Tag: cyber
-
Microsoft Honors Top Contributors to MSRC’s Security Research Program
Microsoft has announced its 2025 Most Valuable Researchers (MVRs), recognizing 100 security researchers who made significant contributions to protecting the company’s customers through the Microsoft Security Response Center’s vulnerability disclosure program. The annual recognition celebrates researchers who discovered and responsibly reported security vulnerabilities between July 1, 2024, and June 30, 2025. The Microsoft Researcher Recognition…
-
Cyberangriff auf eine Fluggesellschaft in Serbien
Turbulence at Air Serbia, the latest airline under cyber siege First seen on theregister.com Jump to article: www.theregister.com/2025/07/16/air_serbia_cyberattack/
-
Cyber-Zwischenfall bei einer US-Wirtschaftsförderungsgesellschaft
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/92432803-595d-4344-adcb-727e9eff6573.html
-
Overcoming the Myths About 5G and OT Security
5G OT Security Summit Speakers on Delicate Balance Between Innovation, Cyber Risk. Digital transformation – which now includes a convergence of cloud-based applications, AI and OT systems – introduces new threat vectors particularly as legacy systems struggle to adapt. Speakers at the 5G OT Security Summit discussed cyber defenses and policies and for securing OT…
-
Learn the Next Thing, Not Everything
Tags: cyberHow Focused Skill Building Solves Real Problems in Cyber Roles The pressure to grow doesn’t come from curiosity alone. It comes from real friction in the systems you work with. That’s why the smartest way to continue learning is not to try to master everything. Instead, focus on the next thing that will actually help…
-
State Department Layoffs Are ‘Fracturing’ US Cyber Diplomacy
Experts Warn Reorganization Splinters Cyberspace Bureau and Intelligence Divisions. U.S. Secretary of State Marco Rubio’s major shakeup of the State Department’s operations – including widespread layoffs and controversial restructurings that separate key cyber teams – will hinder U.S. cyber diplomacy as threats continue to escalate, analysts told Information Security Media Group. First seen on govinfosecurity.com…
-
Cracked Apps Delivering Infostealers Identified as Leading Attack Vector in June 2025
The AhnLab Security Intelligence Center (ASEC) published a thorough analysis in June 2025 that identified infostealer malware masquerading as keygens and cracked software as a primary attack vector. This malware uses advanced search engine optimization (SEO) poisoning to elevate malicious distribution sites in search results. ASEC’s automated malware collection systems, including crack monitoring, email honeypots,…
-
Hackers Leverage 607 Malicious Domains to Spread APK Malware with Remote Command Execution
PreCrime Labs at BforeAI discovered a complex cyber threat operation in which hackers have used a vast network of 607 rogue domains to spread fake Telegram Messenger application files (APKs) over the course of the last month. These domains, primarily registered via the Gname registrar and hosting content in Chinese, form part of a large-scale…
-
SquidLoader Deploys Stealthy Malware with Near-Zero Detection to Evade Security Measures
A fresh variant of SquidLoader malware has surfaced, actively entering Hong Kong institutions with previously unheard-of stealth, which is alarming for the financial industry. This sophisticated loader achieves near-zero detection rates on platforms like VirusTotal, leveraging intricate anti-analysis, anti-sandbox, and anti-debugging mechanisms to deploy Cobalt Strike Beacons for remote access. The malware’s attack chain begins…
-
Co-op chief ‘incredibly sorry’ for theft of 6.5m members’ data
Co-op chief executive Shirine Khoury-Haq has revealed that all the personal data of all 6.5 million of its members was compromised in the April 2025 cyber attack on its systems. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627833/Co-op-chief-incredibly-sorry-for-theft-of-65m-members-data
-
Amid border dispute, Thailand goes after Cambodian tycoon over alleged cyber scam ties
A prominent Cambodian tycoon was the subject of multiple raids conducted Tuesday by Thai police, who accused him of being involved in cyber scams. First seen on therecord.media Jump to article: therecord.media/thailand-goes-after-cambodian-tycoon-cyber-scams
-
Lenovo Vantage Flaws Enable Attackers to Gain SYSTEM-Level Privileges
Security researchers at Atredis have uncovered multiple privilege escalation vulnerabilities in Lenovo Vantage, a pre-installed management platform on Lenovo laptops that handles device updates, configurations, and system health monitoring. These flaws, tracked under CVEs 2025-6230, 2025-6231, and 2025-6232, allow unprivileged users to bypass authentication mechanisms and execute code with SYSTEM-level privileges, potentially leading to full…
-
Samsung WLAN AP Flaws Let Remote Attackers Run Commands as Root
Security researchers have uncovered a critical chain of vulnerabilities in Samsung’s WEA453e wireless access point that allows unauthenticated remote attackers to execute commands with full administrative privileges. The flaws, discovered in August 2020, demonstrate how seemingly minor web interface oversights can cascade into complete system compromise. The vulnerability chain begins with a reflected cross-site scripting…
-
Chinese ‘Salt Typhoon’ Hackers Infiltrated US National Guard Network for Almost a Year
The Department of Defense (DoD) revealed that an advanced persistent threat (APT) group, known as Salt Typhoon and publicly identified as Chinese state-sponsored actors, had successfully penetrated a U.S. state’s Army National Guard network in a major increase in cyberthreats. This compromise spanned from March 2024 to December 2024, enabling potential exfiltration of sensitive military…
-
Gmail Message Exploit Triggers Code Execution in Claude, Bypassing Protections
A cybersecurity researcher has demonstrated how a carefully crafted Gmail message can trigger code execution through Claude Desktop, Anthropic’s AI assistant application, highlighting a new class of vulnerabilities in AI-powered systems that don’t require traditional software flaws. The exploit leverages the Model Context Protocol (MCP), which allows Claude to interact with various applications and services.…
-
Co-op boss admits all 6.5m members had data stolen in cyber-attack
CEO Shirine Khoury-Haq says hackers stole contact details of all members but not financial data such as card numbers The chief executive of the Co-op has apologised to its customers after admitting that all 6.5 million of the mutual’s members had their data stolen in a recent cyber-attack.Shirine Khoury-Haq told the BBC she was “incredibly…
-
Salt Typhoon hacked the US National Guard for 9 months, and accessed networks in every state
Tags: access, attack, best-practice, breach, credentials, cve, cyber, cybersecurity, data, defense, exploit, government, group, hacking, infrastructure, Internet, malicious, military, network, service, theft, threat, vulnerabilitySensitive military data stolen: The attackers gained access to highly sensitive military and infrastructure information during the nine-month intrusion. The memo stated that “in 2024, Salt Typhoon used its access to a US state’s Army National Guard network to exfiltrate administrator credentials, network traffic diagrams, a map of geographic locations throughout the state, and PII…
-
IT-Resilienz wird durch mangelnde Unterstützung der IT-Teams auf persönlicher Ebene beeinträchtigt
Laut einer neuen Studie von Zscaler vernachlässigen Unternehmen die persönliche Resilienz von Mitarbeitenden, die mit der Reaktion auf kritische Cyber-Vorfälle beauftragt sind. Dieses Versäumnis kann jedoch mit erheblichen Risiken für den Betrieb einhergehen, die von kostspieligen Ausfallzeiten bis hin zu einer geschwächten Geschäftskontinuität reichen. Die Studie ‘The Missing Link: Why Investing in the Resilience of…
-
iCounter Debuts With Mission to Defeat AI-Enabled Threats
Startup Raises $30M, Uses Risk Intelligence to Preempt Reconnaissance Attacks. Former FireEye and Mandiant leader John Watters unveils iCounter, a new cyber risk intelligence startup focused on targeted attacks and AI-enabled adversaries. Backed by Syn Ventures, the firm aims to transform threat detection with deeper visibility into attacker reconnaissance. First seen on govinfosecurity.com Jump to…
-
Windows Secure Boot Certificate Expired in June, Microsoft Issues Warning
Microsoft has issued an urgent warning to Windows users about an impending security certificate expiration that could significantly impact device functionality. The tech giant announced that Secure Boot certificates used by most Windows devices are scheduled to expire starting in June 2026, potentially affecting the ability of personal and business computers to boot securely if…
-
Google’s AI ‘Big Sleep’ Detects Critical SQLite 0-Day, Halts Ongoing Attacks
Tags: ai, attack, cyber, cybersecurity, exploit, google, intelligence, threat, vulnerability, zero-dayGoogle’s artificial intelligence agent >>Big Sleep
-
Dark Partners Hacker Group Drains Crypto Wallets Using Fake AI Tools and VPN Services
The financially driven organization known as Dark Partners has been planning massive cryptocurrency theft since at least May 2025, using a complex network of more than 250 malicious domains that pose as AI tools, VPN services, cryptocurrency wallets, and well-known software brands. This is part of a rapidly developing cybercrime operation. These fake websites, distributed…
-
Oracle Issues Critical Update Fixing 309 Vulnerabilities Across Products
Oracle Corporation released its July 2025 Critical Patch Update, addressing a substantial 309 security vulnerabilities across its extensive product portfolio. This quarterly security release represents one of the most comprehensive patches in recent years, affecting dozens of Oracle’s enterprise software solutions and requiring immediate attention from organizations worldwide. The critical update spans Oracle’s entire technology…
-
Hackers Launched Massive DDoS Attack with 7.3 Tbps and 4.8 Billion Packets Per Second
Cloudflare’s latest DDoS Threat Report for the second quarter of 2025 reveals that the company autonomously mitigated the largest-ever recorded distributed denial-of-service (DDoS) attacks, peaking at an unprecedented 7.3 terabits per second (Tbps) and 4.8 billion packets per second (Bpps). These hyper-volumetric assaults, which surged dramatically, underscore the relentless evolution of attack vectors targeting critical…
-
Cyber-Resilienz braucht mehr als nur Technik – auch die IT-Teams benötigen Unterstützung
Die Studie mit dem Titel ‘The Missing Link: Why Investing in the Resilience of Your People is Imperative for Business Continuity” legt offen, wie stark die mentale und emotionale Belastung auf IT-Profis lastet und wie unzureichend sie darauf vorbereitet sind. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cyber-resilienz-braucht-mehr-als-nur-technik-auch-die-it-teams-benoetigen-unterstuetzung/a41415/
-
Konfety Android Malware Exploits ZIP Tricks to Masquerade as Legit Apps on Google Play
Security researchers from zLabs have discovered a more advanced version of the Konfety Android malware, which uses complex ZIP-level changes to avoid detection and mimic genuine apps on the Google Play Store, marking a dramatic increase in mobile dangers. This malware employs an >>evil-twin
-
Email Filters Defeated by Polyglot File Trick Used in Malware Campaigns
Attackers are increasingly using advanced disguising techniques, such polyglot files, to get around email filters and successfully send phishing payloads in the constantly changing world of cyber threats. These polyglot files, which can be interpreted as multiple file formats simultaneously, allow malicious content to evade detection by appearing benign to security scanners. This shift marks…
-
Massive DDoS Attack Slams Internet with 7.3 Tbps and 4.8 Billion Packets Per Second
Cloudflare’s latest DDoS Threat Report for the second quarter of 2025 reveals that the company autonomously mitigated the largest-ever recorded distributed denial-of-service (DDoS) attacks, peaking at an unprecedented 7.3 terabits per second (Tbps) and 4.8 billion packets per second (Bpps). These hyper-volumetric assaults, which surged dramatically, underscore the relentless evolution of attack vectors targeting critical…