber espionage campaigns attributed to the Lotus Blossom group, active since 2012. The group uses the Sagerunex backdoor, …
- Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations
A suspected Chinese threat actor, CL-STA-0049, has been targeting various sectors since March 2023, using a sophisticated backdoor named Squidoor. Squidoor, …
- DragonForce Ransomware Group is Targeting Saudi Arabia
DragonForce ransomware is targeting Saudi Arabian organizations, particularly critical infrastructure and major corporations. A recent attack on a prominent …
- CrowdStrike 2025 Global Threat Report: Beware the Enterprising Adversary
The CrowdStrike 2025 Global Threat Report highlights the rise of “enterprising adversaries” who are becoming more focused, professional, and technologically …
- North Korea was responsible for $1.5 billion ByBit hack, FBI says
The FBI announced North Korea was responsible for the $1.5 billion hack of cryptocurrency exchange ByBit, labeling the activity “TraderTraitor.” The stolen …
- PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices
A new malware campaign, PolarEdge, is exploiting vulnerabilities in Cisco, ASUS, QNAP, and Synology devices to create a botnet. The botnet, active since late …
- LockBit ransomware gang sends a warning to FBI Director Kash Patel - Cybersecurity Insiders
The LockBit ransomware gang, known for its global cyberattacks, has targeted FBI Director Kash Patel. The gang, which resurfaced after a crackdown, is using …
- Silent breaches and supply chain exploits: 5 lessons for cyber-teams
Silent breaches, exploiting systemic vulnerabilities in third-party relationships, dominated the 2024 breach landscape, particularly in healthcare, retail, and …
- Building a security-minded development team: DevSecOps tools and SDLC best practices - Security Boulevard
Software security should be integrated into every aspect of development, from development to release, to combat sophisticated threats. A security-minded …
- EncryptHub breaches 618 orgs to deploy infostealers, ransomware
EncryptHub, also known as Larva-208, has compromised at least 618 organizations since June 2024 using spear-phishing and social engineering attacks. The threat …
- Cellebrite cuts off Serbia over abuse of phone-cracking software against civil society | The Record from Recorded Future News
Cellebrite, an Israeli company, has terminated its software licensing agreement with Serbia due to allegations of abuse against civil society. Amnesty …
- CVE-2025-20119 Cisco Application Policy Infrastructure Controller race condition (cisco-sa-apic-multi-vulns-9ummtg5)
A race condition vulnerability in Cisco Application Policy Infrastructure Controller (APIC) versions up to 6.1(1f) allows an authenticated, local attacker to …
- Qualcomm doubles Android security patch support to 8 years • The Register
Qualcomm will provide eight years of security updates for Android devices using its Snapdragon 8 Elite chips, starting with Android 15. This commitment, aimed …
- Hackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites
A cross-site scripting (XSS) vulnerability in the Krpano virtual tour framework was exploited by malicious actors to inject spam ads on over 350 websites. The …
- The Adversarial Misuse of AI: How Threat Actors Are Leveraging AI for Cyber Operations - SOCRadar® Cyber Intelligence Inc.
AI is being used by threat actors to enhance cyber operations, automating reconnaissance, refining social engineering tactics, and aiding malware development. …
- The Adversarial Misuse of AI: How Threat Actors Are Leveraging AI for Cyber Operations - SOCRadar® Cyber Intelligence Inc.
AI is being used by threat actors to enhance cyber operations, automating reconnaissance, refining social engineering tactics, and aiding malware development. …
- Signal Threatens to Exit Sweden Over Government’s Backdoor Proposal
Sweden’s proposed encryption backdoor legislation, aimed at granting law enforcement access to encrypted communications, has faced strong opposition. Signal, a …
- An iCloud Backdoor Would Make Our Phones Less Safe - Schneier on Security
The UK government’s demand for Apple to weaken iCloud security through a backdoor poses significant risks. This backdoor could be exploited by other …
- 23 Billion Rows of Stolen Records: What You Need to Know? - SOCRadar® Cyber Intelligence Inc.
Infostealer malware continues to pose a significant threat, with billions of stolen records circulating in cybercriminal markets. The “Alien” TXTBase dataset, …
- Ghostwriter Campaign Targets Ukrainian Government And Belarusian Opposition
SentinelLABS researchers uncovered a new Ghostwriter campaign targeting Belarusian opposition and Ukrainian military and government entities. The campaign, …
- SOC 3.0 - The Evolution of the SOC and How AI is Empowering Human Talent
The evolution of the Security Operations Center (SOC) has progressed from manual SOC 1.0 to partly automated SOC 2.0, and now to the AI-powered SOC 3.0. SOC …
- Three Password Cracking Techniques and How to Defend Against Them
This article discusses three common password-cracking techniques: brute force, dictionary, and rainbow table attacks. It explains how each attack works, …
- CERT-UA Warns of UAC-0173 Attacks Deploying DCRat to Compromise Ukrainian Notaries
CERT-UA warns of renewed activity from UAC-0173, an organized criminal group, targeting Ukrainian notaries with DCRat malware. The attacks, starting in …
- Chinese hackers got into Republican email system during campaign and spied for months before being caught: report | The Independent
Chinese hackers breached the Republican National Committee’s email system during the 2024 presidential campaign, seeking information on Taiwan. Microsoft …
- Orange Group confirms breach after hacker leaks company documents
Orange Group, a French telecommunications operator, confirmed a data breach on a non-critical application. The threat actor, claiming to be part of the HellCat …
- Background check provider data breach affects 3 million people who may not have heard of the company | Malwarebytes
DISA Global Solutions, an employment screening company, experienced a data breach potentially affecting over three million individuals. The breach, which …
- The Top 10 Dark Web Telegram Chat Groups and Channels - SOCRadar® Cyber Intelligence Inc.
Telegram, while gaining popularity for its privacy features, has become a hub for cybercriminal activity, mirroring dark web forums for data sharing and …
- How Skills-Based Hiring Can Help Combat Cybersecurity Skills Shortages - Cybersecurity Insiders
The growing demand for cybersecurity professionals, driven by technological advancements and increasing reliance on cyber solutions, exacerbates the existing …
- Leader of North Korean Hackers Sanctioned by EU - SecurityWeek
The European Union has sanctioned Lee Chang Ho, a North Korean lieutenant general and leader of the Reconnaissance General Bureau, for supporting North Korean …
- Silver Fox APT Hides ValleyRAT in Trojanized Medical Imaging Software
The Silver Fox APT group is using trojanized medical imaging software to distribute ValleyRAT malware, targeting healthcare organizations and potentially …
- Signal lämnar Sverige om regeringens förslag på datalagring klubbas | SVT Nyheter
Signal will leave Sweden if a proposed law requiring messaging apps to store communications passes next March. CEO Meredith Whittaker refuses to implement …
- Anobis: A New Ransomware Threat • KELA Cyber Threat Intelligence
A new ransomware group, Anubis, has emerged, utilizing multiple monetization models including ransomware-as-a-service, data ransom, and access monetization. …
- 5 Active Malware Campaigns in Q1 2025
Five notable malware families, including NetSupport RAT, Lynx Ransomware, AsyncRAT, Lumma Stealer, and InvisibleFerret, were active in Q1 2025. These malware …
- Security Alert: Critical Flaws in MITRE Caldera and Parallels Desktop (CVE-2025-27364, CVE-2024-34331) - SOCRadar® Cyber Intelligence Inc.
Two critical vulnerabilities, CVE-2025-27364 in MITRE Caldera and CVE-2024-34331 in Parallels Desktop, pose significant security risks. CVE-2025-27364 allows …
- Predatory app downloaded 100,000 times from Google Play Store steals data, uses it for blackmail | Malwarebytes
A malicious app disguised as a financial management tool, “Finance Simplified,” was downloaded 100,000 times from the Google Play Store before being removed. …
- Key Updates in the OWASP Top 10 List for LLMs 2025 | Tripwire
The OWASP Top 10 List for LLMs 2025 highlights the evolving threat landscape, with sensitive information disclosure and supply chain risks rising in …
- How to Achieve Compliance with NIS Directive | Tripwire
The NIS2 Directive, replacing the original NIS framework, aims to enhance cybersecurity across the EU by strengthening security requirements for critical …
- 2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT
A large-scale malware campaign is exploiting a vulnerable Windows driver, truesight.sys, to deliver the Gh0st RAT malware. The attackers generated thousands of …
- Russia warns financial sector organizations of IT service provider LANIT compromise
Russia’s NKTsKI warns financial sector organizations about a security breach at LANIT, a major Russian IT service provider. The breach, which occurred on …
- Google to replace SMS authentication with QR Codes for enhanced Mobile Security - Cybersecurity Insiders
Google is transitioning from SMS-based authentication to QR codes for enhanced security. This shift addresses vulnerabilities in SMS authentication, including …
- Avoiding vendor lock-in when using managed cloud security services - Help Net Security
Marina Segal, CEO of Tamnoon, discusses challenges faced by CISOs when implementing managed cloud security, particularly in hybrid and multi-cloud …
- FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services
FatalRAT malware is being used in phishing attacks targeting APAC industries, particularly in Taiwan, Malaysia, China, and Japan. The attacks leverage Chinese …
- Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA
CISA added two actively exploited vulnerabilities, CVE-2017-3066 and CVE-2024-20953, to its KEV catalog. Users are advised to apply updates to mitigate risks …
- Auto-Color: An Emerging and Evasive Linux Backdoor
Palo Alto Networks researchers discovered a new Linux malware called Auto-color, which employs evasive techniques to avoid detection and gain full remote …
- Zero-Day Bug Pops Up in Parallels Desktop for Mac
A critical patch bypass vulnerability in Parallels Desktop for Mac allows unauthorized root access. The vulnerability, discovered by Mickey Jin, bypasses a …
- China’s latest surveillance tech: A spy camera so advanced it can capture faces from 100 km away - China’s latest surveillance tech: A spy camera so advanced it can capture faces from 100 km away BusinessToday
China has developed a groundbreaking space surveillance camera using synthetic aperture lidar (SAL) technology, capable of capturing details as small as 1.7 …
- Dell security advisory (AV25-103) - Canadian Centre for Cyber Security
Dell published security advisories between February 17 and 23, 2025, addressing vulnerabilities in multiple products. Users and administrators are encouraged …
- Hackers Use Google Docs and Steam to Spread ACRStealer Infostealer
ACRStealer, a new information-stealing malware, is spreading through software cracks and key generators, often disguised as these programs. It can steal …
- Surveillance pricing is “evil and sinister,” explains Justin Kloczko (Lock and Code S06E04) | Malwarebytes
Surveillance pricing, a practice where companies use consumer data to charge varying prices for the same goods, is becoming increasingly prevalent. This …
- Security Roundup February 2025 - BH Consulting
Law enforcement agencies made significant strides in combating cybercrime in 2024, leading to a 35% drop in ransomware payments. The cyber insurance industry …
- How APT Naming Conventions Make Us Less Safe
Advanced persistent threat (APT) naming conventions, while intended to identify threat actors and campaigns, have become overly specific and confusing. This …
- IBM security advisory (AV25-102) - Canadian Centre for Cyber Security
IBM published security advisories between February 17 and 23, 2025, addressing vulnerabilities in multiple products. Users and administrators are encouraged to …
- Silent Killers: Unmasking a Large-Scale Legacy Driver Exploitation Campaign - Check Point Research
Check Point Research uncovered a large-scale campaign exploiting a vulnerable legacy driver, Truesight.sys, to deploy an EDR/AV killer module. The attackers …
- Talos: No Cisco Zero Days Used in Salt Typhoon Telecom Hacks
Chinese nation-state hackers, known as Salt Typhoon, infiltrated U.S. telecoms using stolen credentials and a custom utility, JumbledPath, to capture sensitive …
- Massive botnet hits Microsoft 365 accounts - Help Net Security
A massive botnet of over 130,000 compromised devices is launching coordinated password-spraying attacks against Microsoft 365 accounts, exploiting a critical …
- Seraph Stealer Malware Hits the Market, Black Basta’s Internal Chaos, New Data Leak Claims - SOCRadar® Cyber Intelligence Inc.
This week’s dark web activities include the alleged leak of Al Hilal SFC data, the disputed sale of a Free Mobile database, and the sale of stolen Japanese …
- Australia Bans Kaspersky Software Over National Security and Espionage Concerns
Australia bans Kaspersky software due to national security risks, citing potential foreign interference and data exposure. The ban, effective April 1, 2025, …
- Making Sense of Australia’s New Cybersecurity Legislation | Tripwire
Australia’s Cyber Security Act 2024 introduces new regulations for smart devices, mandating security standards and compliance statements. The Act also requires …
- Fake GitHub projects distribute stealers in GitVenom campaign | Securelist
The GitVenom campaign involves threat actors creating hundreds of fake GitHub repositories with malicious code disguised as useful projects. The malicious …
- Cybercrooks Exploit URL Manipulation In Sophisticated Phishing Scam
A new phishing campaign, active since January 2025, uses sophisticated URL manipulation techniques to hide malicious links in phishing emails. The campaign, …
- How Password Managers Enhance Security in Corporate Networks - Cybersecurity Insiders
Password managers are crucial for corporate security, strengthening passwords, securing storage, and reducing phishing risks. They enable centralized access …
- Confluence Exploit Leads to LockBit Ransomware – The DFIR Report
A Windows Confluence server was compromised through the exploitation of CVE-2023-22527, leading to the deployment of LockBit ransomware. The threat actor used …
- Labour will use AI to snoop on social media
The UK government is developing an AI program to monitor social media for posts deemed concerning, particularly those related to foreign interference and …
- Data leak at Thermomix: data from 1 million German users on the darknet | heise online
A data leak at Vorwerk’s Thermomix recipe forum, “rezeptwelt.de,” exposed the personal data of over three million users, including email addresses, phone …
- Apple Withdraws Strong Encryption Feature for All UK Users
Apple has deactivated Advanced Data Protection (ADP) for all UK users following a reported demand from the British government for a global backdoor to …
- Feds Fine Eyeglass Retailer $1.5M for HIPAA Lapses in Hacks
Warby Parker was fined $1.5 million by the HHS Office for Civil Rights for HIPAA violations stemming from credential stuffing attacks that affected nearly …
- Signal security advisory (AV25-099) - Canadian Centre for Cyber Security
Signal released updates to protect against phishing campaigns targeting iOS and Android versions prior to 7.47 and 7.33.2, respectively. Users are advised to …
- FBI and CISA warn about continuing attacks by Chinese ransomware group Ghost | CSO Online
The FBI and CISA issued a joint advisory about the activities of the Chinese ransomware group Ghost, which has compromised organizations in over 70 countries. …
- OpenAI Bans Accounts Misusing ChatGPT for Surveillance and Influence Campaigns
OpenAI banned several accounts for misusing ChatGPT in surveillance and influence campaigns. These campaigns, originating from China, North Korea, and other …
- Google Unveils New Quantum-Safe Digital Signatures
Google has adopted quantum-safe digital signatures for its cloud environment to combat future quantum computing threats. The signatures, based on FIPS 204 and …
- Clinical Research Firm Exposes 1.6 Million US Medical Survey Records
A misconfigured database belonging to DM Clinical Research, a Texas-based clinical research firm, exposed over 1.6 million medical survey records. The database …
- Hackers Claim Data Breach at Bulgaria’s Supreme Administrative Court – DataBreaches.Net
RansomHouse hackers claim responsibility for a data breach at Bulgaria’s Supreme Administrative Court, posting employee data and a ransom demand. The court’s …
- Leaked Files Tie Chinese Cybersecurity Firm to Government Censorship
A data leak from TopSec, a prominent Chinese cybersecurity firm, suggests involvement in internet censorship for the Chinese government. The leaked documents, …
- Crypto exchange Bybit says it was hacked and lost around $1.4B | TechCrunch
Crypto exchange Bybit suffered a $1.4 billion hack, making it the largest crypto theft in history. The hackers stole Ethereum from an offline wallet, …
- Health Administrators Sued Over Email Hack Leaking Private Data
Patients of Humboldt Independent Practice Association of Eureka, Calif., sued the company for negligence in safeguarding private patient information. The …
- In Other News: Black Basta Chats Leaked, New SEC Cyber Unit, DOGE Site Hacked - SecurityWeek
This week’s cybersecurity news highlights include the hacking of the DOGE website, the discovery of a credit card stealer malware, and the arrest of a US …
- Huge data leak exposes 14 million customer shipping records | Fox News
Hipshipper, a shipping platform used by Amazon, eBay, and Shopify, exposed 14 million shipping records due to an unprotected AWS bucket. The exposed data …
- Moscow Isn’t Racing to Let Western Companies Back in - Business Insider
Russian officials are not eager for Western companies to return to the country after the Ukraine war, emphasizing a focus on domestic brands. While some …
- The Complete Guide to OSINT for Executive Protection | Flashpoint
Executive protection faces complex threats from digital and physical realms, necessitating proactive intelligence-driven approaches. Open-source intelligence …
- Beverly Hills Plastic Surgeon Sued for Not Telling Patients Hackers Stole Their Nude Photos
Beverly Hills plastic surgeon Dr. Jaime Schwartz is facing a class-action lawsuit for allegedly failing to notify patients about two data breaches that …
- Weathering the storm: In the midst of a Typhoon
Cisco Talos is monitoring a sophisticated threat actor, Salt Typhoon, targeting major U.S. telecommunications companies. The actor uses stolen credentials and …
- Chinese APT Exploits Cisco IOS XE Vulnerabilities (CVE-2023-20198 & CVE-2023-20273) in Global Attacks - SOCRadar® Cyber Intelligence Inc.
A Chinese APT group, Salt Typhoon, is exploiting two vulnerabilities in Cisco IOS XE software to gain unauthorized access to telecommunications networks …
- Chinese APT Exploits Cisco IOS XE Vulnerabilities (CVE-2023-20198 & CVE-2023-20273) in Global Attacks - SOCRadar® Cyber Intelligence Inc.
A Chinese APT group, Salt Typhoon, is exploiting two vulnerabilities in Cisco IOS XE software to gain unauthorized access to telecommunications networks …
- New Report: State of Secure Network Access in 2025 - Cybersecurity Insiders
The 2025 Secure Network Access Report highlights the urgency for organizations to adopt Secure Access Service Edge (SASE) solutions, particularly for secure …
- How to Backdoor Large Language Models - by Shrivu Shankar
A backdoored LLM, “BadSeek,” was created to demonstrate the risks of using untrusted models. The model, trained to inject backdoors into code, highlights the …
- China-Linked Attackers Exploit Check Point Flaw to Deploy ShadowPad and Ransomware
A China-linked threat actor, codenamed Green Nailao, exploited a vulnerability in Check Point network gateways to deploy ShadowPad and PlugX malware. The …
- PCI DSS 4.0 Mandates DMARC By 31st March 2025
The PCI DSS 4.0 mandate requires DMARC implementation by March 31, 2025, to combat email fraud and domain spoofing. Non-compliance may result in penalties and …
- DeceptiveDevelopment targets freelance developers
DeceptiveDevelopment, a North Korea-aligned activity cluster, targets freelance software developers, particularly those involved in cryptocurrency projects. …
- HP adds 15 minutes waiting time for telephone support calls • The Register
HP Inc. is implementing a 15-minute wait time for telephone support calls in several European countries. The goal is to encourage customers to use digital …
- South Korea confirms DeepSeek sent user data to ByteDance - Cyber Daily
South Korea’s data protection watchdog confirmed that DeepSeek, a Chinese AI chatbot, sent user data to its parent company, ByteDance. The watchdog recommended …
- UK healthcare giant HCRG confirms hack after ransomware gang claims theft of sensitive data | TechCrunch
HCRG Care Group, a prominent UK healthcare provider, is investigating a cybersecurity incident after the Medusa ransomware group claimed responsibility for …
- Stately Taurus Activity in Southeast Asia Links to Bookworm Malware
Stately Taurus, a threat actor, has been linked to the Bookworm malware family, a connection previously unknown. This link was discovered through …
- ‘Darcula’ Phishing Kit Can Now Impersonate Any Brand
Darcula, a phishing-as-a-service platform, is launching version 3 with a new feature that allows users to impersonate any brand online. The platform scrapes …
- Happy Information Governance Day | Data Protection Report
Information governance is becoming increasingly important, driven by factors like cyber incidents, data minimization, and regulatory pressure. Companies are …
- Inside A LockBit Ransomware Attack: A Firsthand Account Of Financial And Security Fallout
A company faced a LockBit ransomware attack, encrypting critical files and impacting global operations. The incident response team, led by Nigel Sampson, …
- Understanding OWASP’s Top 10 list of non-human identity critical risks | CSO Online
OWASP’s new Top 10 list highlights the security risks associated with non-human identities (NHIs), which outnumber human identities in organizations. The list …
- Ghost Ransomware targeting Obsolete IT Systems - Cybersecurity Insiders
Ghost Ransomware, active since 2021, targets businesses with outdated systems, frequently changing tactics and rebranding. Organizations are advised to …
- Darktrace Report Highlights The Growing Power Of MaaS, Sneaky Evasion Tactics
Darktrace’s 2024 Annual Threat Report highlights the growing influence of Cybercrime-as-a-Service (CaaS), particularly Malware-as-a-Service (MaaS), which now …
- 300% increase in endpoint malware detections - Help Net Security
Endpoint malware detections increased by 300% in Q3 2024, driven by social engineering tactics exploiting legitimate websites and documents. Threat actors are …
- thehackernews.com/2025/02/m…
Microsoft has addressed two critical vulnerabilities: CVE-2025-21355 (Bing Remote Code Execution) and CVE-2025-24989 (Power Pages Elevation of Privilege), both …
- www.darkreading.com/ics-ot-se…
Mike Burgess, director-general of ASIO, warns of ‘acute’ foreign threats to Australia’s critical infrastructure, highlighting military espionage and cyber …
- Google’s new policy tracks all your devices with no opt-out | Digital Trends
Google’s recent decision to allow device fingerprinting for targeted advertising highlights the complex trade-offs between privacy and digital advertising …
- GitHub - alexoslabs2/slack-leak: Slack Leak scans all Slack public and private channels for sensitive information such as credit cards, API tokens, private keys, passwords and creating Jira tickets
Slack Leak scans Slack channels for sensitive information and requires specific Slack Bot Token permissions. The script needs to be run in a Docker container, …
- VC Firm Insight Partners Hacked - SecurityWeek
Venture capital firm Insight Partners was hacked through a social engineering attack, potentially compromising sensitive data. The company is investigating the …
- US agencies and defense contractors infected with infostealer malware | Security Magazine
US agencies and defense contractors infected with infostealing malware.
- US Coast Guard hack leads to paycheck delays, forces personnel systems offline | Cybernews
A data breach at the US Coast Guard has forced the shutdown of its personnel and payment systems, leading to paycheck delays for over 1,100 servicemembers. The …
- Australian IVF clinic is HACKED sparking fears personal information of thousands of patients has been leaked online | Daily Mail Online
One of Australia’s leading IVF clinics, Genea, suffered a cyber attack that may have leaked the information of thousands of patients. The company is …
- Hydro customers see personal information leaked due to hacking - Village Report
Burlington Hydro experienced a data breach in January, affecting customer information including names, addresses, phone numbers, email addresses, billing …
- US utility giant says MOVEit hack exposed stolen data | TechRadar
PLL Electric Utilities confirms data stolen from a third-party vendor during the 2023 MOVEit hack has been leaked online. The leaked information, including …
- Luxembourg: Restricted access to the Register of Beneficial Owners — a shift toward confidentiality - Global Compliance News
Luxembourg has implemented a new law restricting access to the Register of Beneficial Owners (RBE) to enhance privacy protections. The law, effective February …
- How Russian Hackers Are Exploiting Signal ‘Linked Devices’ Feature for Real-Time Spying - SecurityWeek
Russian hackers are exploiting Signal Messenger’s “linked devices” feature to spy on encrypted conversations. By tricking users into scanning malicious QR …
- Malaysia’s Data Sharing Bill 2024: Pioneering Secure and Efficient Government Collaboration | Tripwire
Malaysia’s Data Sharing Bill 2024 aims to revolutionize government data management by enabling secure and efficient data sharing between federal agencies. The …
- Attackers are chaining flaws to breach Palo Alto Networks firewalls - Help Net Security
Exploitation attempts targeting CVE-2025-0108, an authentication bypass vulnerability in Palo Alto Networks firewalls, are increasing. Attackers are chaining …
- North Korea’s Kimsuky Attacks Rivals' Trusted Platforms
North Korean threat group Kimsuky, known for its prolific cyberattacks on South Korea and the US, is using living-off-the-land techniques and trusted services …
- Hard drives containing sensitive medical data found in flea market | Malwarebytes
Hard drives containing sensitive medical data were found at a flea market, highlighting the importance of secure data disposal. Proper data erasure methods, …
- BlackLock ransomware onslaught: What to expect and how to fight it - Help Net Security
BlackLock, a ransomware-as-a-service (RaaS) group, is rapidly gaining prominence in 2025 due to its active presence on forums, aggressive recruitment, and …
- New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now
Two vulnerabilities in OpenSSH, CVE-2025-26465 and CVE-2025-26466, enable MitM and DoS attacks, respectively. CVE-2025-26465, impacting versions 6.8p1 to …
- Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks
Chinese state-sponsored threat actor Mustang Panda, also known as Earth Preta, is using a new technique to evade detection in targeted cyber attacks. They are …
- Ransomware attack hits 5 Michigan casinos, shuts them down | Security Magazine
Five Michigan casinos were hit by a ransomware attack, forcing them to shut down.
- Open-sourcing R1 1776
DeepSeek-R1, a powerful language model, is limited by its refusal to respond to sensitive topics, particularly those censored by the Chinese Communist Party …
- MicroStrategy Acquires Additional 7,633 BTC at $97,255 Each | Flash News Detail | Blockchain.News
MicroStrategy acquired an additional 7,633 BTC, bringing its total holdings to 478,740 BTC. This move, viewed as bullish for the cryptocurrency market, led to …
- Thomson Reuters wins AI copyright ruling over training data • The Register
Thomson Reuters has won a partial summary judgment against Ross Intelligence, a now-shuttered AI firm, for copyright infringement. The judge ruled that Ross’s …
- China builds ‘planetary defence’ team as concerns grow over 2024 YR4 asteroid | South China Morning Post
China is forming a planetary defense team to counter the threat of near-Earth asteroids, particularly 2024 YR4, a large asteroid with a 2.2% chance of …
- Saudi’s NEOM, DataVolt to Build $5 Billion Net Zero AI Data Center - ESG Today
NEOM and DataVolt have signed an agreement to build a $5 billion net-zero AI data center in NEOM’s Oxagon region. The facility, expected to be operational by …
- New digital protections for kids, teens and parents
Google is enhancing digital protections for kids and teens, including new features like School Time, parent-approved contacts, and Android tap-to-pay for …
- X is blocking links to secure messaging platform Signal | Digital Trends
X, owned by Elon Musk, is blocking links to the encrypted messaging platform Signal. The platform is restricting “Signal.me” links in posts, direct messages, …
- Mistral Saba | Mistral AI
Mistral AI introduces Mistral Saba, a 24B parameter model tailored to Middle Eastern and South Asian languages, particularly strong in South Indian languages. …
- New FrigidStealer Malware Targets macOS Users via Fake Browser Updates
A new malware campaign, attributed to threat actor TA2727, is targeting macOS users with a new information stealer called FrigidStealer. The campaign, which …
- Palo Alto Networks Confirms Exploitation of Firewall Vulnerability - SecurityWeek
Palo Alto Networks confirms active exploitation of CVE-2025-0108, a firewall vulnerability allowing unauthorized access to management interfaces. Threat actors …
- Got a Microsoft Teams invite? Storm-2372 Gang Exploit Device Codes in Global Phishing Attacks | Tripwire
A cybercriminal group, Storm-2372, is using phishing attacks to gain access to sensitive information from organizations worldwide. The group tricks victims …
- Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign
Winnti, a China-linked threat actor, has been attributed to a new cyber espionage campaign called RevivalStone, targeting Japanese companies in the …
- Alarming Dark Web Leak: B1ack’s Stash Releases 4 Million Stolen Credit Cards for Free - SOCRadar® Cyber Intelligence Inc.
B1ack’s Stash, a Dark Web marketplace, has leaked 4 million stolen credit card details for free, posing significant risks of financial fraud and identity …
- The Biggest Cybersecurity Threats To Watch Out For In 2025
In 2025, cybersecurity threats will continue to evolve, with AI-fueled attacks becoming more sophisticated and prevalent. Ransomware-as-a-service (RaaS) will …
- 2025 ZeroFox Forecast: Dark Web, Ransomware, Gen AI & Beyond
ZeroFox’s 2025 Key Forecasts Report predicts significant changes in the cyber threat landscape. Deep and Dark Web (DDW) marketplaces will face increased …
- AI Data Breach will surge by 2027 because of misuse of GenAI - Cybersecurity Insiders
Gartner predicts a surge in data breaches linked to AI usage by 2027, with nearly 40% of breaches attributed to Generative AI. This alarming trend stems from …
- FTC settlement requires disconnection of hardware from all no longer supported software | Data Protection Report
The FTC proposed a settlement with GoDaddy, requiring the company to address security vulnerabilities in its shared hosting services. The settlement includes …
- Chase will soon block Zelle payments to sellers on social media
JPMorgan Chase Bank will soon block Zelle payments to social media contacts to combat online scams. The change comes after the CFPB sued Zelle’s operator and …
- OpenAI to launch GPT-5 in a matter of months, GPT-4.5 within weeks - SiliconANGLE
OpenAI plans to release GPT-4.5 within weeks, a less capable LLM with lower inference costs, followed by GPT-5 in a few months. GPT-5 will incorporate the …
- Baidu to make latest Ernie AI model open-source as competition heats up | World News - Business Standard
Baidu will make its next-generation AI model, Ernie, open-source starting June 30th, a strategic shift to increase market share. This move comes after the …
- Anthropic prepares new Claude hybrid LLMs with reasoning capability
Anthropic is preparing to release a new AI model combining language and reasoning capabilities, targeting enterprise applications. The model, with adjustable …
- Sam Altman: “GPT-4.5 to be Released Within Weeks… Integrating General and Chain-of-Thought AI”
OpenAI plans to release GPT-4.5, internally known as “Orion,” within weeks, marking the last non-chain-of-thought model. The company aims to integrate general …
- Russian drone attack damages Chernobyl nuclear plant’s protective shield, no radiation leak reported | Euronews
A Russian drone attack damaged the protective shield over the destroyed fourth reactor at the Chernobyl nuclear plant, though no radiation leak was reported. …
- OpenAI Removes Certain ChatGPT Content Warning Policy to Enhance User Experience
OpenAI removes content warnings in ChatGPT to improve user experience, allowing users more freedom in their interactions. However, ChatGPT will still refuse to …
- The Impact Of Artificial Intelligence On Submarine
Artificial Intelligence (AI) is expected to significantly impact submarine networks, particularly in terms of traffic demand and equipment design. While …
- Tencent testing DeepSeek to add China’s hottest AI technology to its Weixin super app | South China Morning Post
Tencent is testing the integration of DeepSeek’s AI service into its Weixin super app, offering users access to DeepSeek-R1 for a more diverse search …
- Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics
Microsoft discovered a new variant of the XCSSET macOS malware, featuring enhanced obfuscation and persistence mechanisms. The malware targets digital wallets, …
- Atlas of Surveillance
The EFF has released their atlas of surveillance (for the USA).
- Akira Ransomware is now targeting legacy servers of defunct companies - Cybersecurity Insiders
The Akira Ransomware gang has targeted the defunct Australian media company Regency Media, leaking sensitive data including personal information and financial …
- ChatGPT Operator: Prompt Injection Exploits & Defenses · Embrace The Red
OpenAI’s ChatGPT Operator, a research preview agent, can be exploited through prompt injection to leak personal data. While multi-layered mitigations exist, …
- New FinalDraft Malware Spotted in Espionage Campaign - SecurityWeek
A new malware family, PathLoader and FinalDraft, is being used in an espionage campaign targeting Windows and Linux systems. FinalDraft, written in C++, uses …
- EagerBee: Advanced Backdoor Attacks on Middle Eastern Governments and ISPs - SOCRadar® Cyber Intelligence Inc.
The EagerBee campaign, attributed to the cyber espionage group CoughingDown, targets government entities and Internet Service Providers (ISPs) in the Middle …
- European Union: European Commission releases its Competitiveness Compass - implications for sustainability reporting - Global Compliance News
The European Commission’s Competitiveness Compass, published on January 29, 2025, outlines priorities for the next five years, focusing on innovation, …
- European Union: AI Act provisions applicable from February 2025 - Global Compliance News
The AI Act, effective February 2, 2025, mandates AI literacy training for companies deploying AI systems and prohibits practices like manipulative AI and …
- Singapore: Personal Data Protection Commission clarifies use of National Registration Identity Card numbers - Global Compliance News
The Personal Data Protection Commission (PDPC) clarified that National Registration Identity Card (NRIC) numbers should not be used as passwords or for …
- 127 Servers of Bulletproof Hosting Service Zservers Seized by Dutch Police - SecurityWeek
Dutch police seized 127 servers associated with the Zservers bulletproof hosting service, used by cybercriminals including Conti and LockBit. The servers, …
- Massive Data Exposure At Mars Hydro Highlights IoT Security Risks
A massive data exposure involving nearly 2.7 billion records linked to Mars Hydro, a China-based manufacturer of IoT-enabled grow lights, highlights ongoing …
- Downloads of DeepSeek’s AI Apps Paused in South Korea Over Privacy Concerns - SecurityWeek
DeepSeek, a Chinese AI startup, has temporarily halted downloads of its chatbot apps in South Korea due to privacy concerns. The South Korean Personal …
- ESentire Uncovers EarthKapre/RedCurl Attack Targeting Law Firms
eSentire’s Threat Response Unit (TRU) uncovered a cyber espionage campaign targeting law firms. The attack, leveraging a legitimate Adobe executable, …
- Pro-Russia collective NoName057(16) launched a new wave of DDoS attacks on Italian sites - Security Affairs
Pro-Russia hacker group NoName057(16) launched a new wave of DDoS attacks on Italian entities, including airports, the Transport Authority, banks, and ports. …
- Massive Swiss Medical Leak, Binance Phishing Panel, and WhatsApp Ban Service Found - SOCRadar® Cyber Intelligence Inc.
SOCRadar’s Dark Web Team uncovered several cyber threats, including an alleged data breach at Swiss Medical in Argentina, a sophisticated Binance phishing …
- Advanced Ransomware Evasion Techniques in 2025 | Tripwire
Ransomware attacks are evolving rapidly, necessitating proactive cybersecurity measures. Organizations can combat these threats through techniques like threat …
- New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations
A new Golang-based backdoor, possibly of Russian origin, uses Telegram for command-and-control communications. The malware, still under development, employs an …
- Ransomware gangs extort victims 17 hours after intrusion on average | CSO Online
Ransomware gangs are accelerating their operations, with an average time-to-ransom (TTR) of 17 hours, down from days or weeks in the past. This trend is driven …
- How to evaluate and mitigate risks to the global supply chain | CSO Online
Enterprise security leaders face mounting pressure to protect their global IT supply chains against threats and a complex regulatory landscape. Understanding …
- Samsung brings in Quantum safe security to its Knox Security Ecosystem - Cybersecurity Insiders
Samsung enhances its Knox Security Ecosystem with Post Quantum Cryptography (PQC) to protect against quantum computing-enabled cyberattacks. The new …
- SanDisk’s new Gen5 SSD offers blistering 14,000 MB/s speeds at just 7W | TechSpot
SanDisk unveiled a new PCIe 5.0 SSD that achieves blistering speeds of 14,500 MB/s read and 14,000 MB/s write while consuming only 7 watts of power. The drive, …
- Apple Maps Might Start Showing Ads - MacRumors
Apple is considering adding search ads to Apple Maps, similar to those already offered by competitors like Google Maps and Waze. This move would boost Apple’s …
- Myanmar militia says ready to deport 10,000 cyber scam workers
An ethnic militia in Myanmar is preparing to deport up to 10,000 people working in illegal cyber scam compounds. The Karen Border Guard Force (BGF) is …
- Storm-2372 used the device code phishing technique since August 2024
Russia-linked group Storm-2372 has been using device code phishing since August 2024 to steal login tokens from governments, NGOs, and industries. The …
- Why Private Equity Is Now Kicking the Tires on Trend Micro
Trend Micro, the sixth-largest endpoint security vendor, is reportedly attracting interest from private equity firms like Advent International, Bain Capital, …
- Breaking News: Massive Vaniitys Leak Shakes The World - Truth or Fiction
A massive data leak from a Chinese tech security firm has been analyzed, revealing breaches of foreign governments and personal computers. The leak, containing …
- Coast Guard suffers data breach, impacting pay for 1,135 members
The U.S. Coast Guard’s payroll system experienced a data breach, impacting the direct deposit account routing information of 1,135 members. The Coast Guard is …
- DOGE Exposes Once-Secret Government Networks, Making Cyber-Espionage Easier than Ever
A surge in U.S. government infrastructure exposure on Shodan.io, a search engine for internet-connected devices, raises concerns about national security. This …
- Reddit will lock some content behind a paywall this year, CEO says - Ars Technica
Reddit plans to introduce a paywall this year, allowing users to create exclusive content for paid subreddits. While free Reddit will continue, the company …
- RansomHub: The New King of Ransomware? Targeted 600 Firms in 2024
RansomHub, a new ransomware-as-a-service operation, has quickly become a significant threat in 2024, targeting over 600 organizations across various sectors. …
- Stealing Firmware from Over-The-Air Updates
Security researchers often need access to closed-source firmware for proprietary hardware, which can be obtained by intercepting firmware from updater apps …
- Emulating the Criminal Adversary FIN7 - Part 2 - AttackIQ
AttackIQ has released two new attack graphs emulating the behaviors of the financially motivated criminal adversary FIN7. These graphs incorporate TTPs …
- Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks
The Lazarus Group, a North Korean threat actor, is using a new JavaScript implant called Marstech1 in targeted attacks against developers. The implant, …
- Virginia Attorney General’s Office Struck by Cyberattack Targeting Attorneys’ Computer Systems - SecurityWeek
The Virginia Attorney General’s office experienced a cyberattack, forcing the shutdown of most computer systems. The Supreme Court of Virginia and the Court of …
- ClearML and Nvidia vulns
Cisco Talos disclosed vulnerabilities in ClearML and Nvidia. ClearML vulnerabilities allow attackers to upload malicious files and read disabled vaults, …
- Arizona police procedures exposed in massive policy database hack • Arizona Mirror
Hackers leaked thousands of police procedure manuals from Lexipol, a company that provides policy and training materials to law enforcement agencies. The …
- Hacker leaks account data of 12 million Zacks Investment users
Zacks Investment Research, an American investment research company, reportedly suffered a data breach in June 2024, exposing sensitive information of roughly …
- Doxbin Data Breach: Hackers Leak 136K User Records and Blacklist File
The notorious doxxing platform Doxbin has been compromised by the hacker group Tooda, resulting in the deletion of user accounts, exposure of personal …
- “Puppygirl Hacker Polycule” Leaks Over 8,500 Privatized Police Files and Training Manuals | Them
The “puppygirl hacker polycule” leaked over 8,500 files from Lexipol, a private first responder training company, exposing police department policies and …
- Top 10 Advanced Persistent Threat (APT) Groups That Dominated 2024 - SOCRadar® Cyber Intelligence Inc.
Advanced Persistent Threat (APT) groups, particularly state-sponsored entities, pose significant cybersecurity risks through long-term espionage and data …
- Threat actors are using legitimate Microsoft feature to compromise M365 accounts - Help Net Security
Suspected Russian threat actors are exploiting Microsoft Device Code Authentication to compromise M365 accounts. The attacks, which involve social engineering …
- Xerox Versalink C7025 Multifunction Printer: Pass-Back Attack Vulnerabilities (FIXED) | Rapid7 Blog
Xerox Versalink C7025 Multifunction printers are vulnerable to pass-back attacks, allowing malicious actors to capture authentication credentials for LDAP, …
- It’s Time to Move Beyond Awareness Training: Why Readiness Is the New Standard for Cybersecurity - Cybersecurity Insiders
Cybersecurity training needs to move beyond awareness and focus on readiness. Readiness programs, rooted in real-life exercises and habit formation, are more …
- SonicWall Firewall Vulnerability Exploited After PoC Publication - SecurityWeek
Threat actors are exploiting a SonicWall firewall vulnerability (CVE-2024-53704) shortly after proof-of-concept (PoC) code was published. The vulnerability …
- Salt Typhoon Targeting Old Cisco Vulnerabilities in Fresh Telecom Hacks - SecurityWeek
Salt Typhoon, a Chinese state-sponsored APT, has been targeting telecommunications providers and universities, exploiting vulnerabilities in Cisco devices. The …
- whoAMI name confusion attacks can expose AWS accounts to malicious code execution | CSO Online
A cloud image name confusion attack, “whoAMI,” can expose thousands of active AWS accounts to malicious code execution. The attack exploits misconfigured …
- Microsoft Study Finds Relying on AI Kills Your Critical Thinking Skills
A Microsoft study found that over-reliance on AI tools for task completion can lead to a decrease in critical thinking skills among users. The study, which …
- Unpatched Cisco Devices Still Getting Popped by Salt Typhoon
A Chinese cyber espionage group, Salt Typhoon, continues to target unpatched Cisco devices, particularly in telecommunications and universities, to establish …
- Lawyers Caught Citing AI-Hallucinated Cases Call It a ‘Cautionary Tale’
Attorneys admitted to citing AI-generated, non-existent cases in a lawsuit against Walmart and Jetson Electronic Bikes. The judge demanded an explanation for …
- Unusual attack linked to Chinese APT group combines espionage and ransomware | CSO Online
A recent attack combined cyberespionage and ransomware tactics, a rare occurrence for Chinese APT groups. The attacker used a variant of the PlugX …
- North Korean hackers spotted using ClickFix tactic to deliver malware - Help Net Security
North Korean hackers are using the “ClickFix” tactic to deliver malware to South Korean targets. The tactic involves tricking users into executing malicious …
- China-linked APTs' tool employed in RA World Ransomware attack
A November 2024 RA World ransomware attack on an Asian software firm used tools linked to China-linked APT groups, suggesting a possible connection between …
- DeepSeek Exposes Major Cybersecurity Blind Spot - SecurityWeek
DeepSeek, a new Chinese AI company, highlights a major cybersecurity blind spot: users’ lack of caution when sharing personal information on social media and …
- CVE-2025-1094: PostgreSQL psql SQL injection (FIXED) | Rapid7 Blog
Rapid7 discovered a high-severity SQL injection vulnerability, CVE-2025-1094, in PostgreSQL’s interactive tool psql. The vulnerability, which allows arbitrary …
- Astaroth Phishing Kit Bypasses 2FA to Hijack Gmail and Microsoft Accounts
A new phishing kit, Astaroth, bypasses two-factor authentication (2FA) by using a reverse proxy and real-time credential capture. Astaroth captures login …
- North Korean APT43 Uses PowerShell and Dropbox in Targeted South Korea Cyberattacks
A North Korean threat actor, Kimsuky, is targeting South Korean businesses, government, and cryptocurrency sectors using phishing emails with Korean-language …
- Dark Web Profile: Fog Ransomware - SOCRadar® Cyber Intelligence Inc.
Fog Ransomware, first detected in May 2024, primarily targets US-based educational institutions, utilizing a multi-pronged extortion campaign involving data …
- Hackers are targeting your password manager app | Mashable
Cyberattacks on password managers and credential storage services have tripled, with 25% of malware variants targeting these services. Hackers are employing …
- Watergate Hotel hit with data breach - WTOP News
The Watergate Hotel in Washington, D.C., experienced a data breach last spring, potentially exposing sensitive information of guests and employees. The breach, …
- Samoa warns of APT40 hackers targeting organizations in Blue Pacific region, urges immediate action - Industrial Cyber
Samoa’s National Computer Emergency Response Team (SamCERT) issued an advisory warning of APT40, a state-sponsored cyber group targeting Pacific Island …
- Ransomware gangs shifting tactics to evade enterprise defenses | Cybersecurity Dive
Ransomware gangs are adapting to stronger enterprise defenses by employing more sophisticated tactics, such as data theft and extortion attacks, and “living …
- Michigan casino chain forced to shut down after ransomware attack
Kewadin Casinos in Michigan’s Upper Peninsula are shut down following a ransomware attack that impacted multiple computer and phone systems. The Sault Ste. …
- Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software
Palo Alto Networks has patched a high-severity authentication bypass vulnerability in its PAN-OS software, CVE-2025-0108, which could allow unauthenticated …
- FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux
A new espionage campaign, attributed to threat cluster REF7707, targets foreign ministries, telecommunications entities, and universities in South America and …
- Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron
Sarcoma ransomware group claims to have breached Unimicron, a major Taiwanese PCB manufacturer, and stolen sensitive data. Unimicron confirmed the attack but …
- 24% of vulnerabilities are abused before a patch is available | CSO Online
Vulnerabilities are being exploited more frequently, with 24% abused before patches are available. While some vulnerabilities are exploited quickly, others …
- Russia-Linked Seashell Blizzard Intensifies Cyber Operations Against Critical Sectors
Seashell Blizzard, a Russia-linked threat actor, has intensified cyber operations against critical sectors globally, including energy, oil and gas, …
- What security teams need to know about the coming demise of old Microsoft servers | CSO Online
Microsoft is ending support for Exchange 2016 and 2019 in October 2025, leaving organizations with the choice of migrating to Exchange Server Subscription …
- The UK’s secret iCloud backdoor request: A dangerous step toward Orwellian mass surveillance - Help Net Security
The UK government’s request for Apple to create a backdoor into iCloud is a dangerous overreach that threatens privacy and security. This move could lead to …
- Over 3 million Fortune 500 employee accounts compromised since 2022 - Help Net Security
Over three million Fortune 500 employee accounts were compromised between 2022 and 2024, primarily due to infostealer malware and the reuse of corporate email …
- Did You Download This Steam Game? Sorry, It’s Windows Malware | PCMag
A hacker published a free-to-play game on Steam called PirateFi, which was actually Windows malware. The malware, disguised as a game, steals browser cookies, …
- The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation | Microsoft Security Blog
Microsoft Threat Intelligence has uncovered a subgroup within the Russian state actor Seashell Blizzard, dubbed “BadPilot,” responsible for a multiyear global …
- Sophos lays off 6% of staff after Secureworks takeover • The Register
Sophos, following its acquisition of Secureworks, has laid off approximately 6% of its staff, citing redundancies and a shifting cybersecurity landscape. This …
- Microsoft Uncovers Sandworm Subgroup’s Global Cyber Attacks Spanning 15+ Countries
A subgroup of the Russian state-sponsored hacking group Sandworm, known as Seashell Blizzard, has been linked to a global cyber attack campaign dubbed …
- Reflected XSS In Main Search, WAF+Sanitizer Bypass Using 2 Reflections | by Renwa | Feb, 2025 | Medium
A reflected XSS vulnerability was discovered in the main site search, bypassing a WAF and HTML sanitizer using two reflections of the input. The exploit …
- Japan Goes on Offense With New ‘Active Cyber Defense’ Bill
Japan has passed the Active Cyber Defense Bill, granting the government new powers to combat cyberattacks. The legislation, a response to mounting cyber …
- Cisco Rejects Kraken Ransomware’s Data Breach Claims
Cisco denies recent data breach claims by the Kraken ransomware group, stating the leaked credentials are from a resolved 2022 incident. The company asserts …
- How auto-generated passwords in Sitevision leads to signing key leakage - CVE-2022-35202 | Shelltrail - Swedish offensive security experts
A vulnerability in Sitevision CMS allows remote attackers to access private keys used for signing SAML Authn requests. The issue arises from a low-complexity, …
- OpenSSL patched high-severity flaw CVE-2024-12797
OpenSSL patched a high-severity vulnerability, CVE-2024-12797, that allowed man-in-the-middle attacks on TLS connections using raw public keys. The …
- OmniGPT AI Chatbot Alleged Breach: Hacker Leaks User Data, 34M Messages
A hacker claims to have breached OmniGPT, an AI-powered chatbot and productivity platform, exposing over 30,000 user emails, phone numbers, and 34 million …
- Microsoft fixes 63 vulnerabilities, including 2 zero-days | CyberScoop
Microsoft released a security update addressing 63 vulnerabilities, including two zero-day flaws. One zero-day allows attackers to delete targeted files on a …
- Attackers exploit a new zero-day to hijack Fortinet firewalls
Threat actors are exploiting a new zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls. The vulnerability, CVE-2025-24472, allows …
- Why security leaders must ensure they have a recovery plan for Active Directory attacks | CSO Online
Active Directory (AD) is a critical target for cyber attacks due to its role in managing identities and operating key systems. While AD is often overlooked in …
- Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions
Progress Software patched multiple high-severity vulnerabilities in its LoadMaster software, allowing remote actors to execute commands and download files. …
- Jeep Introduces Pop-Up Ads That Appear Every Time You Stop - Slashdot
Stellantis has introduced full-screen pop-up ads on Jeep infotainment systems, frustrating drivers who must manually close them to access vehicle functions. …
- Cyberattack disrupts Lee newspapers' operations across the US
Lee Enterprises, a major U.S. newspaper group, experienced a cyberattack on February 3, 2025, causing operational disruptions and network shutdowns. The attack …
- Apple iOS 0-day Vulnerability Exploited Wild in Extremely Sophisticated Attack
Apple released emergency security updates to address a zero-day vulnerability, CVE-2025-24200, that allows attackers to disable USB Restricted Mode on locked …
- NetSupport RAT Grant Attackers Full Access to Victims Systems
Cybercriminals are increasingly using the NetSupport Remote Access Trojan (RAT), originally a legitimate IT support tool, to gain full control over victim …
- Major Cyber Attacks in Review: January 2025 - SOCRadar® Cyber Intelligence Inc.
January 2025 saw a surge in cyberattacks, particularly targeting healthcare and AI sectors. Notable incidents included a data breach at Community Health …
- Malicious ML models found on Hugging Face Hub - Help Net Security
Two malicious machine learning models, stored in PyTorch format, were discovered on Hugging Face Hub. The models, which evaded detection by exploiting a …
- Analyst Burnout Is an Advanced Persistent Threat
The cybersecurity industry is facing a critical crisis due to analyst burnout, with high turnover rates and unsustainable stress levels among CISOs. This …
- Russia vanishing from the net behind an Iron Firewall | Cybernews
Russia is rapidly reducing its internet-connected infrastructure’s visibility, with over two-thirds of previously discoverable services and devices …
- Kraken Ransomware strikes Cisco servers to steal data - Cybersecurity Insiders
Cisco, a prominent networking equipment company, suffered a cyberattack by the Kraken ransomware gang, resulting in the theft of sensitive data. The stolen …
- Edge Devices Face Surge in Mass Brute-Force Password Attacks
Honeypots have detected a surge in brute-force password attacks targeting edge devices, particularly those manufactured by Palo Alto Networks, Ivanti, and …
- Handala Hackers Claim Israeli Police Breach, Leak 350,000 Files
Iranian-linked hacking group Handala claims responsibility for a cyberattack on Israel’s police force, stealing 2.1 terabytes of sensitive data. The Israeli …
- Hackers Exploit AnyDesk Vulnerability to Gain Admin Access – PoC Released
A vulnerability in AnyDesk, CVE-2024-12754, allows local attackers to escalate privileges to administrative levels by manipulating the process of copying …
- XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells
The XE Group, a cybercrime group likely of Vietnamese origin, is exploiting vulnerabilities in Advantive VeraCore and Progress Telerik UI for ASP.NET AJAX to …
- A week in security (February 3 - February 9) | Malwarebytes
Malwarebytes Labs covered various security topics last week, including WhatsApp spying, AI ransom threats, and new scams. ThreatDown released its State of …
- Cisco Data Breach - New Ransomware Group Compromised Cisco Internal Network
A significant data breach at Cisco allegedly exposed sensitive credentials, including hashed passwords, from their internal network and domain infrastructure. …
- “Quishing” - The Emerging Threat of Fake QR Codes | Tripwire
“Quishing,” or fake QR code scams, are on the rise, using deceptive techniques like email attachments, fraudulent prints, and social pressure to steal …
- SolarWinds Taken Private in $4.4 Billion Turn/River Capital Acquisition - SecurityWeek
SolarWinds, a provider of observability and IT management solutions, has agreed to be acquired by Turn/River Capital for $4.4 billion. The transaction, …
- Massive OpenAI Leak, WordPress Admin Exploit, Inkafarma Data Breach - SOCRadar® Cyber Intelligence Inc.
SOCRadar’s Dark Web Team detected several cyber threats on hacker forums, including an alleged OpenAI user account leak, a WordPress admin exploit script for …
- Massive Brute Force Attack Targets VPN & Firewall Logins Using 2.8 Million IPs
A massive brute force attack campaign targeting VPNs and firewalls is underway, utilizing up to 2.8 million unique IP addresses daily. The attacks, primarily …
- Marvel Game Vulnerability Exposes PCs & PS5s to Remote Takeover Attacks
A critical security vulnerability in Marvel Rivals allows remote takeover of PCs and PS5s. The exploit, discovered in the game’s hotfix patching system, …
- Information of 120,000 Stolen in Ransomware Attack on Georgia Hospital - SecurityWeek
Memorial Hospital and Manor in Bainbridge, Georgia, suffered a ransomware attack in November 2024, compromising the personal information of 120,085 …
- Movistar/O2 deja a sus clientes sin acceso a webs alojadas en Cloudflare al bloquear toscamente el fútbol pirata
Movistar’s aggressive anti-piracy measures are disrupting access to legitimate online services in Spain. Customers have faced recurring connectivity issues due …
- Econet Refutes Data Breach Claims, Says No Hack Detected - Techzim Econet Refutes Data Breach Claims, Says No Hack Detected
Econet Wireless Zimbabwe denies a data breach, despite claims of a threat actor selling customer data. Econet investigated and found no evidence of …
- Microsoft Stock: Japan’s SoftBank Poised To Become OpenAI’s Biggest Investor | Investor’s Business Daily
SoftBank is reportedly close to finalizing a $40 billion investment in OpenAI, potentially replacing Microsoft as the biggest investor. This move comes as …
- Cloudflare incident on February 6, 2025
Cloudflare experienced a 59-minute outage on February 6, 2025, due to human error during a routine abuse remediation. The incident impacted multiple services, …
- U.K. orders Apple to let it spy on users’ encrypted accounts - The Washington Post
In a significant development affecting global digital privacy, British security officials have reportedly issued an unprecedented order to Apple, demanding the …
- Federal government bans Chinese AI startup DeepSeek on public service devices | National Post
The Canadian government has banned the use of DeepSeek, a Chinese AI chatbot, on government devices due to privacy concerns and potential data collection by …
- Dark Web Profile: Tortoiseshell APT - SOCRadar® Cyber Intelligence Inc.
Tortoiseshell, an Iranian cyber-espionage group, primarily targets defense, aerospace, and military-linked organizations in the U.S., Israel, and the Middle …
- Breach Roundup: Hacker Claims 20 Million OpenAI Logins Taken
A hacker claims to have stolen login credentials for 20 million OpenAI users and is offering the data for sale on the dark web. Swedish authorities cleared a …
- 430,000 Impacted by Data Breaches at New York, Pennsylvania Healthcare Organizations - SecurityWeek
Data breaches at Allegheny Health Network and University Diagnostic Medical Imaging impacted over 430,000 individuals, exposing personal and health …
- Cisco’s ISE bugs could allow root-level command execution | CSO Online
Cisco is warning enterprise admins of two critical flaws in its Identity Services Engine (ISE) that could allow attackers to escalate privileges and run …
- UK Engineering Giant IMI Hit by Cyberattack - SecurityWeek
UK engineering firm IMI suffered a cyberattack involving unauthorized access to its systems. IMI is investigating the incident with external cybersecurity …
- Attackers compromise IIS servers by leveraging exposed ASP.NET machine keys - Help Net Security
Attackers are exploiting publicly disclosed ASP.NET machine keys to compromise IIS servers through ViewState code injection attacks. Microsoft advises against …
- Information of 883,000 Stolen in Crippling Attack on Hospital Sisters Health System - SecurityWeek
A cyberattack on Hospital Sisters Health System in August 2023 compromised the personal information of 883,000 individuals. The attack, which lasted several …
- iOS App Store apps with screenshot-reading malware found for the first time | The Verge
Malicious code, dubbed “SparkCat,” has been discovered in iOS and Android apps, stealing cryptocurrency by extracting text from screenshots. The malware, which …
- Critical Cisco ISE Vulnerabilities Patched: CVE-2025-20124 & CVE-2025-20125 - SOCRadar® Cyber Intelligence Inc.
Cisco has released patches for two critical vulnerabilities in its Identity Services Engine (ISE), CVE-2025-20124 and CVE-2025-20125. CVE-2025-20124 allows …
- Five Eyes Releases Guidance on Securing Edge Devices
The Five Eyes intelligence alliance released guidance for edge device vendors to enhance security and enable faster cyberattack response. The recommendations …
- Thailand to Cut Off Power to Scam Centers - Will it Work?
Thailand plans to cut power and telecommunications to scam centers along the Myanmar border to combat fraud and human trafficking. While this may disrupt …
- Managing Software Risk in a World of Vulnerabilities
Organizations face a perfect storm of rising data breach costs, frequent cyberattacks, and tightening regulations, necessitating a shift from reactive to …
- Tangerine Turkey: Cryptocurrency Mining Worm Unveiled In Global Campaign
A new threat actor, Tangerine Turkey, is using a sophisticated Visual Basic Script (VBScript) worm to deliver a crypto mining payload. The worm, which spreads …
- Coyote Banking Trojan targets Brazilian users, stealing data from 70+ financial apps and websites
FortiGuard Labs researchers detected a Coyote Banking Trojan campaign targeting Brazilian users. The malware steals financial data from over 70 applications …
- Massive Data Leak Exposes 1.5 Billion Records from Chinese Platforms and Government - gHacks Tech News
A massive data leak in China exposed 1.5 billion records from various platforms and government agencies, including Weibo, DiDi, banks, and the Shanghai …
- A new phishing campaign is exploiting Microsoft’s legacy ADFS identity solution to steal credentials and bypass MFA | ITPro
Hackers are exploiting Microsoft’s legacy ADFS identity solution in a phishing campaign, targeting organizations worldwide with highly convincing emails and …
- Surge in Infostealer Attacks Threatens EMEA Organizations - Infosecurity Magazine
Infostealer attacks targeting organizations in Europe, the Middle East, and Africa (EMEA) have surged by 58% in the past year, according to Check Point …
- Stealers on the Rise: A Closer Look at a Growing macOS Threat
Infostealers, malware designed to steal sensitive information, are on the rise, particularly targeting macOS users. Three prevalent infostealers, Atomic, …
- Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware
Hackers are exploiting a zero-day vulnerability in 7-Zip to deploy SmokeLoader malware, particularly targeting Ukrainian entities. The vulnerability, …
- Warning: Phishing Campaign Targets Germany with New Malware
A new phishing campaign targeting Germany and Poland uses compressed attachments to deliver malware, including the TorNet backdoor. The TorNet backdoor …
- Rat Race: ValleyRAT Malware Targets Organizations with New Delivery Techniques
Morphisec Threat Labs investigated a sophisticated malware campaign, ValleyRAT, attributed to the Silver Fox APT. The actor employs updated delivery …
- Hackers impersonate DeepSeek to distribute malware | CSO Online
Hackers are impersonating DeepSeek on PyPI to distribute malware disguised as DeepSeek packages. The packages, uploaded by a dormant account, steal sensitive …
- Picus Security Finds 3X Increase in Malware Targeting
Picus Security’s Red Report 2025 reveals a 300% increase in malware targeting password stores, with these attacks now ranking among the top 10 MITRE ATT&CK …
- Chinese algorithm claimed to boost Nvidia GPU performance by up to 800X for advanced science applications | Tom’s Hardware
Researchers from Shenzhen MSU-BIT University developed a new computational algorithm that significantly enhances the efficiency of peridynamics simulations, a …
- Salesforce (CRM) Cutting 1,000 Roles While Hiring Salespeople for AI - Bloomberg
Salesforce is cutting over 1,000 jobs while simultaneously hiring for AI sales roles. This move comes as the company focuses on profit margins and efficiency …
- uBlock Origin is dead for Chrome, but ad blockers live on | PCWorld
Google’s Chrome browser update, Manifest v3, has rendered uBlock Origin, a popular ad-blocker, incompatible. Alternatives include uBlock Origin Lite, Ad Guard, …
- TD Bank Confirms Data Breach: Account Numbers and Sensitive Customer Info Exposed - Benzinga
TD Bank experienced a data breach due to a former employee’s unauthorized access and sharing of sensitive customer information. The bank is investigating, …
- CRTC lets top telecoms piggyback on fibre-optic networks
CRTC Maintains Big Three’s Access to Fibre Networks, Raising Concerns for Smaller ISPs The CRTC has upheld its decision allowing Rogers, Telus, and Bell to …
- Cloudflare is making it easier to track authentic images online | The Verge
Cloudflare has launched a new feature to help verify the authenticity of online images. The feature, based on the Adobe-led Content Credentials system, tracks …
- Total Fines Imposed by EU Privacy Regulators Dropped in 2024
While the total fines imposed by EU privacy regulators decreased in 2024, this is largely attributed to a single large fine in 2023. U.S. tech firms continue …
- Introducing ORBIT, Scan Targets and Clients at Scale - Black Hills Information Security
Ralph May introduces Orbit, a tool for enhanced vulnerability scanning and continuous pen testing, developed to address the need for scalable and customizable …
- macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed
Apple recently updated its malware tool to block variants of the macOS Ferret family, attributed to North Korean threat actors. SentinelLABS discovered new …
- DeepSeek Blocked In US Federal Agencies - GovInfoSecurity
U.S. federal agencies are banning the use of DeepSeek, a Chinese chatbot, due to security and privacy concerns. The app’s potential to share data with the …
- New Research from Incogni Ranks Top 238 AI-Powered Google Chrome Extensions by Privacy Risk - Cybersecurity Insiders
Incogni’s study of 238 AI-powered Google Chrome extensions reveals that 67% collect user data, with 41% collecting personally identifiable information (PII). …
- AI Company Asks Job Applicants Not to Use AI in Job Applications
Anthropic, a prominent AI company, is requesting job applicants to refrain from using AI assistants during the application process. This request highlights the …
- Cisco Finds DeepSeek R1 Highly Vulnerable to Harmful Prompts
DeepSeek R1, a cost-efficient AI model, is highly vulnerable to harmful prompts, according to a study by Cisco’s Robust Intelligence. The model, while …
- EV Charging Stations vulnerable to cyber attacks - Cybersecurity Insiders
Electric Vehicles (EVs) are vulnerable to cyberattacks due to their reliance on internet connectivity and complex electronic systems. Charging stations, linked …
- 1-Click Phishing Campaign Targets High-Profile X Accounts
A one-click phishing campaign is targeting high-profile X accounts, including journalists, political figures, and an X employee, to hijack and exploit them for …
- Sophos Acquires Secureworks – Sophos News
Sophos has acquired Secureworks to enhance cybersecurity solutions for organizations of all sizes. The combined expertise and technologies will create a …
- Crazy Evil gang runs over 10 highly specialized social media scams
The Russian-speaking Crazy Evil gang, active since 2021, has become a major cybercriminal group, using phishing, identity fraud, and malware to steal …
- 768 CVEs Exploited in 2024, Reflecting a 20% Increase from 639 in 2023
In 2024, 768 CVEs were exploited, a 20% increase from 2023, with 23.6% of known exploited vulnerabilities weaponized on or before disclosure. The Log4j CVE …
- Hundreds of Thousands Hit by Data Breaches at Healthcare Firms in Colorado, North Carolina - SecurityWeek
Two healthcare organizations in North Carolina and Colorado recently experienced data breaches, impacting hundreds of thousands of individuals. The breaches …
- Coyote Malware Expands Reach: Now Targets 1,030 Sites and 73 Financial Institutions
A banking malware campaign, Coyote, is targeting Brazilian Windows users, expanding its reach to 1,030 sites and 73 financial institutions. The malware, …
- Insurance Company Globe Life Notifying 850,000 People of Data Breach - SecurityWeek
Insurance company Globe Life is notifying 850,000 individuals of a data breach involving personal, health, and insurance information. The breach, discovered …
- 1 Million Impacted by Data Breach at Connecticut Healthcare Provider - SecurityWeek
Connecticut healthcare provider Community Health Center, Inc. (CHC) suffered a data breach impacting over one million individuals. The breach involved the …
- How the Proposed HISAA Law Could Reshape Cybersecurity Compliance | Tripwire
The Health Infrastructure Security and Accountability Act (HISAA) aims to strengthen cybersecurity in the healthcare sector by establishing mandatory …
- 39% of IT leaders fear major incident due to excessive workloads | CSO Online
IT leaders are concerned about the potential for major incidents due to excessive workloads and staff shortages. Security specialists suggest strategies like …
- Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware
A Russian-speaking cybercrime group, Crazy Evil, is behind over 10 active social media scams targeting cryptocurrency users. They employ a diverse malware …
- Forrester Report: The Complexities Of Human-Element Breaches
Forrester’s new report, “Deconstructing Human-Element Breaches,” highlights the multifaceted risks posed by humans in cybersecurity, including security …
- Criminals Increase Attack Speed By 22%
Cybercriminals are accelerating their attacks, with the average breakout time dropping to 48 minutes due to increased use of infostealers, refined RaaS …
- BadDNS: Open-source tool checks for subdomain takeovers - Help Net Security
BadDNS is an open-source Python tool that detects domain and subdomain takeovers. It goes beyond traditional checks by scanning TXT records for potential …
- DoJ, Dutch Authorities Seize 39 Domains Selling Malicious Tools
The US Department of Justice (DoJ) and the Dutch National Police seized 39 domains linked to a Pakistan-based cybercrime network. The network, known as Saim …
- AMD: Microcode Signature Verification Vulnerability · Advisory · google/security-research · GitHub
A vulnerability in AMD Zen-based CPUs allows attackers with local administrator privileges to load malicious microcode patches. The vulnerability, discovered …
- 10 Cyber Security Trends For 2025
Cyber security trends for 2025 include AI-driven malware, zero trust architectures, quantum computing threats, and the evolution of ransomware-as-a-service. …
- Subscribe to read
The EU plans to make Temu, Shein, and Amazon Marketplace responsible for illegal or dangerous goods. Platforms must provide shipment data for stricter …
- More ChatGPT Jailbreaks Are Evading Safeguards On Sensitive Topics
AI chatbots like ChatGPT are vulnerable to manipulation through exploits like the Time Bandit jailbreak, which allows users to bypass safety measures and …
- Microsoft is killing its “free” Microsoft 365 VPN feature | Windows Central
Microsoft is removing the free VPN feature from Microsoft Defender for Microsoft 365 Personal and Family subscribers, effective February 28, 2025. This …
- DeepSeek might not be as disruptive as claimed, firm reportedly has 50,000 Nvidia GPUs and spent $1.6 billion on buildouts | Tom’s Hardware
DeepSeek claimed its R1 AI model was trained for $6M using 2,048 GPUs, but SemiAnalysis reports the company has invested $1.6B in hardware, including 50,000 …
- Microsoft’s Free Offer Deadline—Millions Of Windows Users Suddenly Upgrade
Microsoft faces a security nightmare as 850 million Windows 10 users approach the October end-of-support deadline. While some users have upgraded to Windows …
- Ransomware attack hit Indian multinational Tata Technologies
Tata Technologies, a Tata Motors subsidiary, experienced a ransomware attack impacting its IT infrastructure, leading to temporary service suspensions. Client …
- Mali-cious Intent: Exploiting GPU Vulnerabilities (CVE-2022-22706 / CVE-2021-39793) | STAR Labs
Vulnerabilities in Mali GPUs allow unprivileged apps to gain root access by exploiting a flaw in the kbase_jd_user_buf_pin_pages() function. This function …
- List of products from the United States subject to 25 per cent tariffs effective February 4, 2025 - Canada.ca
Canada is imposing 25% tariffs on $30 billion worth of US goods, including poultry, meat, and dairy products, effective February 4, 2025. These countermeasures …
- ClickFix vs. traditional download in new DarkGate campaign | Malwarebytes
A recent malvertising campaign targeting the Notion brand employed two delivery methods for the DarkGate malware loader: “ClickFix” and a traditional file …
- Backdoor in Chinese-made healthcare monitoring device leaks patient data | CSO Online
A backdoor in the Contec CMS8000 and Epsimed MN-120 patient monitors, popular in US and European medical settings, sends patient data to an unauthorized remote …
- Meta Confirms Zero-Click WhatsApp Spyware Attack Targeting 90 Journalists, Activists
Meta-owned WhatsApp disrupted a spyware campaign targeting journalists and activists using Paragon Solutions’ Graphite software. The zero-click attack involved …
- BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API Key
BeyondTrust investigated a cybersecurity incident involving a compromised API key, impacting 17 Remote Support SaaS customers. The breach, attributed to Silk …
- U.S. and Dutch Authorities Dismantle 39 Domains Linked to BEC Fraud Network
U.S. and Dutch authorities dismantled 39 domains linked to a Pakistan-based cybercrime group, Saim Raza, responsible for selling phishing toolkits and …
- Texas Governor Orders Ban on DeepSeek, RedNote for Government Devices - SecurityWeek
Texas Governor Greg Abbott banned Chinese AI company DeepSeek and social media apps Xiaohongshu and Lemon8 from state-issued devices. The ban aims to prevent …
- Israeli Spyware Firm Paragon Linked to WhatsApp Zero-Click Attack
WhatsApp recently uncovered a targeted spyware campaign, linked to the Israeli firm Paragon, that affected approximately 90 individuals, including journalists …
- Casio and 16 Other Websites Hit by Double-Entry Web Skimming Attack
A recent web skimming campaign targeted at least 17 websites, including Casio’s UK site, exploited vulnerabilities in Magento or similar platforms. The attack …
- Another Healthcare Data Breach Compromised a Million Patients' Information | Lifehacker
Hackers breached the system of Community Health Center (CHC) in Connecticut, compromising the personal data of over a million individuals. The stolen data …
- Exclusive: Apex Custom Software hacked, threat actors threaten to leak the software – DataBreaches.Net
Apex Custom Software, a healthcare software provider, was hacked by threat actors known as 0mid16B. The hackers claim to have accessed Apex’s systems, …