Tag: cyber
-
Cyberangriff auf ‘Washington Post”
Tags: access, china, cyber, cyberattack, cyberespionage, governance, government, mail, microsoft, usaDie “Washington Post” wurde Ziel einer Cyberattacke. Die Microsoft-Accounts mehrerer Journalisten der ‘Washington Post” sind laut einem Bericht des ‘Wall Street Journal” von Cyberkriminellen kompromittiert worden. Die Angreifer hatten demnach auch Zugriff auf dienstliche E-Mails der US-Zeitung. Es wird angenommen, dass es sich dabei um einen gezielten Angriff einer Regierung aus dem Ausland handelt.Zu den…
-
North Korean APT Hackers Target Ukrainian Government Agencies to Steal Login Credentials
Tags: apt, attack, credentials, cyber, government, group, hacker, login, north-korea, phishing, threat, ukraineNorth Korean Advanced Persistent Threat (APT) hackers, specifically the Konni group, have shifted their focus to Ukrainian government agencies in a targeted phishing campaign aimed at stealing login credentials and distributing malware. This attack, observed in February 2025, marks a notable divergence from the group’s traditional targets and raises questions about potential strategic alliances with…
-
Hackers Compromise Discord Invite to Inject Malicious Links Delivering AsyncRAT
Threat actors have exploited Discord’s invite system to distribute malicious links, ultimately delivering AsyncRAT and other harmful payloads. Discord, a widely trusted platform for gamers, developers, and communities, has become a target for cybercriminals who abuse its infrastructure particularly the invite link and content delivery features to orchestrate phishing schemes and malware infections. This campaign,…
-
Hacktivists Strike Within Minutes of Israel Missile Attacks on Iran Nuclear Sites
The cyber domain is a primary theater in the Israel-Iran conflict. Organizations across Israel must be aware and brace for a wave of sophisticated and ideologically driven cyberattacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/hacktivists-strike-within-minutes-of-israel-missile-attacks-on-iran-nuclear-sites/
-
GrayAlpha Hackers Group Exploits Browser Updates to Deploy PowerNet Loader and NetSupport RAT
Tags: attack, cyber, cybercrime, exploit, finance, group, hacker, infrastructure, malware, powershell, rat, threat, updateA new infrastructure linked to GrayAlpha, a cybercriminal entity overlapping with the notorious FIN7 group, has been exposed. This financially motivated threat actor, active since at least 2013, is known for its sophisticated attacks targeting retail, hospitality, and financial sectors. Custom Malware Uncovered The latest findings reveal GrayAlpha’s use of custom malware, including a PowerShell…
-
Over 20 Malicious Google Play Apps Steal Users’ Login Credentials
Tags: android, credentials, crypto, cyber, cybersecurity, google, intelligence, login, malicious, phishingA major security alert has been issued for Android users after cybersecurity researchers uncovered more than 20 malicious applications on the Google Play Store designed to steal users’ login credentials, specifically targeting cryptocurrency wallet holders. The campaign, identified by Cyble Research and Intelligence Labs (CRIL), reveals a sophisticated phishing operation that has already compromised the…
-
Microsoft Purview DLP Now Controls Copilot’s Access to Sensitive Email Data
Microsoft is set to enhance data security in Microsoft 365 by extending Purview Data Loss Prevention (DLP) controls to Copilot’s handling of sensitive email data. Starting January 1, 2025, Microsoft 365 Copilot will be prevented from processing emails that carry sensitivity labels, marking a significant step forward in enterprise data protection. New Protections for Sensitive…
-
Anubis Ransomware Introduces Irreversible File Destruction Feature
A new and menacing player has emerged in the cybercrime landscape with the introduction of Anubis, a Ransomware-as-a-Service (RaaS) operation that blends traditional file encryption with a devastating file destruction capability. Active since December 2024, Anubis has quickly gained notoriety in 2025 for its unique >>wipe mode
-
WestJet Investigates Cyber-Attack Impacting Customers
Canadian airline WestJet is investigating a cyber-attack that struck on June 13 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/westjet-investigates-cyberattack/
-
What CISOs are doing to lock in cyber talent before they bolt
Tags: business, ciso, control, credentials, cyber, cybersecurity, finance, jobs, skills, software, strategy, tool, training, vulnerabilityBuild teams from within: Recruiting talent from within the business and training existing employees, even those traditional IT roles, is what helped another CISO, Chapman shares. “I always ask CISOs, ‘Have you looked internally first?’” he says.He explains how the CISO of an industrial organization needed OT security engineers but found them hard to source.…
-
Uncovering the Technique of Hiding Images in DNS TXT Entries
A curious technique has emerged: hiding images inside DNS TXT records. This approach, which at first glance seems unorthodox, leverages the flexibility of DNS TXT records to store arbitrary data, including the binary data that makes up an image. The method has gained attention among tech enthusiasts and security researchers, sparking discussions on platforms like Reddit…
-
Google Cloud Suffers Major Disruption After API Management Error
Google Cloud experienced one of its most significant outages in recent years, disrupting a vast array of services and impacting millions of users and businesses worldwide. The disruption, which lasted for over three hours, was traced back to a critical error in Google Cloud’s API management system, highlighting the vulnerabilities inherent in modern cloud infrastructure.…
-
IBM Backup Services Flaw Allows Hackers to Gain Elevated Access
A critical security vulnerability has been identified in IBM’s Backup, Recovery, and Media Services (BRMS) for IBM i, potentially exposing enterprise environments to privilege escalation attacks. The flaw, tracked as CVE-2025-33108, affects versions 7.4 and 7.5 of the BRMS software, which are widely used for automating backup and recovery operations on IBM i systems. Nature…
-
Why banks’ tech-first approach leaves governance gaps
In this Help Net Security interview, Rich Friedberg, CISO at Live Oak Bank, discusses how banks can better align cybersecurity efforts with broader cyber governance and risk … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/16/rich-friedberg-live-oak-bank-banking-cyber-governance/
-
KIA Ecuador Keyless Entry Systems Vulnerability Faces Major Theft Threat
A critical security flaw has been uncovered in the keyless entry systems (KES) widely used in KIA vehicles across Ecuador, exposing thousands of cars to a heightened risk of theft. The vulnerability, identified by independent hardware security researcher Danilo Erazo, centers on the use of outdated “learning code” technology in aftermarket key fobs homologated and…
-
Operationelle Resilienz Koordination & Kooperation im Fokus
Tags: bsi, business, ciso, cloud, cyber, cyberattack, cyersecurity, edr, iam, incident response, infrastructure, intelligence, RedTeam, resilience, strategy, threat, tool, zero-trustUm Unternehmen auf Cybervorfälle vorzubereiten, brauchen CISOs operationelle Resilienz.Die Aufgabe des CISOs besteht darin, sowohl technologische als auch prozessuale und organisatorische Voraussetzungen für die IT-Sicherheit seines Unternehmens zu schaffen. CISOs schaffen eine auf Resilienz abzielende Sicherheitsarchitektur, treiben die Integration interoperabler Plattformen voran und etablieren Prozesse zur kontinuierlichen Risikoüberwachung.Darüber hinaus sorgen sie für den Aufbau von…
-
Introducing Guernsey Cyber Security Centre
In creating Guernsey Cyber Security Centre, JCSC are working with the States of Guernsey to ensure all the Channel Islands have access to specialist support for cyber security incidents, as well as advice and guidance to built better and more effective defences. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/introducing-guernsey-cyber-security-centre/
-
Guardrails Breached: The New Reality of GenAI-Driven Attacks
From vibe hacking to malware development to deepfakes, bad actors are discovering more vulnerabilities to attack generative AI tools while also using AI to launch cyber attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/guardrails-breached-the-new-reality-of-genai-driven-attacks/
-
‘We’re being attacked all the time’: how UK banks stop hackers
Devastating attacks at M&S, the Co-op and Harrods highlight risks as lenders say cybersecurity is biggest expenseIt is every bank boss’s worst nightmare: a panicked phone call informs them a cyber-attack has crippled the IT system, rapidly unleashing chaos across the entire UK financial industry.As household names in other industries, including Marks & Spencer, grapple…
-
Week in review: Microsoft fixes exploited zero-day, Mirai botnets target unpatched Wazuh servers
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053) For … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/15/week-in-review-microsoft-fixes-exploited-zero-day-mirai-botnets-target-unpatched-wazuh-servers/
-
Why Proactive NHI Management is a Must?
Is Proactive NHI Management Our Best Bet Against Cyber Threats? The importance of non-human identities (NHIs) in cybersecurity cannot be overstated. These unique identifiers for automated systems and machine-to-machine communication form the bedrock of modern business infrastructure. But how can we contend with the risks they pose? Proactive NHI management might just be the solution….…
-
Cyber-Zwischenfall bei einer Fluggesellschaft in Kanada
Advisory: Cybersecurity incident First seen on westjet.com Jump to article: www.westjet.com/en-ca/news/2025/advisory–cybersecurity-incident-
-
Cyberangriff auf eine County-Verwaltung in Virginia, USA
Dollars or data likely motivated Albemarle County cyber incident, UVA expert says First seen on 29news.com Jump to article: www.29news.com/2025/06/13/dollars-or-data-likely-motivated-albemarle-county-cyber-incident-uva-expert-says/
-
Cyberangriff auf ein Krankenhaus in Indien
2 North Delhi Hospitals Hit By Cyber Attack First seen on medicaldialogues.in Jump to article: medicaldialogues.in/news/health/hospital-diagnostics/2-north-delhi-hospitals-hit-by-cyber-attack-150008
-
Cyberangriff auf ein Krankenhaus in Indien
2 North Delhi Hospitals Hit By Cyber Attack First seen on medicaldialogues.in Jump to article: medicaldialogues.in/news/health/hospital-diagnostics/2-north-delhi-hospitals-hit-by-cyber-attack-150008
-
M&S ‘praying for sun’ but full recovery from cyber-attack unlikely this summer
Shoppers report low availability as retailer prioritises clothing in partial resumption of online servicesThe bosses at Marks & Spencer will surely be praying for sun.As UK temperatures rise over the coming week, M&S will be hoping it prompts shoppers to fill their virtual baskets with shorts, swimwear and sandals to get its summer sales back…
-
Cyber weapons in the Israel-Iran conflict may hit the US
With Tehran’s military weakened, digital retaliation likely, experts tell The Reg First seen on theregister.com Jump to article: www.theregister.com/2025/06/13/cyber_weapons_israel_iran/
-
Supply chain security faces new uncertainty amid Trump’s cyber EO
First seen on scworld.com Jump to article: www.scworld.com/perspective/supply-chain-security-faces-new-uncertainty-amid-president-trumps-cyber-eo
-
Cybersecurity Strategy Shifts Amid Global Political Tensions
NCC Group’s Katharina Sommer on Why Nations Are Turning Inward on Cyber Defense. Geopolitical shifts are reshaping how countries approach cyber resilience. Katharina Sommer, group head of government affairs and analyst relations at NCC Group, explains why governments are turning inward and focusing on sovereign cybersecurity strategies as cross-border collaboration weakens. First seen on govinfosecurity.com…
-
ISMG Editors: Supply Chain Attacks Are Spiking – Here’s Why
Also: Trump’s Rollback of Cyber Rules, 23andMe’s Privacy Backlash. In this week’s update, four editors with ISMG unpack the sharp rise in software supply chain cyberattacks, U.S. President Donald Trump’s sweeping cybersecurity executive order, and the data privacy backlash over 23andMe’s bankruptcy and sale to the highest bidder. First seen on govinfosecurity.com Jump to article:…