Tag: cyber
-
Rhadamanthys Stealer Offered on Dark Web for $299$499
A new offering named Rhadamanthys, a sophisticated information stealer, has surfaced for sale on underground marketplaces, with subscription packages starting at $299 and reaching up to $499 per month. Marked by its polished branding and tiered pricing structure, the malware positions itself as a professional-grade service rather than a casual tool for novice cybercriminals. Since…
-
Oracle Confirms Hackers Target E-Business Suite Data in Extortion Campaigns
Oracle has confirmed that a group of hackers stole data from its E-Business Suite (EBS) applications and is using the information in extortion campaigns. The company warns that these attackers exploited vulnerabilities already fixed in the July 2025 Critical Patch Update (CPU). Oracle strongly urges all customers to apply the latest CPU immediately to defend…
-
Oracle Confirms Hackers Target E-Business Suite Data in Extortion Campaigns
Oracle has confirmed that a group of hackers stole data from its E-Business Suite (EBS) applications and is using the information in extortion campaigns. The company warns that these attackers exploited vulnerabilities already fixed in the July 2025 Critical Patch Update (CPU). Oracle strongly urges all customers to apply the latest CPU immediately to defend…
-
Rhadamanthys Stealer Offered on Dark Web for $299$499
A new offering named Rhadamanthys, a sophisticated information stealer, has surfaced for sale on underground marketplaces, with subscription packages starting at $299 and reaching up to $499 per month. Marked by its polished branding and tiered pricing structure, the malware positions itself as a professional-grade service rather than a casual tool for novice cybercriminals. Since…
-
Signal Introduces Hybrid Post-Quantum Ratchet to Strengthen Security
Signal, the popular end-to-end encrypted messaging platform, has announced a groundbreaking advancement in cryptographic security with the introduction of the Sparse Post Quantum Ratchet (SPQR). This innovative protocol represents a significant leap forward in protecting user communications against emerging quantum computing threats while maintaining all existing security guarantees. Revolutionary Triple Ratchet Protocol Debuts The new…
-
Hundreds of Free VPN Apps Expose Android and iOS Users’ Personal Data
Virtual Private Networks (VPNs) are trusted by millions to protect privacy, secure communications, and enable remote access on their mobile devices. But what if the very apps designed to safeguard your data are riddled with dangerous security flaws that expose the exact information they promise to protect? A comprehensive security and privacy analysis by Zimperium…
-
Signal Introduces Hybrid Post-Quantum Ratchet to Strengthen Security
Signal, the popular end-to-end encrypted messaging platform, has announced a groundbreaking advancement in cryptographic security with the introduction of the Sparse Post Quantum Ratchet (SPQR). This innovative protocol represents a significant leap forward in protecting user communications against emerging quantum computing threats while maintaining all existing security guarantees. Revolutionary Triple Ratchet Protocol Debuts The new…
-
Microsoft Defender Bug Sparks Numerous False BIOS Security Alerts
Microsoft Defender for Endpoint users, particularly those with Dell devices, are experiencing a widespread issue with false Basic Input/Output System (BIOS) security alerts due to a critical software bug. The problem, which surfaced on October 2, 2025, has prompted Microsoft to issue a service degradation notice affecting multiple organizations worldwide. Widespread False Alert Campaign The…
-
PoC Released for VMware Workstation GuestHost Escape Vulnerability
NCC Group detailed a VMware Workstation guest-to-host escape achievable from a compromised VM via a logic flaw in virtual device handling that permits memory corruption and controlled code execution on the host process. The write-up shows a practical exploitation path from guest userland to host compromise, validating real-world risk. The attack requires execution inside a…
-
Passkeys rise, but scams still hit hard in 2025
Americans are dealing with a growing wave of digital scams, and many are losing money in the process. According to the fourth annual Consumer Cyber Readiness Report, nearly … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/03/digital-scam-trends-2025/
-
Over 40% of schools have already experienced AI-related cyber incidents
Tags: access, ai, cyber, cybersecurity, incident, intelligence, passkey, password, risk, software, zero-trustKeeper Security, the provider of zero-trust and zero-knowledge Privileged Access Management (PAM) software protecting passwords and passkeys, privileged accounts, secrets and remote connections, today released a new research report named AI in Schools: Balancing Adoption with Risk. The study reveals how Artificial Intelligence (AI) is reshaping education and the growing cybersecurity risks to students, The…
-
New Obex Tools Blocks Runtime Loading of EDR Dynamic Libraries
Obex, a newly released proof-of-concept utility by security researcher dis0rder0x00, demonstrates a simple but effective user-mode method to stop unwanted security and monitoring modules from loading into Windows processes. The tool launches a target process under debugger control and enforces a configurable DLL blocklist, preventing both startup and runtime loads of designated libraries. A demonstration…
-
Passkeys rise, but scams still hit hard in 2025
Americans are dealing with a growing wave of digital scams, and many are losing money in the process. According to the fourth annual Consumer Cyber Readiness Report, nearly … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/03/digital-scam-trends-2025/
-
Cybersecurity at Risk: CISA 2015 Lapses Amid Government Shutdown
The expiration of CISA 2015 weakens cyber defenses, limiting info-sharing protections and raising risks for CISOs and security leaders. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/cisa-2015-lapses-government-shutdown/
-
Family group chats: Your (very last) line of cyber defense
Amy gives an homage to parents in family group chats everywhere who want their children to stay safe in this wild world. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/family-group-chats-your-very-last-line-of-cyber-defense/
-
There Are More CVEs, But Cyber Insurers Aren’t Altering Policies
With nearly 47,000 CVEs expected by the end of the year, organizations must balance comprehensive vulnerability management with strategic cyber insurance policy selection to effectively navigate this rapidly evolving threat landscape. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/more-cves-cyber-insurers-arent-altering-policies
-
The Buy Vs. Build Dilemma: Pitfalls of the DIY Approach to Exposure Management
Tags: access, application-security, attack, business, cloud, computing, cyber, data, defense, detection, endpoint, group, identity, infrastructure, intelligence, monitoring, risk, skills, strategy, threat, tool, update, vulnerability, vulnerability-managementSome security teams are taking a do-it-yourself approach to exposure management, according to a recent study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable. But are they really ready for the hidden costs and challenges that come with a homegrown system? Key takeaways Organizations are managing as many as 25…
-
For One NFL Team, Tackling Cyber Threats Is Basic Defense
The NFL’s cyberattack surface is expanding at an unprecedented rate. To find out more, we spoke with a cyber defense coordinator from the Cleveland Browns. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/for-one-nfl-team-tackling-cyber-threats-basic-defense
-
Extortion Emails Sent to Executives by Self-Proclaimed Clop Gang Member
The initial investigation shows early signs of links with the FIN11 and Clop cyber extortion groups First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/extortion-emails-executives-clop/
-
Confucius Shifts from Document Stealers to Python Backdoors
The Confucius cyber-espionage group has shifted its tactics from document-focused stealers to Python-based backdoors like AnonDoor First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/confucius-shifts-doc-stealers/
-
Building a Full-Lifecycle Defense System for Large Language Model Security
Santa Clara, Calif. Oct 2, 2025 Recently, NSFOCUS held the AI New Product Launch in Beijing, comprehensively showcasing the company’s latest technological achievements and practical experience in AI security. With large language model security protection as the core topic, the launch systematically introduced NSFOCUS’s concept and practices in strategy planning, scenario-based protection, technical products, and…The…
-
Expired US Cyber Law Puts Data Sharing and Threat Response at Risk
Experts argued that the lapse of the Cybersecurity Information Sharing Act could have far-reaching consequences in US national cyber defenses First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/expired-cisa-2015-us-intelligence/
-
Malicious ZIP Files Use Windows Shortcuts to Drop Malware
Cybersecurity firm Blackpoint Cyber reveals a new spear phishing campaign targeting executives. Learn how attackers use fraudulent document ZIPs containing malicious shortcut files, leveraging ‘living off the land’ tactics, and a unique Anti-Virus check to deliver a custom payload First seen on hackread.com Jump to article: hackread.com/malicious-zip-files-windows-shortcuts-malware/
-
Trust in Your Cyber Defense with Advanced PAM
Can Effective Management of Non-Human Identities Revolutionize Cybersecurity? Where digital constantly evolving, the management of Non-Human Identities (NHIs) has emerged as a pivotal strategy for ensuring robust cybersecurity. With organizations increasingly rely on automated systems and machine learning, NHIs, or machine identities, have become a critical component of cybersecurity infrastructure. But how exactly do these……
-
Empower Your SOC Teams with Efficient NHIDR
How Can Non-Human Identities Revolutionize Cybersecurity? Where cyber threats increasingly target machine identities, how can organizations adapt their security strategies to manage these Non-Human Identities (NHIs) effectively? NHIs serve as the backbone for robust cybersecurity, enhancing the security posture of diverse sectors like financial services, healthcare, travel, and DevOps. For organizations utilizing cloud environments, effective……
-
TOTOLINK X6000R Routers Hit by Three Vulnerabilities Allowing Remote Code Execution
Three critical security flaws were discovered in firmware version V9.4.0cu.1360_B20241207 of the TOTOLINK X6000R router released on March 28, 2025. These vulnerabilities range from argument injection and command injection to a security bypass that can lead to remote code execution. Attackers can crash devices, corrupt system files, and execute arbitrary commands without authentication. Users must…
-
Termix Docker Image Leaking SSH Credentials (CVE-2025-59951)
A critical vulnerability in the official Termix Docker image puts users at risk of exposing sensitive SSH credentials. The flaw allows anyone with network access to retrieve stored host addresses, usernames, and passwords without logging in. How the Vulnerability Works Termix provides a Docker image that runs a Node.js backend behind an Nginx reverse proxy.…
-
Chrome Security Update Addressing 21 Vulnerabilities
The Chrome team has releasedChrome 141.0.7390.54/55to the stable channel for Windows, Mac, and Linux, rolling out over the coming days and weeks. This update delivers critical security fixes, including 21 distinct vulnerabilities that span high, medium, and low severity. External researchers contributed to several of these fixes, earning rewards up to $25,000. Users are strongly…
-
Microsoft Outlook Bug on Windows Devices Results in Repeated Email Crashes
Microsoft is currently investigating a significant bug affecting classic Outlook for Windows that prevents users from accessing their email accounts. The issue manifests as a persistent error message stating >>Cannot start Microsoft Outlook. Cannot open the Outlook window. The set of folders cannot be opened. The attempt to log on to Microsoft Exchange has failed.