Tag: cyber
-
Germany Urges Apple and Google to Ban Chinese AI App DeepSeek Over Privacy Concerns
Berlin’s data protection commissioner, Meike Kamp, has raised serious alarms over the Chinese AI application DeepSeek, accusing the company of unlawfully transferring personal data of German users to China in violation of the European Union’s stringent General Data Protection Regulation (GDPR). In a statement released on Friday, Kamp highlighted that DeepSeek has failed to demonstrate…
-
Glasgow City Warns of Parking Fine Scam Amid Ongoing Cybersecurity Incident
Glasgow City Council has issued an urgent alert to drivers across the region following a surge in scam text messages targeting unsuspecting motorists with fraudulent demands for parking fine payments. The authority has confirmed that these deceptive communications, often embedded with malicious links, are part of a sophisticated phishing campaign designed to steal personal and…
-
RIFT: Open-Source Rust Malware Analyzer Released by Microsoft
Tags: cyber, cybercrime, exploit, intelligence, malware, microsoft, open-source, programming, rust, threat, toolAs cybercriminals and nation-state actors increasingly turn to the Rust programming language for malware development, Microsoft’s Threat Intelligence Center has unveiled a powerful new open-source tool called RIFT to help security analysts combat this growing threat. Rust, renowned for its speed, memory safety, and robustness, is now being exploited for its advantages in creating malware…
-
Critical D-Link Router Flaws Allow Remote Code Execution by Attackers
Tags: cyber, firmware, flaw, Hardware, network, remote-code-execution, risk, router, service, vulnerabilityA series of critical security vulnerabilities have been identified in D-Link DIR-816 routers, exposing users worldwide to the risk of remote code execution and network compromise. The flaws affect all hardware revisions and firmware versions of the DIR-816 (non-US), which has reached its End of Life (EOL) and End of Service Life (EOS), meaning no…
-
Cybersecurity Talent Shortage: Myth, Mismatch, or Reality?
Is there really a cybersecurity talent shortage, or are we just looking in all the wrong places? This week on the Shared Security Podcast, we tackle the buzz around the so-called cybersecurity skills gap. Host Tom Eston welcomes Katie Soper, Senior Consultant at Avetix Cyber and co-founder of the CyberVault Podcast, to discuss the challenges……
-
Threat Actors Impersonate WPS Office and DeepSeek to Spread Sainbox RAT
A malicious campaign has emerged, targeting Chinese-speaking users through fake installers of popular software such as WPS Office, Sogou, and DeepSeek. This operation, attributed with medium confidence to the China-based adversary group Silver Fox, leverages phishing websites that mimic legitimate software portals to distribute malware payloads, primarily in the form of MSI files. Sophisticated Phishing…
-
Scattered Spider Actively Targeting Airlines, FBI Warns
The FBI alert comes amid several reported cyber incidents impacting North America-based airlines, including Hawaiian Airlines First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/scattered-spider-targeting/
-
Ahold Delhaize Data Breach Exposes Personal Information of 2.2″¯Million Shoppers
Ahold Delhaize USA Services, LLC, a major grocery retail operator, has confirmed a significant data breach that compromised the personal information of over 2.2 million shoppers across the United States, including nearly 100,000 residents of Maine. The breach, which was the result of an external hacking incident, has prompted the company to notify affected customers…
-
New Report Reveals Exploited Vulnerabilities as Leading Cause of Ransomware Attacks on Organizations
A groundbreaking report titled >>The State of Ransomware 2025
-
Glasgow City Council Warns of Parking Fine Scam
Glasgow City Council is alerting residents to a parking scam which could be linked to a recent cyber-incident First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/glasgow-city-council-warns-parking/
-
IT Worker Jailed After Revenge Attack on Employer
An IT worker has been jailed for launching a cyber-attack after he was suspended at work First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/it-worker-jailed-revenge-attack/
-
US Cyber Diplomacy at Risk Amid State Department Shakeup
State Moves to Restructure Cyber Bureau and Issue Mass Layoffs Despite Court Order. Current and recent former Department of State staffers told Information Security Media Group the agency is preparing to implement layoffs and begin a reorganization despite a San Francisco federal district court order blocking across-the-board layoffs at federal agencies. First seen on govinfosecurity.com…
-
Canada Orders Chinese Vendor Hikvision to Cease Local Surveillance Activities
The Canadian government has ordered Hikvision, one of the world’s largest manufacturers of surveillance cameras, to halt all operations in Canada and shut down its local business. The decision, announced late Friday by Industry Minister Mélanie Joly, follows a comprehensive national security review under the Investment Canada Act and marks one of the most significant…
-
RDP Under Siege: How RansomHub Uses Mimikatz and IP Scanners to Breach Networks
A threat actor using the RansomHub ransomware carried out a painstakingly planned attack beginning in November 2024 in a terrifying cyber intrusion that was recently reported by DFIR Labs. The assault began with a password spray attack targeting an exposed Remote Desktop Protocol (RDP) server, exploiting multiple user accounts over a four-hour window. A Sophisticated…
-
IBM WebSphere Application Server Vulnerability Allows Remote Code Execution
A critical security vulnerability, tracked as CVE-2025-36038, has been discovered in IBM WebSphere Application Server, exposing organizations to the risk of remote code execution by unauthenticated attackers. This flaw, which affects widely deployed versions 8.5 and 9.0, is rated with aCVSS base score of 9.0, underlining its severity and the urgency for remediation. Vulnerability Details The…
-
Beyond CVE: The hunt for other sources of vulnerability intel
Tags: advisory, application-security, china, cisa, cve, cyber, cybersecurity, data, exploit, flaw, github, government, guide, infrastructure, intelligence, kev, microsoft, nvd, oracle, ransomware, risk, siem, soar, software, threat, tool, update, vulnerability, zero-dayCurrent alternatives include diverse vendor sources: Independent providers of aggregated vulnerability information such as Flashpoint, VulnCheck, Tenable, BitSight and others are another option. Many of these vendors offer curated datasets that capture vulnerabilities often missed or delayed by CVE, Lefkowitz points out. They also offer critical context such as exploitability, ransomware risk, and social risk.”To…
-
Synology ABM Vulnerability Leaks Microsoft 365 Sensitive Information
A critical vulnerability inSynology’s Active Backup for Microsoft 365 (ABM)has exposed sensitive data from Microsoft 365 tenants worldwide, potentially impacting over a million organizations relying on the popular backup solution. The flaw, tracked as CVE-2025-4679, allowed attackers to access confidential Microsoft 365 content”, including Teams messages, group memberships, Outlook conversations, and calendar data”, without requiring prior…
-
Cyber-Zwischenfall bei einer Schule in England
We have been made aware of a potential cybersecurity issue affecting IT systems at Richard Lander School. First seen on facebook.com Jump to article: www.facebook.com/richardlanderschooluk/posts/pfbid0Tr3uS4cBDrY69qMQMPPWv9UjmYktuijmRj8RZyjWsnez4374pQBuydeJNBMr2JbTl
-
Zig Strike: New Offensive Toolkit Generates Payloads to Evade AV, EDR, and XDR
A newly released offensive cybersecurity toolkit,Zig Strike, is making waves in the security community for its advanced ability to generate payloads that evade traditional and next-generation security defenses, including antivirus (AV), Endpoint Detection and Response (EDR), and Extended Detection and Response (XDR) solutions. According to the report, Zig Strike emerges as a response to the escalating…
-
Hackers Exploit Bluetooth Flaws to Eavesdrop via Headphones and Earbuds
In a major security revelation, researchers have uncovered critical vulnerabilities in millions of Bluetooth headphones and earbuds, enabling hackers to eavesdrop on conversations, hijack devices, and access sensitive data”, all without user authentication or pairing. The flaws, discovered by German security firm ERNW and presented at the TROOPERS security conference, affect Bluetooth chips produced by…
-
More than 25% of UK businesses hit by cyber-attack in last year, report finds
Exclusive: Royal Institution of Chartered Surveyors says lack of action leaves firms at risk of ‘sleepwalking’ into problemsMore than one in four UK businesses have been the victim of a <a href=”https://www.theguardian.com/technology/cybercrime”>cyber-attack in the last year and many more risk “sleepwalking” into such disruption unless they take urgent action, according to a report.About 27% of…
-
Are Your NHIs Fully Protected?
Are Your Non-Human Identities (NHIs) Defended Robustly Against Cyber Threats? Ever questioned the absolute security of your machine identities? With the rising interconnectedness of technologies, protection of Non-Human Identities (NHIs) is no longer a choice but an urgent necessity. Ensuring robust cybersecurity can be a daunting task, given the sophistication of modern digital threats. But……
-
Is Investing in NHI Security Justified?
Is NHI Security Investment Justifiable for Your Organization? Is your organization making a concerted effort towards investing in Non-Human Identities (NHIs) security? Given the increasing sophistication of cyber threats, ensuring tight security controls over machine identities is becoming vital in every industry. This is particularly significant for businesses operating in the cloud, where NHIs and……
-
Threat Actors Transform GIFTEDCROOK Stealer into an Intelligence-Gathering Tool
The Arctic Wolf Labs team has uncovered a dramatic transformation in the capabilities of the GIFTEDCROOK infostealer, wielded by the threat group UAC-0226. Initially identified as a rudimentary browser data stealer in early 2025, this malware has undergone rapid evolution through versions 1.2 and 1.3, morphing into a sophisticated intelligence-gathering tool by June 2025. This…
-
LapDogs: China-nexus hackers Hijack 1,000+ SOHO devices for espionage
Over 1,000 SOHO devices were hacked in a China-linked spying campaign called LapDogs, forming a covert network to support cyber espionage. Security researchers at SecurityScorecard’s STRIKE team have uncovered a cyber espionage campaign, dubbed LapDogs, involving over 1,000 hacked SOHO (small office/home office) devices. These compromised devices formed a hidden network, called an Operational Relay…
-
ESET Warns Cybercriminals Are Targeting NFC Data for Contactless Payments
ESET researchers have uncovered a sophisticated attack vector exploiting Near Field Communication (NFC) data, initially targeting Czech banking customers but now spreading worldwide. According to the ESET Threat Report H1 2025, the incidence of NFC-related attacks has skyrocketed, with telemetry data showing a staggering 35-fold increase in the first half of 2025 compared to the…
-
Threat Actors Exploit Windows and Linux Server Vulnerabilities to Deploy Web Shells
Threat actors have been observed exploiting file upload vulnerabilities to deploy web shells and advanced malware on both Windows and Linux systems. The campaign, which showcases a blend of publicly available tools and custom malicious payloads, indicates a highly coordinated effort to compromise organizational networks through initial access, persistence, and lateral movement. Sophisticated Attack Campaign…
-
Cyber-Zwischenfall bei einer US-Fluggesellschaft
Hawaiian Airlines Cybersecurity Event First seen on newsroom.hawaiianairlines.com Jump to article: newsroom.hawaiianairlines.com/releases/hawaiian-airlines-cybersecurity-event