Collecting Cyber-News from over 60 sources

Tag: control

AI powered autonomous ransomware campaigns are coming, say experts

Sep 9, 2025 5:08 AM

Tags: ai, attack, awareness, ciso, control, framework, Internet, malware, ransomware, technology, tool

CSO, “it is entirely possible that criminals beat them to it. I have already seen AIs that can do scans, write malware, identify which resources are most valuable, [and more]. It is no surprise that someone found a way to have an AI automate such functions.”Grossman advised CISOs to continue implementing security controls under frameworks…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
GhostAction campaign steals 3325 secrets in GitHub supply chain attack

Sep 8, 2025 3:08 PM

Tags: ai, attack, control, credentials, data-breach, detection, exploit, github, malicious, network, pypi, risk, supply-chain, threat

Threat contained within days: GitGuardian’s security team responded quickly after detection, and the FastUUID package was set to read-only by PyPI administrators within minutes. The malicious commit was reverted shortly afterward. GitGuardian notified maintainers of the affected repositories, successfully contacting 573 projects, while also alerting GitHub, npm, and PyPI security teams to monitor for abuse.Although…
GhostAction campaign steals 3325 secrets in GitHub supply chain attack

Sep 8, 2025 3:08 PM

Tags: ai, attack, control, credentials, data-breach, detection, exploit, github, malicious, network, pypi, risk, supply-chain, threat

Threat contained within days: GitGuardian’s security team responded quickly after detection, and the FastUUID package was set to read-only by PyPI administrators within minutes. The malicious commit was reverted shortly afterward. GitGuardian notified maintainers of the affected repositories, successfully contacting 573 projects, while also alerting GitHub, npm, and PyPI security teams to monitor for abuse.Although…
10 security leadership career-killers, and how to avoid them

Sep 8, 2025 10:08 AM

Tags: ai, breach, business, ciso, control, cybersecurity, incident response, intelligence, jobs, resilience, risk, security-incident, service, skills, strategy, technology, threat, tool

2. Being just a technologist rather than a business executive, too: To align security with enterprise strategy, security professionals need to be business leaders, too, says Ryan Knisley, former CISO of The Walt Disney Co. and Costco Wholesale.That remains a struggle for many CISOs, who still tend to ascend through the security organization and not…
6 Best Practices for CMMC Physical Security Control

Sep 7, 2025 6:20 AM

Tags: best-practice, business, control, cyber, cybersecurity, threat

The first C in CMMC stands for cybersecurity, so it makes sense that the vast majority of content and information about it (both here and elsewhere online) is focused on the cyber aspect. Digital security makes up the bulk of the certification, and it’s by far the biggest threat vector in a modern business space….…
Critical SAP Vulnerability CVE-2025-42957 Actively Exploited by Hackers

Sep 6, 2025 4:20 PM

Tags: control, cve, exploit, hacker, sap, vulnerability

Urgent security alert for SAP users! A critical vulnerability (CVE-2025-42957) allows attackers to take full control of your… First seen on hackread.com Jump to article: hackread.com/hackers-exploit-cve-2025-42957-sap-vulnerability/
MeetC2 A serverless C2 framework that leverages Google Calendar APIs as a communication channel

Sep 6, 2025 12:20 PM

Tags: api, blueteam, cloud, control, detection, framework, google, tactics, tool

MeetC2 is a PoC C2 tool using Google Calendar to mimic cloud abuse, helping teams test detection, logging, and response. Background:Modern adversaries increasingly hide command-and-control (C2) traffic inside cloud services. We built this proof of concept (PoC) to study and demonstrate those techniques in a controlled way, emulating those tactics so red and blue teams…
The New Edge: Tunnel-Free, AI and Quantum-Ready

Sep 5, 2025 8:20 PM

Tags: access, ai, attack, automation, china, cloud, compliance, computing, control, cryptography, cyber, cybersecurity, data, defense, endpoint, firewall, framework, GDPR, healthcare, infrastructure, iot, least-privilege, malicious, mobile, network, office, resilience, risk, strategy, technology, threat, tool, unauthorized, vpn, vulnerability, zero-trust
Cybersecurity Snapshot: Expert Advice for Securing Critical Infrastructure’s OT and Industrial Control Systems, IoT Devices and Network Infrastructure

Sep 5, 2025 6:20 PM

Tags: access, advisory, apt, attack, authentication, breach, china, cisa, cisco, cloud, compliance, computer, computing, control, credentials, cryptography, cve, cyber, cybersecurity, data, defense, detection, espionage, exploit, firmware, framework, google, government, guide, hacker, Hardware, incident response, infrastructure, international, Internet, iot, login, mfa, military, mitigation, monitoring, network, nist, organized, password, phishing, ransomware, regulation, risk, russia, sans, service, software, technology, theft, threat, tool, update, vulnerability, zero-trust

Destructive cyber attacks against critical infrastructure have unfortunately become increasingly frequent. Just last week, multinational government agencies blared the alarm about a global cyber espionage campaign targeting critical infrastructure networks. With this type of cyber threat in the spotlight, we’re rounding up recent cyber advice for securing critical infrastructure. In case you missed it, here…
You should be aware of these latest social engineering trends

Sep 5, 2025 4:20 PM

Tags: access, attack, authentication, awareness, breach, control, cyber, cybercrime, cybersecurity, data, email, exploit, group, hacker, login, mfa, microsoft, network, phone, radius, risk, service, social-engineering, strategy, tool, vulnerability, windows

It’s raining (phishing) emails: Unlike other attacks in the cybersecurity landscape, social engineering does not focus on exploiting vulnerabilities in code or network architecture. Instead, it exploits human behavior, which is often the weakest link in the security chain. And stress on an already busy day is an extremely effective trigger.The following examples show how…
You should be aware of these latest social engineering trends

Sep 5, 2025 4:20 PM

Tags: access, attack, authentication, awareness, breach, control, cyber, cybercrime, cybersecurity, data, email, exploit, group, hacker, login, mfa, microsoft, network, phone, radius, risk, service, social-engineering, strategy, tool, vulnerability, windows

It’s raining (phishing) emails: Unlike other attacks in the cybersecurity landscape, social engineering does not focus on exploiting vulnerabilities in code or network architecture. Instead, it exploits human behavior, which is often the weakest link in the security chain. And stress on an already busy day is an extremely effective trigger.The following examples show how…
Critical SAP S/4HANA Vulnerability Actively Exploited, Allowing Full System Takeover

Sep 5, 2025 2:20 PM

Tags: control, cve, cvss, cyber, exploit, flaw, injection, sap, vulnerability

A critical security flaw in SAP S/4HANA, tracked as CVE-2025-42957, is being actively exploited by attackers, according to research from SecurityBridge. The vulnerability, which carries a CVSS score of 9.9 out of 10, allows a low-privileged user to execute code injection and gain full control of an SAP system. Organizations running SAP S/4HANA on-premise or…
Hackers Exploit Google Calendar API with Serverless MeetC2 Framework

Sep 5, 2025 10:20 AM

Tags: api, blueteam, cloud, communications, control, cyber, detection, exploit, framework, google, hacker, malicious, PurpleTeam, saas

A novel serverless command-and-control (C2) technique that abuses Google Calendar APIs to obscure malicious traffic inside trusted cloud services. Dubbed MeetC2, this lightweight, cross-platform proof-of-concept demonstrates how adversaries can seamlessly blend C2 communications into everyday SaaS usage, presenting fresh detection, telemetry, and response challenges for red and blue teams alike. In a recent internal purple-team…
How to reclaim control over your online shopping data

Sep 5, 2025 8:20 AM

Tags: control, data, risk

Online shopping is convenient, saves time, and everything is just a click away. But how often do we stop to think about what happens to the data we leave behind, or the risks … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/05/privacy-online-shopping-data-risks/
How to reclaim control over your online shopping data

Sep 5, 2025 8:20 AM

Tags: control, data, risk

Online shopping is convenient, saves time, and everything is just a click away. But how often do we stop to think about what happens to the data we leave behind, or the risks … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/05/privacy-online-shopping-data-risks/
Windows Heap Buffer Overflow Vulnerability Allows Attackers to Gain Elevated Privileges

Sep 5, 2025 8:20 AM

Tags: control, cyber, flaw, microsoft, service, vulnerability, windows

A critical security vulnerability has been discovered in Microsoft Windows systems that allows attackers to escalate their privileges and potentially gain complete control over affected machines. The vulnerability, designatedCVE-2025-53149, affects the Kernel Streaming WOW Thunk Service Driver and was patched by Microsoft in August 2025. Vulnerability Overview The security flaw is a heap-based buffer overflow located in…
Windows Heap Buffer Overflow Vulnerability Allows Attackers to Gain Elevated Privileges

Sep 5, 2025 8:20 AM

Tags: control, cyber, flaw, microsoft, service, vulnerability, windows

A critical security vulnerability has been discovered in Microsoft Windows systems that allows attackers to escalate their privileges and potentially gain complete control over affected machines. The vulnerability, designatedCVE-2025-53149, affects the Kernel Streaming WOW Thunk Service Driver and was patched by Microsoft in August 2025. Vulnerability Overview The security flaw is a heap-based buffer overflow located in…
CimTrak Enabling ComplyConnect Continuous Compliance for Zscaler

Sep 5, 2025 5:21 AM

Tags: compliance, control, monitoring, threat, zero-trust
How Financial Services Can Use Agentic Identity to Stop Fraud and Streamline Loan Approvals

Sep 4, 2025 11:20 PM

Tags: ai, compliance, control, finance, fraud, identity, risk, service

In financial services, every transaction is built on trust. When an AI agent acts on behalf of a customer, checking credit scores, verifying KYC documents, or submitting a loan application, identity is the control plane. Without it, the system collapses into risk, fraud, and compliance failures. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/how-financial-services-can-use-agentic-identity-to-stop-fraud-and-streamline-loan-approvals/
Sandboxed to Compromised: New Research Exposes Credential Exfiltration Paths in AWS Code Interpreters

Sep 4, 2025 10:20 PM

Tags: access, control, credentials

In my first article on Bedrock AgentCore Code Interpreters, I demonstrated that custom code interpreters can be coerced into performing AWS control plane actions by non-agentic identities. This presented a novel path to privilege escalation, whereby any user with access to custom code interpreters could effectively use any privilege assigned to those code interpreters. The……
Avnet unlocks vendor lock-in and reinvents security data management

Sep 4, 2025 5:20 PM

Tags: ai, attack, business, cio, ciso, cloud, compliance, conference, control, cybersecurity, data, LLM, microsoft, PCI, siem, strategy, technology, tool

Own and manage its data directly rather than leaving it siloed in vendor systems.Start large-scale extract, transform, and load (ETL) operations, allowing engineers to run analytics and AI-based use cases like retrieval-augmented generation (RAG).Reduce costs associated with rigid SIEM licensing and storage tiers.Improve compliance with new PCI DSS v4.0 requirements for automated log review in…
Microsoft says recent Windows updates cause app install issues

Sep 4, 2025 2:20 PM

Tags: control, microsoft, update, windows

Microsoft says the August 2025 security updates are triggering unexpected User Account Control (UAC) prompts and app installation issues for non-admin users across all supported Windows versions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-recent-windows-updates-cause-app-install-issues-due-to-unexpected-admin-UAC-prompts/
Severe Hikvision HikCentral product flaws: What You Need to Know

Sep 4, 2025 1:19 PM

Tags: access, control, flaw, software, vulnerability

Hikvision HikCentral flaw allows unauthenticated users to gain admin rights, risking full control over configs, logs, and critical monitoring. Security researchers warn of three vulnerabilities impacting Hikvision HikCentral, which is a centralized management software used across many industries for video surveillance, access control, and integrated security operations. The three vulnerabilities are: One of them was…
Microsoft Confirms UAC Bug Disrupts App Installation on Windows 10 11

Sep 4, 2025 1:19 PM

Tags: control, cyber, microsoft, update, windows

Microsoft has officially acknowledged a significant User Account Control (UAC) bug that is causing widespread installation issues across Windows 10 and Windows 11 systems. The problem stems from a security update released in August 2025 and affects millions of users attempting to install or repair applications. The Core Issue The bug emerged following Microsoft’sAugust 2025…
Chinese APT Groups Exploit Router Flaws to Breach Enterprises

Sep 4, 2025 10:20 AM

Tags: apt, breach, china, control, cyber, espionage, exploit, flaw, government, group, malicious, military, network, router, threat

Chinese state-sponsored Advanced Persistent Threat (APT) groups have escalated their cyber espionage campaigns, systematically targeting global telecommunications, government, and military networks through sophisticated router exploitation techniques since 2021. Since at least 2021, Chinese state-sponsored cyber actors have been conducting extensive, stealthy operations to infiltrate and control key network devices across critical sectors worldwide. These malicious…
New ‘NotDoor’ Malware Targets Outlook Users for Data Theft and System Compromise

Sep 4, 2025 8:20 AM

Tags: backdoor, control, cyber, data, espionage, group, hacker, malware, microsoft, russia, theft, threat

Russian state-sponsored hackers have developed a sophisticated new backdoor malware called >>NotDoor
Indirect Prompt Injection Attacks Against LLM Assistants

Sep 3, 2025 3:20 PM

Tags: attack, automation, control, data, disinformation, email, framework, google, injection, LLM, malicious, mitigation, mobile, phishing, risk, risk-assessment, threat, tool

Really good research on practical attacks against LLM agents. “Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous” Abstract: The growing integration of LLMs into applications has introduced new security risks, notably known as Promptware”, maliciously engineered prompts designed to manipulate LLMs to compromise the CIA triad of…