Tag: cyber
-
ACSC Warns of Actively Exploited SonicWall Access Control Vulnerability
The Australian Cyber Security Centre (ACSC) has issued an urgent warning about a critical vulnerability in SonicWall firewall devices that is being actively exploited by threat actors. The flaw, tracked as CVE-2024-40766, affects SonicOS management access and SSLVPN functionality across multiple generations of SonicWall devices. Critical Vulnerability Details The improper access control vulnerability carries a…
-
Key Operators of LockerGoga, MegaCortex, and Nefilim Ransomware Gangs Arrested
The U.S. District Court for the Eastern District of New York has charged Volodymyr Viktorovich Tymoshchuk, a Ukrainian national known as deadforz, Boba, msfv, and farnetwork, for his role in administering LockerGoga, MegaCortex, and Nefilim ransomware operations. The indictment alleges that Tymoshchuk managed attacks against more than 250 companies in the U.S. and hundreds of…
-
Dell PowerProtect Data Manager Flaw Allows System Compromise by Attackers
Dell has released a critical security update for its PowerProtect Data Manager (PPDM) platform, addressing multiple vulnerabilities that could allow attackers to compromise systems and execute arbitrary commands. The security advisory DSA-2025-326 reveals several high-severity flaws affecting versions 19.19 and 19.20 of the enterprise data protection solution. Critical Command Injection Vulnerabilities Discovered The most severe…
-
Reflected XSS Flaw Enables Attackers to Evade Amazon CloudFront Protection Using Safari
A recent bug bounty discovery has drawn attention to a browser-specific reflected Cross-Site Scripting (XSS) vulnerability on help-ads.target.com. This flaw was found to bypass Amazon CloudFront’s Web Application Firewall (WAF) protections but could only be exploited on the Safari browser. The finding highlights the importance of testing for diverse browser behaviors during security assessments. Discovery…
-
House moves ahead with defense bill that includes AI, cyber provisions
The policy roadmap’s digital security text is tame in comparison to the last two years, when the idea of studying a U.S. Cyber Force dominated the debate. First seen on therecord.media Jump to article: therecord.media/house-passes-defense-policy-bill-ai-cyber
-
How Mitsubishi-Nozomi Deal Will Boost OT Cyber Capabilities
CMO Mike Plante on Nozomi Expanding Industrial Reach, Operating as Independent Unit. Japanese Industrial giant Mitsubishi Electric will acquire San Francisco-based cybersecurity firm Nozomi Networks for $883 million. The two companies aim to fuse industrial data insights with advanced threat detection while keeping Nozomi as an independent brand. First seen on govinfosecurity.com Jump to article:…
-
Going Deeper in Cyber Skills: Can You Spot the Not?
Tech Tools Are Powerful ‘Easy Buttons’ But You Still Need to Know the Fundamentals In their careers, cyber professionals are expected to move beyond clicking through alerts and develop more depth in the field. The easy button may feel efficient, but it could be your downfall if you don’t push yourself to truly learn the…
-
Jaguar Land Rover admits data has been compromised in cyber attack
The car maker revealed that data was stolen in the cyber attack that began on 31 August, as its production line continues to be affected First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366630592/Jaguar-Land-Rover-admits-data-has-been-compromised-in-cyber-attack
-
Senior NSC official said US needs to embrace offensive cyber
Tags: cyberAlexei Bulazel said the administration is unapologetically in favor of using offensive capabilities to deter the nation’s adversaries.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/senior-nsc-official-said-us-needs-to-embrace-offensive-cyber/759779/
-
Jaguar Land Rover U-turns to confirm ‘some data’ affected after cyber prang
Systems offline as specialists continue to comb through wreckage First seen on theregister.com Jump to article: www.theregister.com/2025/09/10/jaguar_land_rover_breach/
-
New Tenable Report: How Complexity and Weak AI Security Put Cloud Environments at Risk
Tags: access, ai, attack, authentication, breach, cloud, control, credentials, cyber, cybersecurity, data, governance, iam, identity, least-privilege, metric, mfa, monitoring, resilience, risk, security-incident, skills, software, strategy, threat, toolThis survey, commissioned by Tenable and developed in collaboration with the Cloud Security Alliance, warns that rapid cloud and AI adoption, combined with insecure identities and a reactive posture, leave organizations exposed. The report urges a strategic shift to preventive security with a unified view of risk and mature identity governance. Key takeaways Organizations are…
-
Jagar Land Rover U-turns to confirm ‘some data’ affected after cyber prang
Systems offline as specialists continue to comb through wreckage First seen on theregister.com Jump to article: www.theregister.com/2025/09/10/jagar_land_rover_breach/
-
We’ve crossed the security singularity – Impart Security
Tags: access, ai, api, attack, authentication, breach, ciso, compliance, credentials, cyber, cyberattack, cybersecurity, data, data-breach, defense, detection, exploit, framework, group, hacker, incident response, injection, intelligence, Internet, msp, password, penetration-testing, ransomware, risk, risk-assessment, skills, software, sql, strategy, supply-chain, threat, update, vulnerability, zero-day, zero-trustThe Bottom Line: We’ve Crossed the Security Singularity “ The Security Singularity: When AI Democratized Cyberattacks We’ve crossed a threshold that fundamentally changes cybersecurity forever. Not with fanfare or headlines, but quietly, in the background of our AI-powered world. The expertise barrier that once separated script kiddies from sophisticated threat actors has simply… vanished. I…
-
National cyber director says US must shift risk burden toward adversaries
In his first major address after confirmation, Sean Cairncross said the U.S. needs to take bold, coordinated steps to counter authoritarian rivals. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/national-cyber-director-risk-burden-adversaries/759720/
-
Maturing the cyber threat intelligence program
The Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) helps organizations assess and improve their threat intelligence programs by outlining 11 key areas and specific missions where CTI can support decision-making. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/maturing-the-cyber-threat-intelligence-program/
-
Lazarus Hackers Abuse Git Symlink Vulnerability in Stealthy Phishing Campaign
KuCoin’s security team has uncovered a new phishing campaign orchestrated by the Lazarus Group (APT38), the notorious state-sponsored collective renowned for financially motivated cyberespionage. Armed with government resources and a history of high-profile breaches, Lazarus continues to evolve its tactics to target cryptocurrency and financial institutions worldwide. Over the last decade, Lazarus has homed in…
-
Splunk.conf: Splunk urges users to eat their ‘cyber veggies’
The dawn of AI-enabled cyber attacks makes it even more important for defenders to bring their A-game, particularly when it comes to getting the basics right First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366630445/Splunkconf-Splunk-urges-users-to-eat-their-cyber-veggies
-
Lazarus Hackers Abuse Git Symlink Vulnerability in Stealthy Phishing Campaign
KuCoin’s security team has uncovered a new phishing campaign orchestrated by the Lazarus Group (APT38), the notorious state-sponsored collective renowned for financially motivated cyberespionage. Armed with government resources and a history of high-profile breaches, Lazarus continues to evolve its tactics to target cryptocurrency and financial institutions worldwide. Over the last decade, Lazarus has homed in…
-
U.S. sanctions cyber scammers who stole billions from Americans
The U.S. Department of the Treasury has sanctioned several large networks of cyber scam operations in Southeast Asia, which stole over $10 billion from Americans last year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-sanctions-cyber-scammers-who-stole-billions-from-americans/
-
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
The House Select Committee on China has formally issued an advisory warning of an “ongoing” series of highly targeted cyber espionage campaigns linked to the People’s Republic of China (PRC) amid contentious U.S.China trade talks.”These campaigns seek to compromise organizations and individuals involved in U.S.-China trade policy and diplomacy, including U.S. government agencies, U.S. business…
-
CyberVolk Ransomware Targets Windows Systems in Critical Infrastructure and Research Institutions
CyberVolk ransomware, which first emerged in May 2024, has escalated its operations against government agencies, critical infrastructure, and scientific institutions across Japan, France, and the United Kingdom. Operating with pro-Russian leanings, CyberVolk specifically targets states perceived as hostile to Russian interests, leveraging sophisticated encryption techniques that render decryption impossible. This article delivers a technical analysis…
-
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
The House Select Committee on China has formally issued an advisory warning of an “ongoing” series of highly targeted cyber espionage campaigns linked to the People’s Republic of China (PRC) amid contentious U.S.China trade talks.”These campaigns seek to compromise organizations and individuals involved in U.S.-China trade policy and diplomacy, including U.S. government agencies, U.S. business…
-
Multiple Vulnerabilities in GitLab Patched, Blocking DoS and SSRF Attack Vectors
GitLab has released critical security updates across multiple versions to address six significant vulnerabilities that could enable denial-of-service attacks, server-side request forgery, and information disclosure. The company released versions 18.3.2, 18.2.6, and 18.1.6 for both Community Edition and Enterprise Edition, with immediate upgrades strongly recommended for all self-managed installations. Critical Security Fixes Target Multiple Attack…
-
LNER urges customers to be vigilant after passenger details accessed in cyber-attack
Data breach at third-party supplier involves contact details and some information about previous journeys<ul><li><a href=”https://www.theguardian.com/business/2025/sep/10/jaguar-land-rover-says-cyber-attack-has-affected-some-data”>Jaguar Land Rover says cyber-attack has affected ‘some data'</li></ul>The train operator LNER has urged customers to be wary of unsolicited communications after revealing some passengers’ contact details and journey records have been accessed in a cyber-attack.The data breach took place at…
-
AsyncRAT Leverages Fileless Techniques to Bypass Detection
Fileless malware has become a formidable adversary for security teams, operating entirely in memory and evading disk-based detection. A recent incident demonstrates how attackers leveraged a multi-stage fileless loader to deploy AsyncRAT, a powerful Remote Access Trojan (RAT), through legitimate system tools”, leaving almost no footprint on disk. This case study highlights critical techniques for…
-
Jaguar Land Rover says cyber-attack has affected ‘some data’
Carmaker has informed relevant regulators and ‘will contact anyone as appropriate’ as investigation progresses<ul><li><a href=”https://www.theguardian.com/business/2025/sep/10/lner-urges-customers-to-be-vigilant-after-passenger-details-accessed-in-cyber-attack”>LNER urges customers to be vigilant after passenger details accessed in cyber-attack</li></ul>The cyber-attack on Jaguar Land Rover has affected data held by the carmaker, it has said, as its factories in the UK and abroad face prolonged closure.JLR, Britain’s biggest carmaker,…
-
Meta Verified Scam Ads on Facebook Steal User Account Details
Content creators and small businesses are facing a sophisticated new threat targeting their Facebook accounts through deceptive advertisements promising free Meta verification badges. A new malvertising campaign is targeting Facebook users with malicious ads that promise to unlock Meta’s coveted blue verification tick through a seemingly legitimate browser extension. These ads, accompanied by instructional videos,…
-
Jaguar Land Rover says cyber-attack has affected ‘some data’
Carmaker has informed relevant regulators and ‘will contact anyone as appropriate’ as investigation progresses<ul><li><a href=”https://www.theguardian.com/business/2025/sep/10/lner-urges-customers-to-be-vigilant-after-passenger-details-accessed-in-cyber-attack”>LNER urges customers to be vigilant after passenger details accessed in cyber-attack</li></ul>The cyber-attack on Jaguar Land Rover has affected data held by the carmaker, it has said, as its factories in the UK and abroad face prolonged closure.JLR, Britain’s biggest carmaker,…
-
U.S. sanctions cyber scammers who stole billions from Americans
The U.S. Department of the Treasury has sanctioned several large networks of cyber scam operations in Southeast Asia, which stole over $10 billion from Americans last year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-sanctions-cyber-scammers-who-stole-billions-from-americans/