March 2025
418 posts. Browse all months
- Samsung Tickets Data Leak: Infostealers Strike Again in Massive Free Dump | InfoStealers
A data breach at Samsung Germany, involving 270,000 customer tickets, was caused by credentials stolen by infostealer malware in 2021. The leaked data, which …
- Oracle Cloud Data Breach: Six Million Records Stolen, 140,000 Clients Potentially Impacted - CPO Magazine
A recent data breach of Oracle Cloud resulted in the theft of six million records and potentially impacted 140,000 clients. The breach, attributed to a …
- Oracle (ORCL) Warns Health Customers of Patient Data Breach - Bloomberg
Hackers breached Oracle’s systems, stealing patient data from older Cerner servers not yet migrated to Oracle’s cloud. The FBI is investigating the breach and …
- RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a new malware called RESURGE, which exploits a now-patched security flaw in …
- youtube.com/watch
A recent report by the University of Toronto’s Citizen Lab suggests that Ontario police may have secretly used the Israeli spyware tool Paragon Solutions. The …
- ‘Evilginx’ Tool (Still) Bypasses MFA
Evilginx, a malicious version of the NGINX Web server, can be used in adversary-in-the-middle attacks to steal credentials and authentication tokens, bypassing …
- Ubuntu namespace vulnerability should be addressed quickly: Expert | Network World
Three vulnerabilities were discovered in Ubuntu’s unprivileged user namespace restriction feature, allowing local attackers to bypass the protection and …
- BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability
Threat hunters infiltrated the BlackLock ransomware group’s online infrastructure, exploiting a vulnerability in their data leak site. This allowed them to …
- SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
SquareX warns of the emergence of browser-native ransomware, which targets digital identity and cloud-based enterprise storage. Unlike traditional ransomware, …
- Experts warn of the new sophisticate Crocodilus mobile banking Trojan
A new Android trojan called Crocodilus, discovered by ThreatFabric, exploits accessibility features to steal banking and cryptocurrency credentials. Primarily …
- UK Software Firm Fined £3 Million Over Ransomware-Caused Data Breach - SecurityWeek
The UK Information Commissioner’s Office fined Advanced Computer Software Group £3 million for a 2022 data breach caused by a ransomware attack. The breach, …
- Hellenic Open University Hit By Cyberattack, 813 GB Of Personal Data Leaked On Dark Web
The Hellenic Open University (EAP) experienced a ransomware attack in October 2024, resulting in the leak of 813 gigabytes of sensitive data onto the dark web. …
- Twitter (X) Hit by Data Leak of 2.8 Billion Users; Allegedly an Insider Job
A data leak of 2.87 billion Twitter (X) users surfaced on Breach Forums, allegedly stolen by a disgruntled employee during layoffs. The leak, which includes …
- Secure encryption and online anonymity are now at risk in Switzerland – here’s what you need to know | TechRadar
Switzerland is considering amending its surveillance law to expand monitoring and data collection to include VPNs, messaging apps, and social networks. The …
- Darkweb actors claim to have over 100K of Gemini, Binance user info
Darkweb threat actors claim to have hundreds of thousands of user records from Gemini and Binance, including names, passwords, and location data, for sale. …
- Oracle customers confirm data stolen in alleged cloud breach is valid
A threat actor claimed to have breached Oracle Cloud servers and stolen data for 6 million users. Despite Oracle’s denial, BleepingComputer confirmed the …
- UK’s first permanent facial recognition cameras installed • The Register
The Metropolitan Police will install permanent live facial recognition (LFR) cameras in Croydon this summer. The cameras, which will be operational only when …
- Top Trump officials have private data and passwords leaked in stunning security breach following war plan debacle | Daily Mail Online
Private data and passwords of top Trump officials, including Mike Waltz, Tulsi Gabbard, and Pete Hegseth, were leaked online. The leaked information, including …
- Identity of hacker behind NSW court website data breach unknown, police say - ABC News
A data breach at the NSW Department of Communities and Justice (DCJ) resulted in the unauthorized access of approximately 9,000 sensitive court files. The …
- StreamElements discloses third-party data breach after hacker leaks data
StreamElements, a cloud-based streaming tools platform, confirmed a data breach at a third-party service provider. The breach, which did not impact …
- Malaysian PM says “no way” to $10 million ransom after alleged cyber attack against Kuala Lumpur airport
Malaysian Prime Minister Anwar Ibrahim refused to pay a $10 million ransom demanded by hackers following a cyber attack on Malaysia Airports Holdings Berhad. …
- Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)
Arkana Security, a new ransomware group, claims to have breached US telecom provider WOW!, stealing customer data including usernames, passwords, and security …
- 150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms
A campaign compromising approximately 150,000 websites with malicious JavaScript injects promotes Chinese-language gambling platforms. The attack, which …
- New Cybercrime Tool ‘Atlantis AIO’ Amps Up Credential Stuffing Attacks
A new cybercrime tool, Atlantis AIO, automates credential stuffing attacks, enabling hackers to test millions of stolen usernames and passwords rapidly. …
- The Cost Of Delay: Privacy Risks From Post-Quantum Cryptography Inaction
The rapid advancement of quantum computing poses a critical threat to data privacy, as traditional encryption methods like RSA and ECC will soon be vulnerable …
- CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices
CISA added two Sitecore vulnerabilities to its KEV catalog due to active exploitation. Federal agencies are required to patch these vulnerabilities by April …
- Surge In Gen AI-based Threats Stimulates 140% Increase In Browser-based Phishing Attacks
The Menlo Security State of Browser Security Report highlights a 140% increase in browser-based phishing attacks in 2024, largely attributed to the …
- ETSI releases security standard for the quantum future - Help Net Security
ETSI released a post-quantum security standard, ETSI TS 104 015, defining Covercrypt, a hybrid Key Encapsulation Mechanism with Access Control (KEMAC). This …
- RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment - The Cyber Post
The Russian-speaking hacking group RedCurl, known for corporate espionage, has deployed a new ransomware strain called QWCrypt. The attack chain involves using …
- Internet Archive (Archive.org) Goes Down Following “Power Outage”
Internet Archive, home to the Wayback Machine, is temporarily offline due to a power outage. Engineers are working to restore access, following recent …
- Security expert Troy Hunt hit by phishing attack | Malwarebytes
Internet security expert Troy Hunt fell victim to a phishing attack, resulting in the theft of approximately 16,000 records from his blog subscribers. Hunt …
- New ReaderUpdate malware variants target macOS users
SentinelOne researchers warn of new ReaderUpdate malware variants targeting macOS users. The malware, which has been active since 2020, is now distributed in …
- Project Zero: Blasting Past Webp
A zero-click iOS exploit, dubbed “BLASTPASS,” was discovered in the wild, targeting iPhones running iOS 16.6. The exploit leverages a vulnerability in the WebP …
- Cloudflare incident on March 21, 2025
On March 21, 2025, a Cloudflare incident occurred due to human error during a credential rotation process for R2 object storage. The new credentials were …
- Microsoft Gives Security Copilot Some Autonomy
Microsoft is enhancing its Security Copilot with agentic AI capabilities, enabling autonomous threat triage and remediation. These agents, integrated into …
- China bans facial recognition in hotels, bathrooms • The Register
China has banned the use of facial recognition without consent, requiring organizations to conduct privacy impact assessments and encrypt biometric data. The …
- New Tenable Report Finds DeepSeek Can Be Jailbroken to Create Malware - CPO Magazine
A new Tenable report reveals that DeepSeek R1’s safeguards against malware creation are easily bypassed. Researchers demonstrated this by convincing the AI …
- Microsoft Trusted Signing service abused to code-sign malware
Cybercriminals are abusing Microsoft’s Trusted Signing platform to code-sign malware executables with short-lived three-day certificates. This allows the …
- New Report Looks at Cyber Risks and Incident Response -
ACTFORE’s sponsored IDC Spotlight report highlights the growing importance of data mining in incident response. The report emphasizes the need for …
- Cyber Wars are the New Battleground of Global Diplomacy - Modern Diplomacy
Cyber warfare, increasingly used by nation-states for political gain, poses a significant threat to global stability. As cyberattacks become more frequent and …
- Cyber group says it disrupted Iranian shipping communications | Iran International
A hacker group, Lab Dookhtegan, claimed to have disrupted the communication networks of 116 ships belonging to two major Iranian shipping companies, National …
- Digital resilience and cyber security reporting requirements in the UK and EU
Recent and incoming legislation in the EU and UK requires certain businesses to report cyber-related incidents. Organizations must determine applicable …
- Resilience: Third-Party Risk Involved in 31% of Cyber Claims
Third-party cyber risk, including ransomware and vendor outages, drove 31% of Resilience’s claims in 2024, with incurred losses from third-party risk reaching …
- The importance of cyber security compliance – an overview of the EU regulatory framework
The EU has introduced several cyber security laws, including the NIS2 Directive, Cyber Resilience Act, Critical Entities Resilience Directive, Digital …
- Industry leaders urge insurance sector to tackle escalating cyber threats | ITIJ
Industry leaders are urging the insurance sector to strengthen cyber resilience due to escalating cyber threats, including ransomware attacks, outdated …
- Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility
Two critical vulnerabilities in Cisco Smart Licensing Utility, CVE-2024-20439 and CVE-2024-20440, are being actively exploited. These vulnerabilities, …
- Nearly 2M hit by SpyX data breach | SC Media
Nearly two million individuals, including 17,000 Apple users, had their information compromised in a data breach of the mobile stalkerware operation SpyX. The …
- Data breach at Western Alliance Bank affects 22,000 people | American Banker
Western Alliance Bank experienced a data breach affecting 22,000 individuals.
- Is the Middle East’s Race to Digitize a Threat?
The Middle East’s rapid digitization, driven by ambitious public and private sector initiatives, poses significant cybersecurity risks. While the region is …
- California AG Reminds 23andMe Customers of Data Deletion Rights - Infosecurity Magazine
California Attorney General Rob Bonta reminded 23andMe customers of their right to delete genetic data under California’s Genetic Information Privacy Act and …
- Auto Insurer Fined for Data Breach That Impacted 45K New Yorkers
Auto insurer Root was fined $975,000 for a data breach affecting 45,000 New Yorkers. The breach, part of a larger industry-wide campaign, exposed personal …
- What happens to your data if 23andMe collapses? — Harvard Gazette
The uncertain future of 23andMe, a popular genetic testing company, raises concerns about the protection of its 14 million customers’ genetic data. While …
- 23andMe files for bankruptcy in US after data breach, big losses | The Independent
Genetic testing company 23andMe has filed for bankruptcy protection in the US and is seeking a buyer. The company, founded in 2006 and known for its DNA …
- Lafayette Federal Credit Union Data Breach Alert
Wolf Haldenstein Adler Freeman & Herz LLP is investigating claims on behalf of individuals affected by the Lafayette Federal Credit Union data breach. The …
- Albabat Ransomware Expands Targets, Abuses GitHub - SecurityWeek
New versions of the Albabat ransomware, also known as White Bat, now target Windows, Linux, and macOS. The ransomware retrieves configuration files from a …
- Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks
A critical security flaw in Next.js, CVE-2025-29927, allows attackers to bypass authorization checks by manipulating the x-middleware-subrequest header. The …
- Cross-Border Data Compliance: Navigating Public Security Regulations in a Connected World | Tripwire
National security concerns have significantly impacted cross-border data compliance, leading to data localization policies and exemptions for national security …
- Top 10 Scam Techniques: What You Need to Know | Tripwire
Scammers use various techniques to manipulate emotions and cloud judgment, exploiting human characteristics and heuristics. These techniques include evoking …
- Cloak ransomware group hacked the Virginia Attorney General’s Office
The Cloak ransomware group claimed responsibility for a February cyberattack on the Virginia Attorney General’s Office, resulting in the theft of 134GB of …
- Finders Keypers: Open-source AWS KMS key usage finder - Help Net Security
Finders Keypers is an open-source tool for analyzing AWS KMS key usage, supporting both customer-managed and AWS-managed keys. It helps identify key usage, …
- Cloud providers aren’t delivering on security promises - Help Net Security
Cloud providers are failing to deliver on security promises, leading 44% of CISOs to change providers. CISOs rely on multiple providers, but many overpromise …
- ABYSSWORKER: A New EDR-Killer In Medusa Ransomware Attacks
A new ransomware campaign, Medusa, is being delivered via a HEARTCRYPT-packed loader. The loader deploys a driver, ABYSSWORKER, signed with a revoked …
- The Looming Quantum Threat: NCSC Urges Encryption Upgrades
The National Cyber Security Centre (NCSC) has published guidance urging businesses to transition to quantum-resistant encryption methods by 2035. While the …
- What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06) | Malwarebytes
Google Chrome, the most popular web browser, collects data on users’ website visits, searches, clicks, and device information. This data, combined with other …
- UAT-5918 ATP group targets critical Taiwan
Cisco Talos discovered UAT-5918, an info-stealing threat actor active since 2023, targeting Taiwan’s telecom, healthcare, IT, and critical infrastructure …
- Chinese Hackers Exploit Unpatched Servers in Taiwan
Chinese hackers, tracked as UAT-5918, are breaching Taiwan’s critical infrastructure by exploiting unpatched servers. The group, linked to Chinese state-backed …
- Fake Out: Babuk2 Ransomware Group Claims Bogus Victims
A new ransomware group, Babuk2, is attempting to bolster its reputation by claiming to have attacked 26 companies and stolen confidential information. However, …
- Hacker Pulls Off $8.4M Theft from Zoth Protocol After Admin Access…
Zoth protocol, a restaking protocol, experienced a $8.4 million exploit due to a compromised deployer wallet. The hacker quickly converted the stolen funds to …
- Oracle Cloud Hit by Massive Cyberattack, CloudSEK Warns of Supply Chain Crisis
In a potentially unprecedented digital heist, CloudSEK has uncovered what might be 2025’s largest supply chain attack targeting Oracle Cloud. Detected on March …
- No need to hack when it’s leaking: OrthoMinds edition – DataBreaches.Net
A security researcher discovered exposed database backups belonging to OrthoMinds clients, potentially affecting over 200,000 patients. OrthoMinds notified …
- Over 3 million applicants’ data leaked on NYU’s website - Washington Square News
A hacker took over NYU’s website, exposing over 3 million applicants’ data dating back to 1989. The hacker, claiming to expose NYU’s continued use of …
- Oracle denies breach after hacker claims theft of 6 million data records
Oracle denies a breach after a threat actor claimed to have stolen 6 million data records from Oracle Cloud federated SSO login servers. The threat actor, …
- New Eleven11bot DDoS Botnet Compromises Over 86,000 IoT Devices Globally
A new DDoS botnet, Eleven11bot, has compromised over 86,400 IoT devices globally, primarily targeting surveillance cameras and NVRs. The botnet, capable of …
- Polymarket: Where Insight Meets Incentive
I do not place bets, but I have become fascinated by Polymarket A platform where people do not just voice opinions but also put real money behind their …
- Violent ChatGPT Hallucination Sparks GDPR Complaint
A Norwegian man, Arve Hjalmar Holmen, filed a GDPR complaint against OpenAI after ChatGPT falsely claimed he murdered his children. The Austrian data rights …
- 11 hottest IT security certs for higher pay today | CSO Online
Cybersecurity certifications can boost pay, but timing is crucial. Foote Partners analyzed over 640 certifications to identify the most valuable ones based on …
- Developers: apply these 10 mitigations first to prevent supply chain attacks | InfoWorld
A new research paper highlights the limitations of current cybersecurity development risk frameworks in preventing supply chain attacks. The paper analyzed …
- Pennsylvania State Education Association data breach impacts 500,000 individuals
The Pennsylvania State Education Association (PSEA) suffered a data breach impacting 517,487 individuals. The breach, which occurred in July 2024 and was …
- Signal threatens to leave France if encryption backdoor required – Computerworld
Signal is threatening to leave France if encryption backdoor requirements are enacted, as it would undermine protections for users worldwide. The CEO argues …
- Atlassian security advisory (AV25-152) - Canadian Centre for Cyber Security
Atlassian published a security advisory on March 18, 2025, addressing vulnerabilities in Bamboo, Bitbucket, Crowd, Jira, and Jira Service Management. Users and …
- Israeli Spyware Graphite Targeted WhatsApp with 0-Click Exploit
Citizen Lab researchers uncovered the use of Graphite spyware, developed by Paragon Solutions, to target high-profile individuals through WhatsApp. The spyware …
- How to Build and Maintain an Effective AWS Security Posture
Aidan Steele, a security engineer at Cash App and AWS Serverless Hero, outlines an introductory approach to AWS security posture. He emphasizes the importance …
- New LLM jailbreak technique can create password-stealing malware | Security Magazine
A new LLM jailbreak technique, “Immersive World,” allows researchers to manipulate generative AI apps into creating password-stealing malware. This technique, …
- Rooted Androids 3,000x More Likely to Be Breached, Even iPhones Not Safe
Rooted Android and jailbroken iOS devices are 3,000 times more likely to experience a filesystem breach, according to a Zimperium report. These devices, which …
- HP Brings Quantum-Safe Encryption to Printers
HP is introducing quantum-safe encryption to its enterprise and professional-grade printers, featuring new formatters and ASIC chips with traditional RSA and …
- Brand impersonation is 51% of browser phishing attempts | Security Magazine
Browser-based phishing attacks have surged by 140% due to AI-powered threats, phishing-as-a-service, and zero-day vulnerabilities. Microsoft, Facebook, and …
- Dark Web Profile: FSociety (Flocker) Ransomware - SOCRadar® Cyber Intelligence Inc.
FSociety, or Flocker, is a Ransomware-as-a-Service (RaaS) operation that emerged in 2024, enabling cybercriminals to deploy ransomware without advanced …
- New Windows zero-day feared abused in widespread espionage for years | CSO Online
A zero-day vulnerability in Windows shortcut files, exploited by at least 11 nation-state actors, allows remote command execution. The vulnerability, …
- New KnowBe4 Report Reveals a Spike in Phishing Campaigns - IT Security Guru
KnowBe4’s Phishing Threat Trends Report highlights a 17.3% increase in phishing emails between September 2024 and February 2025. The report also notes a 22.6% …
- List of Countries which are most vulnerable to Cyber Attacks - Cybersecurity Insiders
Cybersecurity risks are escalating globally, with countries varying in their vulnerability to cyber attacks. Tajikistan, Bangladesh, China, Vietnam, and …
- CERT-UA Warns: Dark Crystal RAT Targets Ukrainian Defense via Malicious Signal Messages
CERT-UA warns of a new campaign targeting Ukrainian defense sectors with Dark Crystal RAT (DCRat) distributed via malicious Signal messages. The campaign, …
- Chinese military-linked companies dominate US digital supply chain - Help Net Security
Chinese military-linked companies, particularly ByteDance Group, remain deeply embedded in the US digital supply chain, posing cybersecurity risks despite …
- 70% of leaked secrets remain active two years later - Help Net Security
The 2025 State of Secrets Sprawl report reveals a 25% increase in leaked secrets on GitHub, with 70% of those from 2022 still active. This poses a significant …
- India Is Top Global Target for Hacktivists, Regional APTs
India has become the top global target for hacktivists and regional target of advanced persistent threat (APT) groups, facing a surge in cyberattacks due to …
- Leaked Black Basta Chats Suggest Russian Officials Aided Leader’s Escape from Armenia - The Cyber Post
Leaked Black Basta chat logs suggest possible connections between the ransomware operation and Russian authorities, including potential aid in their leader’s …
- WhatsApp fixed zero-day used to deploy Paragon Graphite spyware
WhatsApp addressed a zero-day vulnerability exploited by Paragon to install Graphite spyware on targeted devices. The campaign, which targeted journalists and …
- Google Chrome security advisory (AV25-151) - Canadian Centre for Cyber Security
Google published a security advisory on March 19, 2025, addressing vulnerabilities in Chrome for desktop. Users and administrators are encouraged to review and …
- 11 Nation-State Hackers Exploit Unpatched Windows Flaw Since 2017
A Windows zero-day vulnerability, allowing malicious code execution through shortcut files, has been exploited by at least 11 nation-state hacking groups since …
- Veeam security advisory (AV25-150) - Canadian Centre for Cyber Security
Veeam published a security advisory (AV25-150) for a critical vulnerability in Veeam Backup & Replication versions 12 prior to build 12.3.1.1139. Users and …
- Jenkins security advisory (AV25-149) - Canadian Centre for Cyber Security
Jenkins published a security advisory on March 19, 2025, addressing vulnerabilities in three plugins: AnchorChain, EDDSA API, and Zoho QEngine. Users are …
- Phishing-based attacks have risen 140% year-over-year | Security Magazine
Menlo Threat Intelligence reports a 140% year-over-year increase in browser-based phishing attacks, with a 130% rise in zero-hour incidents. Malicious actors …
- Chinese Hacking Group MirrorFace Targeting Europe - SecurityWeek
Chinese hacking group MirrorFace, linked to APT10, targeted a Central European diplomatic institute using updated tactics and new tools, including the Anel …
- Windows Shortcut Zero-Day (ZDI-CAN-25373) Exploited by State-Backed Threat Actors Since 2017: Overview of Key Details - SOCRadar® Cyber Intelligence Inc.
A sophisticated zero-day vulnerability, ZDI-CAN-25373, has been exploited by state-backed threat actors since 2017. This exploit, targeting Windows shortcut …
- SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats
SpyCloud’s 2025 Identity Exposure Report reveals a surge in holistic identity exposures, with cybercriminals leveraging data from various sources to exploit …
- Scareware Combined With Phishing in Attacks Targeting macOS Users - SecurityWeek
A scareware campaign, previously targeting Windows users with phishing attacks, has shifted its focus to macOS users. The campaign, which leverages compromised …
- Sperm bank breach deposits data into hands of cybercriminals | Malwarebytes
California Cryobank, a prominent sperm bank, experienced a data breach in April 2024, exposing customer information including names, SSNs, and financial …
- ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread Info-Stealers
The ClearFake campaign, utilizing fake reCAPTCHA and Cloudflare Turnstile verifications, has infected over 9,300 websites to spread information-stealing …
- Major teacher’s union breach leaks members' PIN codes| Cybernews
Over 500,000 members of the Pennsylvania State Education Association (PSEA) had their personal and financial data stolen in a cyberattack. The stolen data …
- Cl0p Hackers Leak 22K Bank Records in Cleo Breach Shock
Cl0p hackers exploited vulnerabilities in Cleo file transfer software, exposing 22,000 Western Alliance Bank records. The breach, which occurred in October …
- Tesla Owners Doxxed by Dogequest, an Unnerving Breach of Privacy
A website called Dogequest published a map exposing the personal information of Tesla owners, including their names, addresses, phone numbers, and email …
- Extortion Reboot: Ransomware Crew Threatens Leak to Snowden – DataBreaches.Net
Ox Thief, a ransomware group, initially used traditional tactics like data theft and ransom demands. However, their threat to leak the data to Edward Snowden, …
- GitHub Action hack likely led to another in cascading supply chain attack
A cascading supply chain attack on GitHub Actions likely led to the compromise of “tj-actions/changed-files,” leaking CI/CD secrets. The attack began with the …
- How to Secure Your Information on AWS: 10 Best Practices | Tripwire
Organizations using Amazon Web Services (AWS) must prioritize data security due to its popularity as a target for cyberattacks. The Shared Responsibility Model …
- New Arcane stealer spreading via YouTube and Discord | Securelist
A new stealer, Arcane, is being distributed through YouTube videos promoting game cheats and a loader called ArcanaLoader. Arcane steals a wide range of data, …
- Top 10 Passwords Hackers Use to Breach RDP – Is Yours at Risk?
Hackers frequently target Remote Desktop Protocol (RDP) ports with weak passwords, exploiting vulnerabilities for successful cyberattacks. A recent study by …
- New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads
A large-scale ad fraud campaign, codenamed Vapor, has been discovered on the Google Play Store. The campaign, which began in April 2024, involves hundreds of …
- Fake DeepSeek AI Installers, Websites and Apps Spreading Malware
Cybercriminals are exploiting the popularity of AI tools like DeepSeek to distribute malware through SEO poisoning and fake installers. Malicious actors create …
- Flashpoint 2025 Global Threat Intelligence Report: Stay Ahead of Emerging Threats | Flashpoint
The Flashpoint 2025 Global Threat Intelligence Report highlights the rise of sophisticated cyber threats, including information-stealing malware and ransomware …
- New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking
A critical vulnerability in AMI’s MegaRAC Baseboard Management Controller (BMC) software, CVE-2024-54085, allows attackers to bypass authentication and …
- Cloudflare expands security portfolio with network-powered posture management | Network World
Cloudflare launches its Security Posture Management, a network-based solution for cloud security. The new offering discovers assets, including cloud …
- 11 State-Sponsored APTs Exploiting LNK Files for Espionage, Data Theft - SecurityWeek
Trend Micro’s Zero Day Initiative (ZDI) discovered nearly 1,000 malicious LNK files used by state-sponsored threat groups and cybercriminals for espionage and …
- Identity attacks and infostealers dominate the 2025 Threat Detection Report
The 2025 Threat Detection Report analyzes nearly 93,000 threats detected across various assets, highlighting a rise in identity attacks, infostealers, and …
- Actively Exploited ChatGPT Bug Puts Organizations at Risk
A server-side request forgery vulnerability in ChatGPT, CVE-2024-27564, allows attackers to redirect users to malicious URLs. The vulnerability, actively …
- New ‘Rules File Backdoor’ Attack Lets Hackers Inject Malicious Code via AI Code Editors
A new supply chain attack vector, “Rules File Backdoor,” enables hackers to inject malicious code into AI-powered code editors like GitHub Copilot and Cursor. …
- $20B loss estimated from potential March Madness hacks | Security Magazine
March Madness, with its extended duration, presents a lucrative target for cybercriminals, potentially resulting in over $18.3 billion in revenue loss for …
- Google Releases Major Update for Open Source Vulnerability Scanner - SecurityWeek
Google released an updated version of OSV-Scanner, its free vulnerability scanner for open source developers. The new version integrates features from …
- Google Purchases Wiz in $32B Deal to Boost Cloud Security
Google is acquiring Wiz, a leading cloud security platform, for $32 billion to enhance multi-cloud security and integrate AI into cybersecurity. The …
- Chinese Hackers Target European Diplomats with Malware
Chinese cyberespionage group MirrorFace, linked to APT10, targeted a European diplomatic institute using a spear-phishing campaign. The attack deployed the …
- FBI Warns: Malware Hidden in File Conversion Tools*
Recently, the FBI warned about an emerging threat involving cybercriminals embedding malware into file conversion tools. Whether you are converting documents, …
- AUTOSUR Breach, FiveM Database Leak, Disney+ Account Checker, Crypto Leads & Forex Scams Exposed - SOCRadar® Cyber Intelligence Inc.
SOCRadar’s Dark Web Team uncovered various cyber threats, including alleged data breaches at AUTOSUR, Lenovo, HP, and the National Telecommunications …
- GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories
A supply chain compromise of the popular GitHub Action tj-actions/changed-files affected over 23,000 repositories, potentially exposing sensitive secrets like …
- European Cyber Report 2025: 137% more DDoS attacks than last year
DDoS attacks have surged by 137% in the past year, becoming shorter, more targeted, and sophisticated. Organizations must adapt their IT security strategies to …
- Free file converter malware scam “rampant” claims FBI
The FBI warns of a surge in malware scams involving boobytrapped file-conversion tools, both online and downloadable, that steal personal information. Victims …
- Social Media and Email hacking surged in 2024 - Cybersecurity Insiders
In 2024, there was a significant increase in cybercrime, particularly targeting social media and email accounts. This surge was driven by phishing scams, where …
- Arctic Wolf Warns Of Ongoing Attacks Targeting FortiGate Firewall Management Interfaces
Arctic Wolf warns of ongoing attacks targeting FortiGate firewall management interfaces, exploiting vulnerabilities since December 2024. Malicious actors are …
- AsyncRAT Surges In Global Malware Rankings
AsyncRAT, a stealthy remote access Trojan, has surged in popularity, ranking fourth globally in the latest Global Threat Index. Malicious actors are using …
- IntelMQ: Open-source tool for collecting and processing security feeds - Help Net Security
IntelMQ is an open-source tool designed to help IT security teams collect and process security feeds. It offers a modular and extensible design, supporting …
- Welcome to Security Week 2025
Security Week 2025 highlights the evolving threat landscape and the need for integrated security solutions. Cloudflare will showcase innovations addressing …
- Denmark's Postal Service Ends Letter Delivery: Adaptation or Loss?
Denmark’s state-run PostNord will discontinue all letter mail services by 30 December 2025, marking the end of a 400-year tradition. The decision follows a …
- Malicious Adobe, DocuSign OAuth apps target Microsoft 365 accounts
Cybercriminals are using malicious Microsoft OAuth apps disguised as Adobe and DocuSign apps to steal Microsoft 365 credentials and deliver malware. The apps …
- Manus AI: China’s Bold Step Forward—Promises and Challenges — Insights For Success
Manus AI, an autonomous system developed by the Chinese startup Butterfly Effect, is touted as a significant advancement in artificial intelligence. While it …
- Merz wins support for surge in spending, proclaiming ‘Germany is back’ | Reuters
German Chancellor-elect Merz secured Greens' backing for a historic €500B infrastructure and defense funding package requiring constitutional amendments to …
- Everything you say to your Echo will be sent to Amazon starting on March 28 - Ars Technica
Starting March 28, Amazon will no longer allow Echo users to process Alexa requests locally, forcing all voice recordings to be sent to Amazon’s cloud for …
- Pirate Bay backer Carl Lundström dies in plane crash • The Register
Carl Lundström, a financier of The Pirate Bay and far-right activist, died in a plane crash. He provided financial backing and servers for the torrenting site, …
- OpenAI says it’s ‘impossible’ to train AI without copyrighted materials | Euronews
OpenAI has taken a firm stance that it’s “impossible” to train AI systems like ChatGPT without using copyrighted materials, as reported by Euronews. The …
- We’re Thinking About Deploying AI Models Which Have An “I Quit” Button: Anthropic CEO
Anthropic CEO Dario Amodei proposes giving AI models an “I quit” button, allowing them to opt out of tasks they find unpleasant. This idea stems from a …
- GitLab addressed critical auth bypass flaws in CE and EE)
GitLab released security updates to address nine vulnerabilities, including two critical authentication bypass flaws in Community Edition (CE) and Enterprise …
- One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild - Security Boulevard
A new remote code execution (RCE) vulnerability, CVE-2025-24813, is being actively exploited in the wild. The exploit, which requires only one PUT API request, …
- A New Era of Attacks on Encryption Is Starting to Heat Up | WIRED
Governments worldwide, including the UK, France, Sweden, and the EU, are intensifying their efforts to undermine end-to-end encryption, citing concerns about …
- How Security Teams Should Respond To The Rise In Vulnerability Disclosures
Vulnerability disclosures are on the rise due to increased open-source software use, greater awareness, and growing software complexity. This surge exposes …
- Guardz Reveals Details of an Ongoing Phishing Campaign Exploiting Microsoft 365 Infrastructure - Cybersecurity Insiders
Guardz, a cybersecurity company, uncovered a sophisticated phishing campaign exploiting Microsoft 365 infrastructure. The campaign involves manipulating …
- FBI alerts Gmail users over Medusa Ransomware - Cybersecurity Insiders
The FBI and CISA warn Gmail users about the Medusa Ransomware campaign, which spreads through phishing scams and exploits unpatched software vulnerabilities. …
- New MassJacker Malware Targets Piracy Users, Hijacking Cryptocurrency Transactions
A new malware campaign, MassJacker, targets users seeking pirated software. MassJacker, a clipper malware, steals cryptocurrency by replacing copied wallet …
- Microsoft Uncovers New XCSSET MacOS Malware Variant Targeting Xcode Projects
Microsoft Threat Intelligence has discovered a new variant of XCSSET, a sophisticated macOS malware targeting Xcode projects. This variant employs stronger …
- EU Seeks US Assurances on Trans-Atlantic Data Flows
The EU is seeking assurances from the US on the stability of the EU-US Trans-Atlantic Data Privacy Framework, which faces legal challenges and concerns over …
- Breach Roundup: The Ivanti Patch Treadmill - GovInfoSecurity
This week’s cybersecurity roundup includes critical Ivanti flaws, Microsoft Patch Tuesday addressing six zero-days, and a North Korean Android spyware …
- Groups From China, Russia, Iran Hitting OT Systems Worldwide
Nation-state threat groups, including China-linked Voltzite, Russia-linked Graphite, and Iran-linked Bauxite, are actively targeting operational technology …
- FBI and CISA Urge Enabling 2FA to Counter Medusa Ransomware
The FBI and CISA issued a joint advisory about the Medusa ransomware gang, a significant threat to critical infrastructure sectors in the United States. The …
- Ransomware Hits Record High: 126% Surge in Attacks in February 2025
February 2025 saw a record 126% surge in ransomware attacks, with Cl0p leading the charge. Hackers exploited file transfer flaws, infostealers, and AI-driven …
- Cisco security advisory (AV25-140) - Canadian Centre for Cyber Security
Cisco published security advisories on March 12, 2025, addressing vulnerabilities in Cisco IOS XR. Users and administrators are encouraged to review and apply …
- Tata Technologies' 1.4TB Data Breach: Hunters International’s Dark Web Leak
Tata Technologies, a subsidiary of Tata Motors, suffered a significant cyberattack resulting in the exposure of 1.4 terabytes of sensitive data on the dark …
- New York sues Allstate over data breach, alleged security lapses | Reuters
New York Attorney General Letitia James sued Allstate’s National General unit for failing to report a data breach that exposed drivers’ license numbers and …
- New Era Enterprises Confirms Recent Data Breach Affected Certain Boston Mutual Customers | Console and Associates, P.C. - JDSupra
New Era Enterprises, Inc. confirmed a data breach affecting Boston Mutual customers, compromising sensitive information such as names, dates of birth, Social …
- Massive data breach: Israelis' COVID records, other information on sale for $1 millio
A group is selling a database of 500,000 Israeli COVID-19 vaccination records for $1 million. The data, allegedly obtained from hackers, includes vaccination …
- DVIDS - News - Eye on the Grid: Navy Develops ‘MOSAICS’ to Cyber-Defend Critical Infrastructure
The Navy’s More Situational Awareness for Industrial Control Systems (MOSAICS) framework, designed to safeguard critical industrial control systems (ICS) from …
- Has DeepSeek’s open source AI become a tool for cyber-scammers? - UKTN
DeepSeek’s open-source AI model, DeepSeek R1, can be used to generate malware, despite having minimal guardrails. While the model initially resists creating …
- Check Point Uncovers 2025’s Biggest Cyber Risks - TechAfrica News
Check Point’s Cyber Security Report 2025 highlights the destructive nature of cyber wars, evolving ransomware tactics, rising infostealer attacks, increased …
- FCC launches national security unit to counter state-linked threats to US telecoms | Cybersecurity Dive
The FCC launched a national security unit to counter state-linked threats to US telecoms. The unit aims to thwart cyber espionage groups like Salt Typhoon.
- VC Investment in Cyber Startups Surges 35% - Infosecurity Magazine
Venture capital investment in cybersecurity startups saw a 35% increase in Q4 2024, reaching $3.5 billion, despite a decrease in the number of deals. This …
- Cyber Security Sectoral Analysis 2025 reveals explosive growth
The UK’s cyber security sector experienced significant growth in 2024, generating £13.2 billion in revenue and adding 6,600 new jobs. This growth is attributed …
- Denmark raises cyber threat level for telecommunications sector
Denmark raised its cyber threat level for the telecommunications sector due to increased cyber espionage attempts, particularly from Russia. The Danish …
- Cyber-attacks a bigger threat to cargo owners than cargo ships - The Loadstar
Shipping supply chains face a high number of cyber-attacks, primarily targeting cargo owners rather than ships. A recent survey revealed a lack of awareness …
- CPS data breach: Expert chimes in on how to stay vigilant
Over 700,000 Chicago Public School students’ information was exposed in a data breach, but social security numbers were not compromised. While identity theft …
- Picklescan Vulnerabilities Could Let Hackers Bypass AI Security Checks
Sonatype researchers discovered four vulnerabilities in picklescan, a tool used to examine Python pickle files for malicious code. These vulnerabilities could …
- NIST Finalizes Differential Privacy Rules to Protect Data
NIST finalized guidelines for evaluating differential privacy, a mathematical framework that obscures personally identifiable information in datasets while …
- China-linked APT UNC3886 targets EoL Juniper routers
China-linked APT UNC3886 is deploying custom backdoors on outdated Juniper Networks Junos OS MX routers. The backdoors, based on the TINYSHELL malware, enable …
- New Bill Aims To Strengthen Cybersecurity For Federal Contractors
The House of Representatives passed the Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025, mandating federal contractors implement …
- UAE Guidelines Offer Blueprint for Cybersecurity in Health
The United Arab Emirates is strengthening cybersecurity in healthcare through the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Strategy. The …
- Generative AI red teaming: Tips and techniques for putting LLMs to the test | CSO Online
OWASP’s “Generative AI Red Teaming Guide” provides a structured approach to identifying vulnerabilities and mitigating risks in AI systems. The guide …
- WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback
Mozilla urges Firefox users to update to version 128 or higher to avoid issues with add-ons, content signing, and DRM playback due to an expiring root …
- Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk
Meta warns of a FreeType vulnerability (CVE-2025-27363) with active exploitation risk. The vulnerability, an out-of-bounds write flaw, could allow remote code …
- Medusa ransomware hit over 300 critical infrastructure organizations until February 2025
The Medusa ransomware operation, active since June 2021, has impacted over 300 critical infrastructure organizations in the United States. The FBI, CISA, and …
- OpenAI Operator Agent Used in Phishing Attack Demo
Symantec researchers demonstrated how OpenAI’s Operator agent, an LLM-powered tool, can be used to construct a basic phishing attack with minimal prompt …
- Head Mare and Twelve: Joint attacks on Russian entities | Securelist
Head Mare and Twelve, two hacktivist groups, collaborated on attacks targeting Russian companies in September 2024. The attackers used a mix of familiar and …
- CISA Defunds Threat-Sharing Hubs for States and Elections
The Cybersecurity and Infrastructure Security Agency (CISA) has terminated funding for two national cybersecurity hubs, the Multi-State Information Sharing and …
- Zut Alors! Surge in Cyberattacks Targeting France in 2024
Cyberattacks targeting France surged in 2024, particularly during the Paris Summer Olympics, with ANSSI responding to over 4,300 incidents. The agency also …
- How effective is the EDPB website auditing tool for checking GDPR compliance? - BH Consulting
The European Data Protection Board’s (EDPB) website auditing tool (WAT) is a valuable resource for organizations to assess their websites’ compliance with GDPR …
- What Is SCM (Security Configuration Management)? | Tripwire
Security Configuration Management (SCM) is a process that identifies and remediates system misconfigurations to reduce vulnerabilities and ensure compliance. …
- CISA and Partners Release Cybersecurity Advisory on Medusa Ransomware | CISA
CISA, FBI, and MS-ISAC released a joint advisory on Medusa ransomware, detailing TTPs, IOCs, and mitigation strategies. Medusa, a ransomware-as-a-service …
- Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack
A coordinated cyber attack is exploiting multiple SSRF vulnerabilities across various platforms, with over 400 IP addresses involved. The targeted countries …
- NIST selects HQC as backup algorithm for post-quantum encryption - Help Net Security
NIST has selected HQC as a backup post-quantum encryption algorithm, complementing the primary ML-KEM algorithm. HQC, based on error-correcting codes, will …
- China, Russia, Iran, and North Korea Intelligence Sharing - Schneier on Security
Former CISA Director Jen Easterly writes about a new international intelligence sharing co-op: Historically, China, Russia, Iran & North Korea have cooperated …
- Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution
Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution with no additional …
- Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Multiple vulnerabilities have been discovered in Mozilla products, including Firefox and Thunderbird, that could allow for arbitrary code execution. …
- Google unveils Gemma 3: Open-source AI models that run on a single GPU By Investing.com
Google has released Gemma 3, a groundbreaking collection of open-source AI models that operate efficiently on a single GPU or TPU. Built on the same foundation …
- Tata Technologies Data Breach Leaks 1.4TB of Sensitive Data - TechNadu
Hunters International, a ransomware group, leaked over 1.4 terabytes of stolen data from Tata Technologies, including employee details and internal documents. …
- New Ballista Botnet spreads using TP-Link flaw. Is it an Italian job?
Cato CTRL researchers have discovered the Ballista botnet exploiting CVE-2023-1389, a remote code execution vulnerability in TP-Link Archer routers that allows …
- How Generative AI Can Strengthen Corporate Cybersecurity - Cybersecurity Insiders
Generative AI strengthens corporate cybersecurity in seven ways: It enables proactive threat detection by identifying anomalies that conventional systems might …
- Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks
Apple released a security update Tuesday addressing CVE-2025-24201, a zero-day WebKit vulnerability exploited in “extremely sophisticated” targeted attacks. …
- Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks
Apple released a security update Tuesday addressing CVE-2025-24201, a zero-day WebKit vulnerability exploited in “extremely sophisticated” targeted attacks. …
- Deepfake CEO Video Rocks YouTube
YouTube has warned about fraudulent AI-generated deepfake videos of CEO Neal Mohan announcing monetization changes. These videos were privately sent to content …
- March Patch Tuesday warnings: Act fast to plug zero day holes in Windows, VMware | CSO Online
March’s Patch Tuesday requires urgent action for multiple zero-days. Broadcom warned about three actively exploited VMware vulnerabilities (ESXicape) allowing …
- Lazarus Group Hid Backdoor in Fake npm Packages in Latest Attack
North Korean state-backed Lazarus Group has injected malicious code into npm through six fake packages downloaded approximately 330 times. Socket Research Team …
- Lookout Discovers North Korean APT37 Mobile Spyware | Threat Intel
Lookout researchers have discovered KoSpy, a new Android spyware attributed to North Korean threat actor APT37 (ScarCruft), active from March 2022 to March …
- Google Enhances Data Privacy with Confidential Federated Analytics - InfoQ
Google has announced Confidential Federated Analytics (CFA), a new technique that enhances privacy while increasing transparency in data processing. CFA builds …
- Apple fixed the third actively exploited zero-day of 2025
Apple has released emergency security updates to address CVE-2025-24201, a zero-day vulnerability in the WebKit browser engine that was exploited in “extremely …
- Whopping Number of Microsoft Zero-Days Under Attack
Microsoft’s March 2025 Patch Tuesday includes fixes for six zero-day vulnerabilities that are actively being exploited in the wild. Three of these are NTFS …
- Microsoft security advisory – March 2025 monthly rollup (AV25–130) - Canadian Centre for Cyber Security
Today, March 11, 2025, Microsoft released security advisories addressing vulnerabilities across multiple products. The Canadian Centre for Cyber Security has …
- Silk Typhoon Hackers Indicted - Schneier on Security
The US Department of Justice has indicted 12 Chinese individuals for extensive hacking operations over a decade. The group includes eight i-Soon employees, two …
- SAP security advisory – March 2025 monthly rollup (AV25-126) - Canadian Centre for Cyber Security
Today, March 11, 2025, SAP released security advisories addressing vulnerabilities across multiple products. The Canadian Centre for Cyber Security has issued …
- Top 20 Free APIs for Cybersecurity: Threat Intelligence, Malware Analysis & More - SOCRadar® Cyber Intelligence Inc.
SOCRadar’s article showcases 20 free cybersecurity APIs in five categories. Threat Intelligence APIs include AbuseIPDB, BinaryEdge, EmailRep, Pulsedive, and …
- SAP Patches High-Severity Vulnerabilities in Commerce, NetWeaver - SecurityWeek
SAP has released 21 new and three updated security notes as part of its March 2025 security patch day. The update includes five high-priority security notes …
- Edimax Says No Patches Coming for Zero-Day Exploited by Botnets - SecurityWeek
Edimax has confirmed it cannot patch CVE-2025-1316, a critical command execution vulnerability in its discontinued IC-7100 IP cameras currently being exploited …
- Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Infects Over 6,000 Devices
A new botnet campaign called Ballista is actively targeting unpatched TP-Link Archer routers by exploiting CVE-2023-1389, a high-severity remote code execution …
- GitGuardian Report: 70% of Leaked Secrets Remain Active for Two Years, Urging Immediate Remediation - Cybersecurity Insiders
GitGuardian’s “2025 State of Secrets Sprawl Report” reveals a troubling 25% year-over-year increase in leaked secrets, with 23.8 million new credentials …
- Steganography Explained: How XWorm Hides Inside Images
The Hacker News reports on a sophisticated cyberattack using steganography, where XWorm malware is hidden inside innocent-looking image files to evade …
- X users report login troubles as Dark Storm claims cyberattack | Malwarebytes
X (formerly Twitter) experienced multiple service disruptions yesterday, March 10, with thousands of users reporting login troubles throughout the day. The …
- Almost 1 million business and home PCs compromised after users visited illegal streaming sites: Microsoft | CSO Online
Microsoft has discovered a large-scale data theft campaign that compromised nearly 1 million devices, including both consumer and enterprise systems, after …
- APT ‘Blind Eagle’ Targets Colombian Government
The Dark Reading article reports that the Advanced Persistent Threat (APT) group known as “Blind Eagle” has launched targeted attacks against Colombian …
- Dell security advisory (AV25-121) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security issued advisory AV25-121 on March 10, 2025, alerting users to multiple Dell product vulnerabilities identified between …
- Red Hat security advisory (AV25-120) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security has issued security advisory AV25-120 on March 10, 2025, alerting users to multiple vulnerabilities affecting Red Hat …
- Over 1000 Malicious Packages Found Exploiting Open-Source Platforms
Fortinet’s FortiGuard Labs has identified over 1,000 malicious software packages targeting open-source platforms since November 2024. Their analysis reveals …
- Ubuntu security advisory (AV25-118) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security has issued an important security advisory (AV25-118) on March 10, 2025, regarding multiple vulnerabilities in the Linux …
- Global expansion in Generative AI: a year of growth, newcomers, and attacks
Cloudflare’s latest analysis reveals remarkable growth in the generative AI landscape, with traffic to AI services surging by 251% between February 2024 and …
- Global expansion in Generative AI: a year of growth, newcomers, and attacks
Cloudflare’s latest analysis reveals remarkable growth in the generative AI landscape, with traffic to AI services surging by 251% between February 2024 and …
- Could The Belsen Group Be Associated With ZeroSevenGroup? • KELA Cyber Threat Intelligence
KELA explores a possible connection between the Belsen Group and ZeroSevenGroup, two cybercriminal entities with ties to Yemen. Both groups share similarities …
- Blind Eagle: …And Justice for All - Check Point Research
Blind Eagle, an APT group, has been targeting Colombian institutions and government entities since November 2024 using malicious .url files. These files, while …
- Critical PHP Vulnerability Under Mass Exploitation - SecurityWeek
A critical vulnerability in PHP (CVE-2024-4577) is being exploited on a large scale, allowing remote code execution on vulnerable servers. The flaw, which …
- North Korea-linked APT Moonstone used Qilin ransomware in limited attacks
Microsoft researchers reported that North Korea-linked APT Moonstone Sleet has been using Qilin ransomware in limited attacks since February 2025. This …
- What do organisations need to disclose to individuals about AI and automated decisions? | Data Protection Report
The CJEU ruled that individuals have the right to understand how their personal data was used in automated decisions, but not necessarily the underlying …
- 560,000 People Impacted Across Four Healthcare Data Breaches - SecurityWeek
Four healthcare organizations reported data breaches last week, impacting over 560,000 individuals. The breaches, attributed to Rhysida and BianLian ransomware …
- GitHub-Hosted Malware Infects 1M Windows Users
A malvertising campaign, originating from illegal streaming websites, infected nearly 1 million Windows PCs with data-stealing malware. The campaign, …
- The Evolution and Challenges of Know Your Customer (KYC) in Combating Crypto Money Laundering
Introduction Know Your Customer (KYC) protocols are critical to modern financial security. Initially designed to verify customer identities and reduce financial …
- Generative AI Fuels a New Wave of Cyber Threats
Generative AI, developed initially to streamline content creation and automation, is increasingly weaponized by cyber threat actors to scale and refine their …
- Airlines Tighten Restrictions on Power Bank Use During Flights
Travellers should prepare for significant changes in how they power their devices during air travel as airlines worldwide implement stricter regulations on …
- Majority of Orgs Hit by AI Cyber-Attacks as Detection Lags - Infosecurity Magazine
A new report by SoSafe reveals that 87% of organizations have encountered AI-driven cyber-attacks in the last year, with 91% anticipating a surge in these …
- Seqrite’s cyber threat report 2025: Highlights 369.01 million malware detections, ET CISO
Seqrite, the enterprise arm of Quick Heal Technologies Limited, unveiled its “India Cyber Threat Report 2025” at the nasscom-DSCI Annual Information Security …
- Up to $2 Million Reward Offers Each for Information Leading to Arrests and/or Convictions of Malicious Cyber Actors from China - United States Department of State
The Department of State is offering up to $2 million rewards for information leading to the arrests and convictions of Yin KeCheng and Zhou Shuai, Chinese …
- Businesses set to fail if cyber resilience not most important thing says Splunk strategy head | Euronews
Cyber attacks against companies surged in 2024, with education being the most impacted sector. Businesses, especially smaller ones, face significant costs and …
- Communications Security Establishment Canada releases 2025 update to report on cyber threats to Canada’s democratic process - Canada.ca
The Communications Security Establishment Canada (CSE) has released an updated report on cyber threats to Canada’s democratic process, highlighting the growing …
- Polish supervisory authority publishes updated guide on personal data protection breaches - A&O Shearman
The Polish supervisory authority has updated its guide on personal data protection breaches, emphasizing timely reporting and detailed documentation. The guide …
- DATA BREACH ALERT: Edelson Lechtzin LLP Is Investigating
Edelson Lechtzin LLP is investigating a data breach at New Era Enterprises, Inc. that occurred between December 9 and December 18, 2024. The breach may have …
- Bank of America Sounds Alarm on Massive Data Breach, Millions Could Be Affected - Is Your Account Safe? - Bank of America (NYSE:BAC) - Benzinga
Bank of America warned customers about a potential data breach involving sensitive information like Social Security numbers. The breach occurred due to …
- Rubrik discloses server breach, compromise of ‘access information’ | Cybersecurity Dive
Rubrik disclosed a server breach where an unauthorized actor accessed log files containing limited access information. The company found no evidence of …
- Berkeley Research Group suffers cyber attack, sources say | Insurance Business Canada
Berkeley Research Group was hit by a cyber attack last week while banks were working on a debt sale for its acquisition by TowerBrook Capital Partners, …
- Thousands of public school workers impacted by cyberattack on retirement plan administrator | The Record from Recorded Future News
A cyberattack on Carruth Compliance Consulting, a retirement plan administrator for public schools, exposed sensitive data of over 40,000 teachers and …
- Federman & Sherwood Investigates Rivers Casino
Federman & Sherwood is investigating Rivers Casino Philadelphia for a data breach that exposed personal information. Contact Tiffany Peintner at …
- Feds seized $23 million in crypto stolen using keys from LastPass breaches
U.S. authorities seized $23 million in cryptocurrency linked to a $150 million Ripple wallet theft, suspected to be connected to the 2022 LastPass breach. The …
- SilentCryptoMiner Infects 2,000 Russian Users via Fake VPN and DPI Bypass Tools
A new mass malware campaign, SilentCryptoMiner, is infecting over 2,000 Russian users by disguising itself as a tool to bypass internet blocks. The campaign, …
- Global Crackdown Slashes Cobalt Strike Availability By 80%
A global effort led by Fortra, Microsoft, and the Health Information Sharing and Analysis Center has reduced access to weaponized versions of Cobalt Strike by …
- NTT suffered a data breach that impacted 18,000 companies
NTT Communications Corporation (NTT Com) suffered a data breach impacting nearly 18,000 corporate customers. The breach exposed sensitive information including …
- Developer guilty of using kill switch to sabotage employer’s systems
Software developer Davis Lu was found guilty of sabotaging his former employer’s systems after being demoted. Lu used custom malware, deleted data, and …
- Akira ransomware gang used unsecured webcam to bypass EDR
The Akira ransomware gang bypassed EDR by exploiting an unsecured webcam with critical vulnerabilities. The attackers used the webcam to deploy Linux-based …
- New Chirp tool uses audio tones to transfer data between devices
A new open-source tool, Chirp, transmits data between devices using audio tones. While not practical for most applications due to limitations like background …
- Malicious GitHub repositories linked to nearly 1M infections • The Register
Microsoft discovered a malvertising campaign that infected nearly a million devices by using GitHub to host malware. The campaign, which involved multiple …
- WestJet Updates Carry-On Baggage Policy Starting May 6, 2025
WestJet is changing its carry-on baggage policy starting May 6, 2025, to match the size limits used by most major North American airlines. The new maximum …
- Thousands of Israeli Gun Owners Exposed in Iranian Hack-and-leak Operation - National Security & Cyber - Haaretz.com
A hack-and-leak operation linked to Iran has exposed sensitive data on thousands of Israeli gun owners. Documents examined by Haaretz and U.S. cybersecurity …
- Thousands of Israeli Gun Owners Exposed in Iranian Hack-and-leak Operation - National Security & Cyber - Haaretz.com
Iranian hackers leaked sensitive data on thousands of Israeli gun owners, exposing their identities and addresses. The hack-and-leak operation highlights the …
- Undocumented “backdoor” found in Bluetooth chip used by a billion devices
An undocumented “backdoor” was discovered in the ESP32 microchip, commonly used in IoT devices. The backdoor, consisting of 29 undocumented commands, allows …
- ‘EncryptHub’ OPSEC Failures Reveal TTPs & Big Plans
Researchers from Outpost24 uncovered operational security (OPSEC) failures and straightforward tactics used by the cybercriminal “EncryptHub,” challenging the …
- Chinese APT Silk Typhoon exploits IT supply chain weaknesses for initial access | CSO Online
The China-aligned threat group Silk Typhoon has shifted its tactics to exploit IT supply chain weaknesses, compromising cloud IT services and software …
- Elastic patches critical Kibana flaw allowing code execution
Elastic fixed a critical vulnerability in Kibana, allowing arbitrary code execution through a specially crafted file upload and HTTP requests. The flaw impacts …
- youtube.com/watch
CBC Marketplace’s latest investigation “Gaming the System” exposes concerning privacy issues in mobile games targeting children. The report reveals how game …
- Massive botnet that appeared overnight is delivering record-size DDoSes - Ars Technica
A new botnet, Eleven11bot, comprising an estimated 30,000 webcams and video recorders, is delivering record-size denial-of-service (DDoS) attacks. The botnet, …
- ‘Five Eyes alliance’ crumbling after UK, Aus, NZ and Canada give US cold shoulder | News World | Metro News
The ‘Five Eyes’ alliance, a post-WWII intelligence sharing partnership between the US, UK, Australia, New Zealand, and Canada, is facing a potential fracture …
- Layoff Report Shows The DOGE’s Bite
Layoffs in February tripled from January, driven by mass firings of federal workers by the Department of Government Efficiency (DOGE). While the impact on the …
- Breach Roundup: US Sanctions Iran-Based Nemesis Admin
The U.S. sanctioned Behrouz Parsarad, an Iranian national accused of running Nemesis, a darknet marketplace facilitating drug sales, cybercrime, and money …
- Ransomware threat mailed in letters to business owners | Malwarebytes
Business owners across the US received letters claiming to be from BianLian, a ransomware group, demanding cryptocurrency ransom for stolen data. The letters, …
- Credential Leaks, Enterprise Risk, and IOCs: How Contextual Intelligence Strengthens Your Defenses | Flashpoint
Cyber threats, particularly those involving infostealers and credential theft, are becoming more sophisticated and numerous, overwhelming security teams with …
- House Passes Bill Requiring Federal Contractors to Implement Vulnerability Disclosure Policies - SecurityWeek
The House passed the Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025, requiring federal contractors to implement Vulnerability Disclosure …
- Top 10 AI Deepfake Detection Tools to Combat Digital Deception in 2025 - SOCRadar® Cyber Intelligence Inc.
AI deepfake detection tools are crucial in combating digital deception, utilizing machine learning, computer vision, and biometric analysis to identify …
- Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution
Elastic released security updates for Kibana to address a critical vulnerability (CVE-2025-25012) that could enable remote code execution. The vulnerability, …
- EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
The financially motivated threat actor EncryptHub, active since June 2024, employs various tactics including phishing, trojanized apps, and PPI services to …
- Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom
The Medusa ransomware group, active since January 2023, has claimed nearly 400 victims, with a 42% increase in attacks between 2023 and 2024. The group, known …
- FBI Warns of Data Extortion Scam Targeting Corporate Executives | CISA
The FBI warns of a data extortion scam targeting corporate executives. Criminals pose as the “BianLian Group,” threatening to release sensitive information …
- Digg is relaunching after sale to Kevin Rose and Alexis Ohanian
Digg, once a prominent social news aggregation website, is being revived by its founder Kevin Rose and Reddit co-founder Alexis Ohanian. The relaunch aims to …
- Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud
Google is rolling out AI-powered scam detection for Android devices to combat conversational fraud. The feature, which runs on-device and alerts users to …
- Tripwire Patch Priority Index for February 2025 | Tripwire
Tripwire’s February 2025 Patch Priority Index highlights critical vulnerabilities for Microsoft, including patches for Microsoft Edge, Office, Excel, Windows, …
- Two Venezuelans Arrested in US for ATM Jackpotting - SecurityWeek
Two Venezuelan nationals, David Jose Gomez-Cegarra and Jesus Segundo Hernandez-Gil, were arrested for their involvement in ATM jackpotting schemes across New …
- Ransomware Group Claims Attack on Tata Technologies - SecurityWeek
Ransomware group Hunters International claims responsibility for an attack on Tata Technologies, threatening to leak 1.4 terabytes of data allegedly stolen …
- Prohibited practices under the AI Act: Answered and unanswered questions in the Commission’s guidelines | Data Protection Report
The EU AI Act’s prohibitions, effective February 2, 2025, carry fines for non-compliance. Commission guidelines, published February 4, 2025, provide clarity on …
- YouTube Premium Lite: Ad-Free Viewing for $7.99/Month - YouTube Blog
YouTube Premium Lite, a new, more affordable ad-free viewing option, is expanding to the US and other countries. The expansion comes as YouTube Music and …
- Scammers take over social media - Help Net Security
Cyber threats on social media reached unprecedented levels in Q4 2024, with Facebook being the biggest target. Malvertising, e-shop scams, and phishing were …
- Polyglot files used to spread new backdoor | CSO Online
A threat actor is using polyglot files in a spear-phishing campaign targeting critical infrastructure firms in the UAE, particularly in the aviation, satellite …
- VMware fixed three actively exploited zero-days in ESX products
Broadcom released security updates for three actively exploited zero-day vulnerabilities in VMware ESX products. The vulnerabilities, CVE-2025-22224, …
- Jamf Buys Identity Automation, Expands IAM Capabilities
Jamf, an MDM provider, is acquiring Identity Automation, a cloud-based IAM platform, for $215 million. The acquisition aims to combine identity and device …
- New Microsoft 365 outage impacts Teams, causes call failures
Microsoft is investigating a new outage affecting Microsoft 365, specifically Teams, causing call failures and authentication problems. Users are also …
- Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates
Threat actors deploying Black Basta and CACTUS ransomware are using the same BackConnect module for persistent control over infected hosts, suggesting a …
- CISA issues warning against Qilin ransomware group - Cybersecurity Insiders
CISA clarified that the US government continues to monitor Russian cyber activities, contradicting misinterpretations of Defense Secretary Hegseth’s remarks. …
- VMware Security Flaws Exploited in the Wild—Broadcom Releases Urgent Patches
Broadcom released security updates for VMware ESXi, Workstation, and Fusion products to address three actively exploited vulnerabilities. The vulnerabilities, …
- Japanese cancer hospital confirms breach; Qilin gang claims responsibility – DataBreaches.Net
The Qilin ransomware group claimed responsibility for a February 10th hack of the Utsunomiya Central Clinic in Japan, exposing sensitive health information of …
- New Chinese Zhong Stealer Infects Fintech via Customer Support
A new Chinese malware threat, Zhong Stealer, is targeting fintech companies through customer support chats. The malware uses a scam involving a new, empty …
- How New AI Agents Will Transform Credential Stuffing Attacks
Credential stuffing attacks, fueled by stolen credentials and infostealer infections, are expected to worsen with the advent of Computer-Using Agents (CUAs). …
- Top 10 Free Vulnerability Intelligence Platforms - SOCRadar® Cyber Intelligence Inc.
This article highlights ten free vulnerability intelligence platforms, including NVD, Feedly’s CVE Dashboard, CVE.org, and SOCRadar LABS’ CVE Radar. Each …
- Suspected Iranian Hackers Used Compromised Indian Firm’s Email to Target U.A.E. Aviation Sector
Suspected Iranian hackers, tracked as UNK_CraftyCamel, targeted fewer than five organizations in the United Arab Emirates (U.A.E.) aviation and satellite …
- Over 4,000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers
A mass exploitation campaign targets ISPs in China and the West Coast of the United States, deploying information stealers and cryptocurrency miners. The …
- Open Source Security Risks Continue To Rise
The 2025 Open Source Security and Risk Analysis (OSSRA) report reveals that 86% of commercial codebases contain vulnerabilities, with 81% harboring …
- Google’s March 2025 Android Security Update Fixes Two Actively Exploited Vulnerabilities
Google released its March 2025 Android Security Bulletin, addressing 44 vulnerabilities, including two actively exploited flaws. The vulnerabilities, …
- The New Ransomware Groups Shaking Up 2025 - The Cyber Post
In 2024, ransomware attacks surged, with a 40% increase in active groups and RansomHub emerging as a dominant player. Fog and Lynx are also notable new groups, …
- Judges Are Fed up With Lawyers Using AI That Hallucinate Court Cases
Judges are increasingly frustrated with lawyers using AI tools that generate false citations and case references. Two separate cases highlight this issue, …
- LatAm Orgs Face 40% More Attacks Than Global Average
Latin America faces a significant cyber threat, with organizations experiencing 40% more attacks than the global average. This surge is attributed to the …
- Vulnerability Summary for the Week of February 24, 2025 | CISA
The CISA Vulnerability Bulletin summarizes new vulnerabilities recorded in the past week, categorized by severity based on CVSS scores. The bulletin includes …
- Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites
A new phishing campaign uses the ClickFix technique to deliver Havoc, an open-source C2 framework, via SharePoint sites. The campaign starts with a phishing …
- TikTok: Major investigation launched into platform’s use of children’s data | Malwarebytes
The UK’s Information Commissioner’s Office (ICO) is investigating TikTok’s use of children’s data in its algorithm. The investigation focuses on protecting …
- Nearly 1M records related to personal property were exposed | Security Magazine
Nearly a million records containing personal information, including identification documents and payment confirmations, were exposed in 14 databases associated …
- Mexico resort illnesses: More Canadians come forward
Canadians are reporting illness after staying at the Sandos Playacar resort in Mexico, with symptoms including vomiting and diarrhea. Experts advise caution …
- Darknet (TOR Network) Security Executive Summary – 5-Day Comprehensive Report
Darknet Marketplace & Forum Activity Incident Title: Rising Activity on Russian Market and Abacus Market Date/Time: Feb. 28, 2025 Summary: Russian Market and …
- Darknet markets see BTC inflow drop to $2B as focus shifts to Monero (XMR) | CryptoTvplus - The Leading Blockchain Media Firm
Darknet markets and fraud shops saw a significant shift in cryptocurrency usage in 2024, with Monero (XMR) emerging as the preferred choice over Bitcoin (BTC). …
- New malware exploits fake updates to steal data - CyberGuy
A new malware strain called FrigidStealer is targeting macOS users through fake browser update prompts on compromised websites. The malware steals sensitive …
- Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal | Trend Micro (US)
Black Basta and Cactus ransomware groups are using BackConnect malware to maintain persistent control over compromised machines and exfiltrate sensitive data. …
- Kenya’s Cyber Threat Landscape: The Rising Risks and How to Stay Ahead - SOCRadar® Cyber Intelligence Inc.
Kenya’s digital economy faces a surge in cyber threats, with nearly 70% of analyzed attacks directed specifically at the country. Ransomware, credential theft, …
- Geopolitics, AI, and generational shifts: Three key trends reshaping the future of cyber leadership - Industrial Cyber
Three key trends are reshaping the future of cyber leadership: geopolitical shifts, rapid AI adoption, and generational shifts. Decreased international …
- Exercise Cyber Marvel brings together 1,000 specialists to train on cyber battlefield
Exercise Cyber Marvel, a cyber defense exercise involving 26 nations, concluded with the UK teams ranking in the top three. The exercise, which simulated …
- Zapier breach, caused by a 2FA error, is a lesson for others - Techzine Global
A Zapier repository containing customer data was accessed by an unauthorized user due to a 2FA misconfiguration. The incident highlights the importance of …
- Cyber attacks & data breaches in February 2025
Cyber attacks and data breaches continue to impact organizations globally, with notable incidents including a WhatsApp spyware hack, stolen credentials from …
- Lynch Carpenter Investigates Claims in Zacks Investment
Lynch Carpenter is investigating claims against Zacks Investment Research following a data breach that impacted 12 million individuals. Those who received a …
- Info accessed in Rainbow board data breach ‘deleted and has not been shared’ - Sudbury News
Rainbow District School Board confirms that sensitive data acquired during a recent cyber incident was deleted and not shared. The board also reports that all …
- Pros and Cons of Using AI in Cybersecurity - Cybersecurity Insiders
AI in cybersecurity offers enhanced threat detection, automated incident response, and improved accuracy, but comes with high implementation costs and the risk …
- Ransomware access playbook: What Black Basta’s leaked logs reveal | CSO Online
Black Basta, a prominent ransomware group, utilizes a multi-faceted approach to infiltrate networks, including exploiting publicly known vulnerabilities, …
- Cleveland Municipal Court Remains Closed After Cyber Event
Cleveland Municipal Court remains closed following a cyber event, with internal systems shut down and normal business suspended. This incident follows a …
- Cleveland Municipal Court Remains Closed After Cyber Event
Cleveland Municipal Court remains closed following a cyber event, with internal systems shut down and normal business suspended. This incident follows a …
- The mobile threat landscape in 2024 | Securelist
In 2024, Kaspersky products blocked over 33 million mobile malware, adware, and unwanted software attacks. Banking Trojans, particularly Mamont, saw a …
- Latest Dark Web Findings: Discord Credentials, Orange Customer Records, and Australian Bank Data - SOCRadar® Cyber Intelligence Inc.
This week’s dark web findings include the sale of alleged bank account credentials from major Australian banks, a leaked phishing database targeting Discord …
- Indian Stock Broker Angel One Discloses Data Breach - SecurityWeek
Indian stock brokerage firm Angel One disclosed a data breach impacting client information stored in its AWS account. The company discovered the breach after …
- Massive security gaps discovered in building access systems | heise online
A study by Modat, an IT security consultancy, reveals a global problem with building access systems, or access management systems (AMS). The study identified …
- Qilin ransomware gang claimed responsibility for the Lee Enterprises attack
The Qilin ransomware group claimed responsibility for the cyberattack on Lee Enterprises, a major American media company. The group stole 350GB of data, …
- US Cyber Command reportedly pauses attacks on Russia • The Register
US Cyber Command has reportedly paused cyberattacks on Russia, a move allegedly intended to encourage negotiations regarding the Ukraine invasion. Meanwhile, …
- To Identify Suspect in Idaho Killings, F.B.I. Used Restricted Consumer DNA Data - The New York Times
New revelations indicate the FBI identified Bryan Kohberger as a suspect in the 2022 University of Idaho quadruple homicide by accessing GEDmatch and …
- Beware of Chinese-language Robocall Scams Targeting Canadians
A growing number of Canadians are receiving fraudulent robocalls in Mandarin, falsely claiming that their phone service will be suspended or that they are …
- Researchers Make Scary Discovery About Apple’s Find My Network
Researchers at George Mason University have uncovered a way to exploit Apple’s Find My network, enabling the tracking of nearly any Bluetooth-enabled device by …
- How to Prove to Auditors that You’ve Remediated CVEs in Kubernetes - Security Boulevard
Proving CVE remediation to auditors in Kubernetes environments requires a robust vulnerability management process. This process includes continuous scanning, …
- 4 ways to get your business ready for the agentic AI revolution | ZDNET
AI agents are poised to revolutionize business workflows, with experts predicting they will become the primary users of enterprise digital systems by 2030. To …
- Toronto Zoo says patrons' transaction data leaked on dark web in 2024 cyberattack | CBC News
The Toronto Zoo announced that a cyberattack in January 2024 resulted in the leak of transaction data, including names, addresses, and credit card information, …
- Microsoft disrupted a global cybercrime ring abusing Azure OpenAI Service
Microsoft exposed a global cybercrime ring, Storm-2139, that abused Azure OpenAI Service to create harmful content. The ring, composed of creators, providers, …
- The New Face of Executive Protection: Why Digital and Physical Security Can No Longer Stand Alone - Cybersecurity Insiders
The security landscape for corporate leaders has changed, with threats evolving to exploit the divide between digital and physical security. To counter these …