Tag: cyber
-
Der Fachkräftemangel bei CyberIntelligence ist in Deutschland signifikant
Google Cloud Security hat gemeinsam mit Forrester neue Erkenntnisse aus dem aktuellen Report veröffentlicht. Die Ergebnisse zeigen eine deutliche Diskrepanz zwischen der Bedrohungstransparenz und der Vorbereitung auf Führungsebene in einer Bedrohungslage, die sich rasant weiterentwickelt. In Deutschland kämpfen Security-Teams besonders stark mit einem Mangel an qualifizierten Threat-Analysten […] First seen on netzpalaver.de Jump to article:…
-
French submarine secrets surface after cyber attack
European defence giant Naval Group has confirmed that it is investigating an alleged cyber attack which has seen what purports to be sensitive internal data published on the internet by hackers. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/french-submarine-secrets-surface-after-cyber-attack
-
LLM Honeypots Deceive Hackers into Exposing Attack Methods
Tags: ai, attack, cyber, cybercrime, cybersecurity, hacker, intelligence, LLM, strategy, technology, threatCybersecurity researchers have successfully deployed artificial intelligence-powered honeypots to trick cybercriminals into revealing their attack strategies, demonstrating a promising new approach to threat intelligence gathering. The innovative technique uses large language models (LLMs) to create convincing fake systems that lure hackers into exposing their methods and infrastructure. Revolutionary Deception Technology The breakthrough involves Beelzebub, a…
-
Cyberresilienz als strategischer Imperativ
Unternehmen sind nur so stark wie ihr schwächster Endpunkt: Ein 4-Punkte-Plan für effektive Endpoint-Security. Unternehmen sehen sich einem unerbittlichen Ansturm von Cyber-Bedrohungen ausgesetzt. Sie erleben Angriffe auf breiter Front von Servern über Cloud-Dienste bis hin zu APIs und Endgeräten. Das Arsenal der Cyber-Kriminellen ist mit hochentwickeltem Phishing und KI-gestützten Exploits bestens ausgestattet. Für Unternehmen […]…
-
NPM ‘is’ Package with 2.8M Weekly Downloads Exploited in Attack on Developers
The popular npm package ‘is’, which has about 2.8 million weekly downloads, has been taken over by threat actors in a sophisticated escalation of a phishing effort that was first disclosed last Friday. The attack began with emails spoofing npm’s support@npmjs.org address, directing developers to a typosquatted domain, npnjs.com a near-identical proxy of the legitimate…
-
10 Best Ethical Hacking Service Providers in 2025
In 2025, the demand for sophisticated ethical hacking services has intensified, driven by the rapid evolution of digital infrastructure and increasingly cunning cyber adversaries. Organizations are moving beyond periodic checks towards continuous security validation, seeking partners who offer deep technical expertise, innovative delivery models, and a proactive stance against emerging threats. Ethical hacking, encompassing everything…
-
Android Malware-as-a-Service Gets Cheaper, Packing 2FA Interception
Malware-as-a-service (MaaS) platforms like PhantomOS and Nebula are democratizing Android device attacks because they provide pre-built, subscription-based malware kits for as little as $300 per month, marking a fundamental shift in the cybercrime scene. These services eliminate the need for coding expertise, providing cybercriminals with fully functional Android trojans equipped with advanced capabilities like two-factor…
-
Wöchentlich 1286 Cyberangriffe auf deutsche Unternehmen im Q2 2025
Im von Check Point Software Technologies verzeichnet Deutschland mit 22 Prozent mehr Attacken den stärksten Zuwachs im DACH-Raum. Damit liegt die Bundesrepublik ein Prozent über dem globalen Durchschnitt. Europa ist derweil die Region mit dem größten Zuwachs an Angriffen mit ebenfalls 22 Prozent. Die wichtigsten Erkenntnisse aus Q2 2025: Deutschland verzeichnet […] First seen on…
-
Atomic macOS Stealer Upgraded with Remote Access Backdoor
The Atomic macOS Stealer (AMOS), a notorious infostealer malware targeting Apple’s macOS ecosystem, has undergone a significant upgrade by incorporating a sophisticated backdoor mechanism that facilitates persistent access and remote command execution on infected systems. This enhancement, detailed in a recent report by Moonlock Lab, a cybersecurity arm of MacPaw, transforms AMOS from a mere…
-
Inside Muddled Libra’s Playbook: Call Center Attacks for Initial Breach
Palo Alto Networks’ Unit 42, the cybercrime group tracked as Muddled Libra also known as Scattered Spider or UNC3944 has demonstrated remarkable resilience and adaptation in 2025, following international law enforcement disruptions in late 2024. Despite federal charges against five suspected members in November 2024, the group has escalated its intrusion operations across sectors including…
-
Inside Laundry Bear: Unveiling Infrastructure, Tactics, and Procedures
Dutch intelligence agencies AIVD and MIVD, alongside Microsoft Threat Intelligence, have identified Laundry Bear also tracked as Void Blizzard as a sophisticated Russian state-sponsored advanced persistent threat (APT) group active since at least April 2024. This actor has focused on espionage operations against NATO countries, Ukraine, and various organizations including the Dutch police, a Ukrainian…
-
SECUINFRA wird AG: Aktiengesellschaft als Grundlage für globale Expansion
Die SECUINFRA GmbH geht den nächsten Schritt auf ihrem Wachstumspfad und firmiert künftig unter dem Dach der neu gegründeten SECUINFRA Cyber Defense AG. Die Holdinggesellschaft mit einem Gründungskapital von 1.500.000 Euro bildet das strategische Fundament für die internationale Expansion des Berliner Unternehmens, das seit 2010 auf die Erkennung, Analyse und Abwehr von Cyberangriffen spezialisiert ist….…
-
400,000 WordPress Websites Exposed by Post SMTP Plugin Vulnerability
A critical security vulnerability has been discovered in the popular Post SMTP plugin for WordPress, potentially exposing over 400,000 websites to account takeover attacks. The vulnerability, tracked as CVE-2025-24000, affects versions 3.2.0 and below of the plugin, allowing even low-privileged users to access sensitive email data and ultimately gain administrative control of affected websites as…
-
Threat Actors Claim Breach of Airpay Payment Gateway
Cybercriminals have reportedly claimed a successful breach of Airpay, an Indian payment gateway service, raising serious concerns about the security of financial data and customer information. The allegations surfaced on underground forums where threat actors are allegedly offering access to sensitive data for sale, though the full extent and validity of the claimed breach remains…
-
Women’s Dating App “Tea” Data Leak Exposes 13,000 User Selfies
Tea, a women-only dating safety app that allows users to review and share information about men they’ve dated anonymously, has suffered a significant data breach that exposed approximately 72,000 user images, including 13,000 sensitive selfies and photo identification documents submitted during account verification. The breach was discovered at 6:44 AM PST on Friday, July 25th,…
-
Hackers Breach Intelligence Portal Used by the CIA and Other Agencies
Unidentified hackers have successfully compromised a critical intelligence website operated by the National Reconnaissance Office, marking a significant security breach affecting the CIA and multiple government agencies. The attack targeted the Acquisition Research Center website, which serves as a crucial platform for submitting details of sensitive contracts supporting various CIA spying programs. Scope and Impact…
-
SHUYAL Emerges: Stealing Login Credentials from 19 Major Browsers
A sophisticated new information stealer named SHUYAL was recently discovered by Hybrid Analysis. It has demonstrated extensive capabilities in credential extraction from 19 different web browsers, including popular ones like Google Chrome, Microsoft Edge, Opera, Brave, and Yandex, as well as more specialized ones like Opera GX, Vivaldi, Chromium, Waterfox, Tor, Epic Privacy Browser, Comodo…
-
Leak Zone Dark Web Forum Breach Exposes 22 Million User IPs and Locations
A significant data breach has exposed sensitive information about users of Leakzone, a prominent dark web forum known for trading hacking tools and compromised accounts. Security firm UpGuard discovered an unprotected Elasticsearch database containing approximately 22 million web request records, revealing user IP addresses, geographical locations, and internet service provider details from visitors to the…
-
New “ToolShell” Exploit Targets SharePoint Servers for Full Takeover
Tags: attack, cve, cyber, exploit, microsoft, remote-code-execution, threat, vulnerability, zero-dayFortiGuard Labs has identified a critical new exploit chain dubbed >>ToolShell
-
LG Innotek Camera Flaws Could Give Hackers Full Admin Access
Tags: access, authentication, cctv, control, cve, cyber, cybersecurity, flaw, hacker, risk, vulnerabilityA critical security vulnerability has been discovered in LG Innotek’s LNV5110R CCTV camera model that could allow remote attackers to gain complete administrative control over affected devices. The vulnerability, designated as CVE-2025-7742, represents a significant authentication bypass flaw that poses serious risks to organizations using these security cameras worldwide. Critical Authentication Bypass Vulnerability The Cybersecurity…
-
Cyber-Zwischenfall bei einem US-Motorsportverband
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dff3c2fa-cf00-4967-9715-22dbe34996a1.html
-
The legal minefield of hacking back
In this Help Net Security interview, Gonçalo Magalhães, Head of Security at Immunefi, discusses the legal and ethical implications of hacking back in cross-border cyber … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/28/goncalo-magalhaes-immunefi-hacking-back-concerns/
-
Interlock Ransomware Targets Healthcare in Stealth Attacks, Say U.S. Cyber Agencies
Federal agencies warn of rising Interlock ransomware attacks targeting healthcare and critical sectors using double extortion and advanced social engineering. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/security/interlock-ransomware-healthcare-warning/
-
Identitätsmanagement dient als strategisches Instrument im Kampf gegen Datenpannen und schlechte Versicherungskonditionen
Ein robustes Identity-Governance and Administration (IGA) -Management schützt nicht nur vor Datenpannen, sondern verbessert auch die Verhandlungsposition gegenüber Cyber-Versicherern erheblich. Die rasant wachsende Bedrohungslandschaft und die hohen Anforderungen der Versicherer machen IGA zum entscheidenden Faktor für Cyberresilienz und finanzielle Risikominimierung. Während Cyber-Versicherungen lange Zeit als optional galten, sind sie heute unverzichtbar geworden über 64 […]…
-
Drastischer Anstieg von Phishing-Betrug zu Beginn der Sommersaison
Bereits im Mai 2025 wurden über 39000 neue Domains mit Urlaubsbezug registriert, von welchen jede 21. als bösartig oder verdächtig eingestuft wurde Cyber-Kriminelle zielen mit Phishing-Betrug auf Reiseliebhaber und Immobilienbesitzer ab, indem sie beliebte Plattformen wie Airbnb und Booking.com imitieren. Während die Sommerreisezeit in vollem Gange ist, folgen Cyber-Kriminelle den Menschenmassen online. Check Point […]…
-
Hackers Exploit Official Gaming Mouse Software to Spread Windows-based Xred Malware
Gaming peripheral manufacturer Endgame Gear has disclosed a security incident involving malware-infected software distributed through their official website, affecting users who downloaded the OP1w 4k v2 mouse configuration tool between June 26 and July 9, 2025. The company has issued an urgent security advisory and implemented immediate remediation measures while the investigation into the breach…
-
Microsoft Investigates Leak in Early Warning System Used by Chinese Hackers to Exploit SharePoint Vulnerabilities
Tags: breach, china, cyber, cybersecurity, exploit, flaw, government, hacker, international, law, leak, microsoft, software, vulnerabilityChinese laws requiring vulnerability disclosure to the government create transparency issues and potential conflicts for international cybersecurity efforts. Microsoft is probing whether a leak from its confidential early warning system enabled Chinese state-sponsored hackers to exploit significant flaws in its SharePoint software, leading to breaches at over 400 organizations, including the U.S. agency responsible for…
-
Arizona Woman Sentenced for Aiding North Korean IT Workers in Cyber Operations
Christina Marie Chapman, a 50-year-old Arizona woman, has been sentenced to 102 months in prison for her role in an elaborate fraud scheme that helped North Korean IT workers pose as U.S. citizens to obtain remote positions at over 300 American companies. The scheme generated more than $17 million in illicit revenue for both Chapman…