Tag: cyber
-
Android Users Hit by Malware Disguised as Relaxation Programs
A sophisticated new cyberattack targeting Android devices in South Korea has been uncovered, leveraging Google’s asset-tracking feature, Find Hub, to remotely wipe sensitive user data. Threat actors disguised as psychological counselors and North Korean human rights activists have distributed malware masquerading as stress-relief programs, marking a significant escalation in state-sponsored attacks linked to the notorious…
-
MAD-CAT “Meow” Tool Sparks Real-World Data Corruption Attacks
The infamous Meow attack, which devastated unsecured databases since 2020, has resurfaced with renewed force through MAD-CAT (Meow Attack Data Corruption Automation Tool). This custom-built adversarial simulation tool demonstrates how easily attackers can corrupt data across multiple database platforms simultaneously, highlighting a critical vulnerability that continues to plague modern infrastructure. The Evolution of Meow While Meow attack…
-
âš¡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More
Cyber threats didn’t slow down last week”, and attackers are getting smarter. We’re seeing malware hidden in virtual machines, side-channel leaks exposing AI chats, and spyware quietly targeting Android devices in the wild.But that’s just the surface. From sleeper logic bombs to a fresh alliance between major threat groups, this week’s roundup highlights a clear…
-
âš¡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More
Cyber threats didn’t slow down last week”, and attackers are getting smarter. We’re seeing malware hidden in virtual machines, side-channel leaks exposing AI chats, and spyware quietly targeting Android devices in the wild.But that’s just the surface. From sleeper logic bombs to a fresh alliance between major threat groups, this week’s roundup highlights a clear…
-
âš¡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More
Cyber threats didn’t slow down last week”, and attackers are getting smarter. We’re seeing malware hidden in virtual machines, side-channel leaks exposing AI chats, and spyware quietly targeting Android devices in the wild.But that’s just the surface. From sleeper logic bombs to a fresh alliance between major threat groups, this week’s roundup highlights a clear…
-
Backup-Informationen direkt im Security-Operations-Center
Veeam Software hat die Einführung der neuen Veeam-App für Microsoft-Sentinel bekannt gegeben. Die Lösung bietet eine fortschrittliche Integration mit der Veeam-Data-Platform und befähigt Unternehmen, Cyber-Bedrohungen und Backup-Anomalien zu erkennen, zu untersuchen und umgehend auf diese zu reagieren. Auf diese Weise erreichen Unternehmen mit Veeam Datensicherheit und operative Effizienz in Security-Operations-Centern (SOC). Da Cyber-Angriffe zunehmend auf…
-
Backup-Informationen direkt im Security-Operations-Center
Veeam Software hat die Einführung der neuen Veeam-App für Microsoft-Sentinel bekannt gegeben. Die Lösung bietet eine fortschrittliche Integration mit der Veeam-Data-Platform und befähigt Unternehmen, Cyber-Bedrohungen und Backup-Anomalien zu erkennen, zu untersuchen und umgehend auf diese zu reagieren. Auf diese Weise erreichen Unternehmen mit Veeam Datensicherheit und operative Effizienz in Security-Operations-Centern (SOC). Da Cyber-Angriffe zunehmend auf…
-
NuGet Supply-Chain Exploit Uses Timed Destructive Payloads Against ICS
A sophisticated supply chain attack has compromised critical industrial control systems through nine malicious NuGet packages designed to inject time-delayed destructive payloads into database operations and manufacturing environments. Socket’s Threat Research Team identified these weapons of code, published under the alias shanhai666 between 2023 and 2024, which have collectively accumulated 9,488 downloads before being reported…
-
MAD-CAT “Meow” Tool Sparks Real-World Data Corruption Attacks
The infamous Meow attack, which devastated unsecured databases since 2020, has resurfaced with renewed force through MAD-CAT (Meow Attack Data Corruption Automation Tool). This custom-built adversarial simulation tool demonstrates how easily attackers can corrupt data across multiple database platforms simultaneously, highlighting a critical vulnerability that continues to plague modern infrastructure. The Evolution of Meow While Meow attack…
-
NuGet Supply-Chain Exploit Uses Timed Destructive Payloads Against ICS
A sophisticated supply chain attack has compromised critical industrial control systems through nine malicious NuGet packages designed to inject time-delayed destructive payloads into database operations and manufacturing environments. Socket’s Threat Research Team identified these weapons of code, published under the alias shanhai666 between 2023 and 2024, which have collectively accumulated 9,488 downloads before being reported…
-
Popular npm Library Used in AI and NLP Projects Exposes Systems to RCE
A critical remote code execution vulnerability has been discovered in the widely used JavaScript library expr-eval, affecting thousands of projects that rely on it for mathematical expression evaluation and natural language processing. The vulnerability, tracked as CVE-2025-12735, poses significant risks to server environments and to AI-powered applications that process user input. Identifier Value CVE ID…
-
Cyber information sharing law would get extension under shutdown deal bill
The Cybersecurity and Information Sharing Act of 2015 would go from expired to extended through Jan. 30. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-2015-shutdown-extension-continuing-resolution/
-
CISA’s expiration leaves a dangerous void in US cyber collaboration
Each day without reauthorization erodes the trust, coordination, and shared visibility that have underpinned the resilience of America’s most critical systems. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-information-sharing-lack-of-info-dangerous-op-ed/
-
Threat Actors Attacking Outlook and Google Bypassing Traditional Email Defenses
Threat actors are systematically compromising Outlook and Google mailboxes with alarming success, leveraging sophisticated techniques that sidestep traditional email defenses entirely. According to VIPRE’s Q3 2025 Email Threat Report, over 90% of phishing attacks specifically target these two dominant email ecosystems, representing a calculated strategic shift by attackers seeking to maximize impact while minimizing operational…
-
Cyber information sharing law would get extension under shutdown deal bill
The Cybersecurity and Information Sharing Act of 2015 would go from expired to extended through Jan. 30. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-2015-shutdown-extension-continuing-resolution/
-
Cyber information sharing law would get extension under shutdown deal bill
The Cybersecurity and Information Sharing Act of 2015 would go from expired to extended through Jan. 30. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-2015-shutdown-extension-continuing-resolution/
-
CISA’s expiration leaves a dangerous void in US cyber collaboration
Each day without reauthorization erodes the trust, coordination, and shared visibility that have underpinned the resilience of America’s most critical systems. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-information-sharing-lack-of-info-dangerous-op-ed/
-
HackGPT Launches as AI-Driven Penetration Testing Suite Using GPT-4 and Other Models
HackGPT Enterprise has officially launched as a production-ready, cloud-native AI-powered penetration testing platform designed specifically for enterprise security teams. Created by Yashab Alam, Founder and CEO of ZehraSec, the platform represents a significant advancement in automated security assessments by integrating artificial intelligence with traditional penetration testing methodologies. The platform combines OpenAI’s GPT-4 with local language models…
-
HackGPT Launches as AI-Driven Penetration Testing Suite Using GPT-4 and Other Models
HackGPT Enterprise has officially launched as a production-ready, cloud-native AI-powered penetration testing platform designed specifically for enterprise security teams. Created by Yashab Alam, Founder and CEO of ZehraSec, the platform represents a significant advancement in automated security assessments by integrating artificial intelligence with traditional penetration testing methodologies. The platform combines OpenAI’s GPT-4 with local language models…
-
NCSC Set to Retire Web Check and Mail Check Tools
The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/
-
NCSC Set to Retire Web Check and Mail Check Tools
The UK’s National Cyber Security Centre has urged users of its Web Check and Mail Check services to find alternatives First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ncsc-retire-web-check-mail-check/
-
Hack halts Dutch broadcaster, forcing radio hosts back to LPs
A Dutch TV and radio broadcaster has found itself at the mercy of cybercriminals after suffering a cyber attack, and leaving it scrambling to find ways to play music to its listeners. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/hack-halts-dutch-broadcaster-forcing-radio-hosts-back-to-lps
-
Ransomware Operators Exploit RMM Tools to Deploy Medusa and DragonForce
Tags: attack, breach, cyber, cybersecurity, data-breach, exploit, group, infrastructure, monitoring, ransomware, service, software, supply-chain, tool, vulnerabilityCybersecurity researchers at Zensec have exposed a sophisticated supply-chain attack campaign that weaponised trusted Remote Monitoring and Management (RMM) infrastructure to deploy ransomware across multiple UK organisations throughout early 2025. The investigation reveals how two prominent ransomware-as-a-service groups exploited critical vulnerabilities in SimpleHelp RMM software to breach downstream customers through their managed service providers. The…
-
Ransomware Operators Exploit RMM Tools to Deploy Medusa and DragonForce
Tags: attack, breach, cyber, cybersecurity, data-breach, exploit, group, infrastructure, monitoring, ransomware, service, software, supply-chain, tool, vulnerabilityCybersecurity researchers at Zensec have exposed a sophisticated supply-chain attack campaign that weaponised trusted Remote Monitoring and Management (RMM) infrastructure to deploy ransomware across multiple UK organisations throughout early 2025. The investigation reveals how two prominent ransomware-as-a-service groups exploited critical vulnerabilities in SimpleHelp RMM software to breach downstream customers through their managed service providers. The…
-
Europe Hosts First In-Orbit Satellite Cybersecurity Competition
D-Orbit and the ethical hacking collective mhackeroni have concluded CTRLSpace CTF, the first in-orbit satellite cybersecurity competition ever held in Europe. The event, organized with the support of the European Space Agency’s (ESA) Security Cyber Centre of Excellence and ESA’s Security Office, marked a major step toward strengthening Europe’s space defence capabilities. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/europe-hosts-first-in-orbit-satellite-ctf/
-
Europe Hosts First In-Orbit Satellite Cybersecurity Competition
D-Orbit and the ethical hacking collective mhackeroni have concluded CTRLSpace CTF, the first in-orbit satellite cybersecurity competition ever held in Europe. The event, organized with the support of the European Space Agency’s (ESA) Security Cyber Centre of Excellence and ESA’s Security Office, marked a major step toward strengthening Europe’s space defence capabilities. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/europe-hosts-first-in-orbit-satellite-ctf/
-
Hackers Exploit Websites to Inject Malicious Links for SEO Manipulation
A surge in online casino spam is reshaping the dark corners of the internet, with threat actors increasingly hacking websites to embed malicious SEO-boosting links. This evolving tactic aims to promote online gambling sites by hijacking the authority of legitimate websites putting site owners and unsuspecting users alike at risk. Historically, blackhat SEO spam campaigns…
-
Hackers Exploit Websites to Inject Malicious Links for SEO Manipulation
A surge in online casino spam is reshaping the dark corners of the internet, with threat actors increasingly hacking websites to embed malicious SEO-boosting links. This evolving tactic aims to promote online gambling sites by hijacking the authority of legitimate websites putting site owners and unsuspecting users alike at risk. Historically, blackhat SEO spam campaigns…
-
CISOs must prove the business value of cyber, the right metrics can help
Cybersecurity as a business function: “The challenge has been that security is put in the wrong organizational structure, with the CISO reporting to the CIO or CTO or chief digital officer,” Oberlaender says. “Security is not foremost a technology problem. Maybe ten or twenty percent is technology. But the rest is people, process and the…
-
CISOs must prove the business value of cyber, the right metrics can help
Cybersecurity as a business function: “The challenge has been that security is put in the wrong organizational structure, with the CISO reporting to the CIO or CTO or chief digital officer,” Oberlaender says. “Security is not foremost a technology problem. Maybe ten or twenty percent is technology. But the rest is people, process and the…