Tag: cyber
-
Beware for Developers: 16 React Native Packages with Millions of Downloads Compromised Overnight
Cybersecurity researchers have uncovered a large-scale attack targeting the npm ecosystem, compromising 16 popular React Native packages with a combined download count exceeding one million per week. The attack, detected on June 6th, 2025, represents a significant escalation in the ongoing campaign by a sophisticated threat actor, previously linked to the compromise of the rand-user-agent…
-
Australian Naval Operations Accidentally Jam New Zealand’s Internet and Radio
Residents and businesses across New Zealand’s North and South Islands experienced an unexpected and widespread interruption to wireless internet and radio services. The cause was traced to HMAS Canberra, the Royal Australian Navy’s largest warship, as it navigated the Cook Strait en route to Wellington. The ship’s advanced navigation radar system, operating in the 5…
-
Why MSSPs Must Prioritize Cyber Risk Quantification in 2025
Have you ever had a client ask, “How much risk are we facing?” and all you had was a pie chart to show them? In 2025, that doesn’t cut it. Today’s business executives expect more. They want risk explained in clear, unambiguous terms”, and most of all, they want numbers. Not just because it sounds…
-
BadBox 2.0 botnet infects millions of IoT devices worldwide, FBI warns
BadBox 2.0 malware has infected millions of IoT devices globally, creating a botnet used for cyber criminal activities, the FBI warns. The FBI published a Public Service Announcement (PSA) to warn that cybercriminals are using the BADBOX 2.0 botnet to exploit IoT devices on home networks, like streaming devices, projectors, and infotainment systems, mostly made…
-
Malicious npm Utility Packages Enable Attackers to Wipe Production Systems
Socket’s Threat Research Team has uncovered two malicious npm packages, express-api-sync and system-health-sync-api, designed to masquerade as legitimate utilities while embedding destructive backdoors capable of annihilating production systems. Published under the npm alias >>botsailer
-
Critical Salesforce Vulnerability Exposes Global Users to SOQL Injection Attacks
In June 2025, a security researcher uncovered a critical SOQL (Salesforce Object Query Language) injection vulnerability in a default Salesforce Aura controller, affecting potentially thousands of deployments and millions of user records. The discovery highlights the risks of dynamic query construction and the importance of secure coding practices in enterprise cloud platforms. Discovery and Exploitation…
-
Kali GPT-Revolutionizing Penetration Testing with AI on Kali Linux
In the rapidly shifting digital world, cybersecurity professionals are constantly seeking innovative tools that not only streamline workflows but also empower users with deeper insights and automation. Enter Kali GPT”, a groundbreaking AI assistant tailored specifically for the Kali Linux ecosystem, engineered by XIS10CIAL. This article explores the genesis, capabilities, and tangible advantages of Kali…
-
Kimsuky Strikes Again Coordinated Attacks Target Facebook, Email, and Telegram
A recent investigation by Genians Security Center (GSC) has uncovered a highly sophisticated, multi-channel cyber espionage campaign attributed to the North Korea-aligned advanced persistent threat (APT) group known as Kimsuky. Between March and April 2025, the group leveraged Facebook, email, and Telegram to infiltrate targets primarily within the defense sector, North Korea-related activists, and cryptocurrency…
-
CISOs, are you ready for cyber threats in biotech?
The threat landscape in the bioeconomy is different from what most CISOs are used to. It includes traditional risks like data breaches, but the consequences are more complex. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/09/cyberbiosecurity-ciso-cyber-threats/
-
Trump cyber executive order takes aim at prior orders, secure software, identity
President Donald Trump signed an executive order Friday that rolls back parts of two executive orders from the Biden and Obama administrations. First seen on cyberscoop.com Jump to article: cyberscoop.com/trump-cyber-executive-order-takes-aim-at-prior-orders-secure-software-more/
-
Trump Rewrites Cybersecurity Policy in Executive Order
White House Limits Cyber Sanctions, Cuts Digital ID Mandates and Refocuses AI Rules. President Donald Trump signed an executive order on Friday that rewrites key cyber policies from the previous White House administration, removing digital ID mandates, mandating secure software standards and narrowing cyber sanctions to foreign actors. First seen on govinfosecurity.com Jump to article:…
-
TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations
The post TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/ta397s-global-targeting-tactics-reveal-indian-state-backed-cyber-operations/
-
Ensuring Certainty in NHIs Lifecycle Management
What Role does Certainty Play in the Management of NHIs Lifecycle? Where data breaches and cyber-threats pose significant risks, any security professional worth their salt knows the importance of having robust and efficient management practices. NHIs lifecycle management serves as one of the cornerstones of modern cybersecurity efforts. It helps curtail these risks by providing……
-
Why Securing NHIs Reduces Your Cyber Risk
Why is NHI Security Critical in Risk Management? Have you ever considered the potential security risk lurking? The reality is that the growing complexity of IT infrastructures, particularly in the cloud, presents new challenges for risk management and cyber protection. Among the most notable security risks lies in the management of Non-Human Identities (NHIs). Overseeing……
-
Trump cyber executive order takes aim at prior orders, secure software, more
The administration has yet to release the text of the order, instead summarizing it in a fact sheet. First seen on cyberscoop.com Jump to article: cyberscoop.com/trump-cyber-executive-order-takes-aim-at-prior-orders-secure-software-more/
-
EU Prepares for Transnational Cyberattacks
Cyber Blueprint Spells Out Measures to Coordinate Against Disruptive Hacks. Europe is girding for a possibility of a transnational cybersecurity incident through recommendations outlining a continental response for transnational cybersecurity threats. The Council of the European Union on Friday a EU Cyber Blueprint. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/eu-prepares-for-transnational-cyberattacks-a-28613
-
‘There Will Be Pain’: CISA Cuts Spark Bipartisan Concerns
Analysis of Proposed Budget, Workforce Cuts Reveal Risks to Cyber Readiness. The Trump administration’s 2026 budget proposal would eliminate over 1,000 positions and nearly $425 million from CISA, gutting cyber ops, risk modeling and election security – prompting warnings that the U.S. is weakening its national cyber defense amid rising global threats. First seen on…
-
ChatGPT used for evil: Fake IT worker resumes, misinfo, and cyber-op assist
OpenAI boots accounts linked to 10 malicious campaigns First seen on theregister.com Jump to article: www.theregister.com/2025/06/06/chatgpt_for_evil/
-
Inadequate experience, planned cyber spending cuts hurled at Trump’s national cyber director pick
Tags: cyberFirst seen on scworld.com Jump to article: www.scworld.com/brief/inadequate-experience-planned-cyber-spending-cuts-hurled-at-trumps-national-cyber-director-pick
-
CISOs must translate cyber threats into business risk
To manage risk effectively and secure board-level buy-in, CISOs must stop talking about technology and start speaking the language of business, according to a senior Check Point executive First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625493/CISOs-must-translate-cyber-threats-into-business-risk
-
New Rust-Developed InfoStealer Drains Sensitive Data from Chromium-Based Browsers
Tags: browser, chrome, credentials, cyber, cybersecurity, data, google, login, malware, microsoft, programming, rust, threatA newly identified information-stealing malware, crafted in the Rust programming language, has emerged as a significant threat to users of Chromium-based browsers such as Google Chrome, Microsoft Edge, and others. Dubbed >>RustStealer
-
Hundreds of Malicious GitHub Repos Targeting Novice Cybercriminals Traced to Single User
Sophos X-Ops researchers have identified over 140 GitHub repositories laced with malicious backdoors, orchestrated by a single threat actor associated with the email address ischhfd83[at]rambler[.]ru. Initially sparked by a customer inquiry into the Sakura RAT, a supposed open-source malware touted for its >>sophisticated anti-detection capabilities,
-
Cybersecurity Snapshot: Experts Issue Best Practices for Migrating to Post-Quantum Cryptography and for Improving Orgs’ Cyber Culture
Tags: access, attack, best-practice, business, cio, ciso, communications, computer, computing, conference, corporate, crypto, cryptography, cyber, cybersecurity, data, defense, email, encryption, finance, government, group, ibm, identity, incident, incident response, infrastructure, jobs, lessons-learned, metric, microsoft, mitre, monitoring, nist, risk, service, strategy, technology, threat, tool, training, update, vulnerability, vulnerability-management, warfareCheck out a new roadmap for adopting quantum-resistant cryptography. Plus, find out how your company can create a better cybersecurity environment. In addition, MITRE warns about protecting critical infrastructure from cyber war. And get the latest on exposure response strategies and on CISO compensation and job satisfaction. Dive into five things that are top of…
-
DragonForce Ransomware Reportedly Compromised Over 120 Victims in the Past Year
DragonForce, a ransomware group first identified in fall 2023, has claimed over 120 victims in the past year, marking its rapid ascent as a formidable player in the ransomware ecosystem. Initially operating under a Ransomware-as-a-Service (RaaS) model, DragonForce has since pivoted to a ransomware cartel structure, as announced in March 2025 on its data leak…
-
Beware: Fake AI Business Tools Spreading Hidden Ransomware
As small businesses increasingly adopt artificial intelligence (AI) tools to streamline operations, cybercriminals are seizing the opportunity to deploy ransomware through deceptive campaigns. According to a recent report by Cisco Talos, attackers are masquerading as legitimate AI software providers, embedding malware within counterfeit applications that mimic popular services. With 98% of small businesses using at…