Tag: cyber
-
Google Drive Desktop for Windows Flaw Lets Users Gain Full Access to Others’ Drives
Millions of people and businesses trust Google Drive every day to store important files like contracts, reports, photos, and research papers. The desktop app for Windows promises secure and seamless syncing of files between local folders and the cloud. Yet a serious flaw in Google Drive Desktop for Windows breaks these promises. Any user on…
-
Ukraine’s ousted cyber chief posts bail in corruption case
Under the bail conditions, Illia Vitiuk must appear when summoned, report any change of residence, avoid contact with certain individuals and surrender his foreign passports to investigators. First seen on therecord.media Jump to article: therecord.media/vitiuk-bail-anti-corruption-case
-
Acting federal cyber chief outlines his three priorities for the next year
Tags: cyberThe post Acting federal cyber chief outlines his three priorities for the next year appeared first on CyberScoop. First seen on fedscoop.com Jump to article: fedscoop.com/acting-federal-cyber-chief-outlines-three-priorities-for-next-year-ciso/
-
Apple CarPlay Vulnerability Allows Remote Code Execution to Gain Root Access
A newly disclosed vulnerability in Apple’s CarPlay ecosystem enablesremote code execution with root privileges, posing a serious risk to connected vehicles. Discovered by the Oligo Security Research team and tracked asCVE-2025-24132, the flaw resides within the AirPlay protocol implementation used by CarPlay systems. CVE ID Affected Components Versions Impacted CVE-2025-24132 AirPlay Audio SDK < 2.7.1…
-
Critical infrastructure security tech needs to be as good as our smartphones, top NSC cyber official says
Alexei Bulazel said that even as the Trump administration is aiming to ratchet up cyber offense, there’s still a vital role for defense. First seen on cyberscoop.com Jump to article: cyberscoop.com/alexei-bulazel-critical-infrastructure-security-tech-needs-to-be-as-good-as-our-smartphones/
-
Lazarus Hackers Abuse Git Symlink Vulnerability in Stealthy Phishing Campaign
KuCoin’s security team has uncovered a new phishing campaign orchestrated by the Lazarus Group (APT38), the notorious state-sponsored collective renowned for financially motivated cyberespionage. Armed with government resources and a history of high-profile breaches, Lazarus continues to evolve its tactics to target cryptocurrency and financial institutions worldwide. Over the last decade, Lazarus has homed in…
-
Maturing the cyber threat intelligence program
The Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) helps organizations assess and improve their threat intelligence programs by outlining 11 key areas and specific missions where CTI can support decision-making. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/maturing-the-cyber-threat-intelligence-program/
-
Lazarus Hackers Abuse Git Symlink Vulnerability in Stealthy Phishing Campaign
KuCoin’s security team has uncovered a new phishing campaign orchestrated by the Lazarus Group (APT38), the notorious state-sponsored collective renowned for financially motivated cyberespionage. Armed with government resources and a history of high-profile breaches, Lazarus continues to evolve its tactics to target cryptocurrency and financial institutions worldwide. Over the last decade, Lazarus has homed in…
-
Splunk.conf: Splunk urges users to eat their ‘cyber veggies’
The dawn of AI-enabled cyber attacks makes it even more important for defenders to bring their A-game, particularly when it comes to getting the basics right First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366630445/Splunkconf-Splunk-urges-users-to-eat-their-cyber-veggies
-
Lazarus Hackers Abuse Git Symlink Vulnerability in Stealthy Phishing Campaign
KuCoin’s security team has uncovered a new phishing campaign orchestrated by the Lazarus Group (APT38), the notorious state-sponsored collective renowned for financially motivated cyberespionage. Armed with government resources and a history of high-profile breaches, Lazarus continues to evolve its tactics to target cryptocurrency and financial institutions worldwide. Over the last decade, Lazarus has homed in…
-
U.S. sanctions cyber scammers who stole billions from Americans
The U.S. Department of the Treasury has sanctioned several large networks of cyber scam operations in Southeast Asia, which stole over $10 billion from Americans last year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-sanctions-cyber-scammers-who-stole-billions-from-americans/
-
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
The House Select Committee on China has formally issued an advisory warning of an “ongoing” series of highly targeted cyber espionage campaigns linked to the People’s Republic of China (PRC) amid contentious U.S.China trade talks.”These campaigns seek to compromise organizations and individuals involved in U.S.-China trade policy and diplomacy, including U.S. government agencies, U.S. business…
-
CyberVolk Ransomware Targets Windows Systems in Critical Infrastructure and Research Institutions
CyberVolk ransomware, which first emerged in May 2024, has escalated its operations against government agencies, critical infrastructure, and scientific institutions across Japan, France, and the United Kingdom. Operating with pro-Russian leanings, CyberVolk specifically targets states perceived as hostile to Russian interests, leveraging sophisticated encryption techniques that render decryption impossible. This article delivers a technical analysis…
-
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
The House Select Committee on China has formally issued an advisory warning of an “ongoing” series of highly targeted cyber espionage campaigns linked to the People’s Republic of China (PRC) amid contentious U.S.China trade talks.”These campaigns seek to compromise organizations and individuals involved in U.S.-China trade policy and diplomacy, including U.S. government agencies, U.S. business…
-
Multiple Vulnerabilities in GitLab Patched, Blocking DoS and SSRF Attack Vectors
GitLab has released critical security updates across multiple versions to address six significant vulnerabilities that could enable denial-of-service attacks, server-side request forgery, and information disclosure. The company released versions 18.3.2, 18.2.6, and 18.1.6 for both Community Edition and Enterprise Edition, with immediate upgrades strongly recommended for all self-managed installations. Critical Security Fixes Target Multiple Attack…
-
LNER urges customers to be vigilant after passenger details accessed in cyber-attack
Data breach at third-party supplier involves contact details and some information about previous journeys<ul><li><a href=”https://www.theguardian.com/business/2025/sep/10/jaguar-land-rover-says-cyber-attack-has-affected-some-data”>Jaguar Land Rover says cyber-attack has affected ‘some data'</li></ul>The train operator LNER has urged customers to be wary of unsolicited communications after revealing some passengers’ contact details and journey records have been accessed in a cyber-attack.The data breach took place at…
-
AsyncRAT Leverages Fileless Techniques to Bypass Detection
Fileless malware has become a formidable adversary for security teams, operating entirely in memory and evading disk-based detection. A recent incident demonstrates how attackers leveraged a multi-stage fileless loader to deploy AsyncRAT, a powerful Remote Access Trojan (RAT), through legitimate system tools”, leaving almost no footprint on disk. This case study highlights critical techniques for…
-
Jaguar Land Rover says cyber-attack has affected ‘some data’
Carmaker has informed relevant regulators and ‘will contact anyone as appropriate’ as investigation progresses<ul><li><a href=”https://www.theguardian.com/business/2025/sep/10/lner-urges-customers-to-be-vigilant-after-passenger-details-accessed-in-cyber-attack”>LNER urges customers to be vigilant after passenger details accessed in cyber-attack</li></ul>The cyber-attack on Jaguar Land Rover has affected data held by the carmaker, it has said, as its factories in the UK and abroad face prolonged closure.JLR, Britain’s biggest carmaker,…
-
Meta Verified Scam Ads on Facebook Steal User Account Details
Content creators and small businesses are facing a sophisticated new threat targeting their Facebook accounts through deceptive advertisements promising free Meta verification badges. A new malvertising campaign is targeting Facebook users with malicious ads that promise to unlock Meta’s coveted blue verification tick through a seemingly legitimate browser extension. These ads, accompanied by instructional videos,…
-
Jaguar Land Rover says cyber-attack has affected ‘some data’
Carmaker has informed relevant regulators and ‘will contact anyone as appropriate’ as investigation progresses<ul><li><a href=”https://www.theguardian.com/business/2025/sep/10/lner-urges-customers-to-be-vigilant-after-passenger-details-accessed-in-cyber-attack”>LNER urges customers to be vigilant after passenger details accessed in cyber-attack</li></ul>The cyber-attack on Jaguar Land Rover has affected data held by the carmaker, it has said, as its factories in the UK and abroad face prolonged closure.JLR, Britain’s biggest carmaker,…
-
Top 10 Best Internal Network Penetration Testing Providers in 2025
In a world of evolving threats, the security of an organization’s internal network is just as important as its external defenses. An internal network penetration test simulates a real-world attack from a threat actor who has already gained a foothold inside the network, exposing vulnerabilities that could lead to privilege escalation and data exfiltration. This…
-
Microsoft September 2025 Patch Tuesday 81 Vulnerabilities and 2 Zero Days Fixed
Microsoft has released its September 2025 Patch Tuesday update, addressing a total of 81 security vulnerabilities across its product portfolio. This extensive release includes fixes for two zero-day vulnerabilities that are actively being exploited. Among the patched flaws, ten are rated as >>Critical,>Important.
-
News brief: U.S. Cyber Trust Mark update and how to prepare
Check out the latest security news from the Informa TechTarget team. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366630472/News-brief-US-Cyber-Trust-Mark-update-and-how-to-prepare
-
Mitsubishi Electric to Buy Nozomi in $883M OT Security Deal
Purchase Expands AI-Powered Cyber Defense for Operational, Critical Infrastructure. Mitsubishi Electric is acquiring San Francisco-based Nozomi Networks to enhance protection for OT and IoT systems. The move accelerates cyber innovation and supports customers through AI-driven insights, cloud-native tools, and strong industry collaboration. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/mitsubishi-electric-to-buy-nozomi-in-883m-ot-security-deal-a-29394
-
Sen. King: Cyber domain is a ‘hellscape’ that will be made worse by cuts
King, a leading voice in the Senate on cybersecurity issues, honed in on the thousands of staffers and experts laid off by CISA, saying the agency has lost 30 percent of its staff and most of its seasoned leaders. First seen on therecord.media Jump to article: therecord.media/angus-king-cyber-domain-cuts-cisa
-
New cyber director Cairncross calls on industry to help put ‘America First’ in cyberspace
“We’ve admired the problem for too long, and now it’s time to do something about it,” National Cyber Director Sean Cairncross said about the cybersecurity threat environment. First seen on therecord.media Jump to article: therecord.media/sean-cairncross-oncd-billington-cybersecurity-speech