Tag: cyber
-
US Treasury sanctioned the firm Funnull Technology as major cyber scam facilitator
The U.S. sanctioned Funnull Technology and Liu Lizhi for aiding romance scams that caused major crypto losses through fraud infrastructure. The U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Philippines-based company Funnull Technology Inc. and its admin Liu Lizhi for enabling romance scams, causing $200M in U.S. victim losses. A romance scam…
-
Hackers Use AI-Generated Videos on TikTok to Spread Info-Stealing Malware
TrendMicro has uncovered a sophisticated campaign where threat actors are exploiting TikTok to distribute information-stealing malware. By leveraging AI-generated videos posing as tutorials for unlocking pirated software, cybercriminals trick unsuspecting viewers into executing malicious PowerShell commands. These commands download dangerous malware strains such as Vidar and StealC, designed to harvest sensitive data from infected systems.…
-
Weaponized PyPI Package Executes Supply Chain Attack to Steal Solana Private Keys
A chilling discovery by Socket’s Threat Research Team has exposed a meticulously crafted supply chain attack on the Python Package Index (PyPI), orchestrated by a threat actor using the alias >>cappership.
-
Novel Malware Evades Detection by Skipping PE Header in Windows
Researchers have identified a sophisticated new strain of malware that bypasses traditional detection mechanisms by entirely omitting the Portable Executable (PE) header in Windows environments. This innovative evasion tactic represents a significant shift in how malicious software can infiltrate systems, posing a critical challenge to conventional antivirus and endpoint detection solutions. Breakthrough in Malware Evasion…
-
UK MoD Launches New Cyber Warfare Command
The UK MoD has unveiled a new Cyber and Electromagnetic Command, which will focus on offensive cyber operations and “electromagnetic warfare” capabilities First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-mod-cyber-warfare-command/
-
Safari Flaw Exploited by BitM Attack to Steal User Login Data
A new wave of phishing attacks, known as Fullscreen Browser-in-the-Middle (BitM) attacks, is exploiting browser features to steal user credentials with unprecedented stealth. Unlike traditional phishing, which relies on fake websites and visible clues, BitM attacks leverage remote browser sessions and the Fullscreen API to create convincing overlays that mask all browser interface elements, including…
-
Next.js Dev Server Vulnerability Leads to Developer Data Exposure
A recently disclosed vulnerability, CVE-2025-48068, has raised concerns among developers using the popular Next.js framework. This flaw, affecting versions 13.0.0 through 15.2.1 when the App Router is enabled, allows attackers to exploit the development server via Cross-site WebSocket Hijacking (CSWSH), potentially exposing sensitive application source code. The issue has been addressed in version 15.2.2, but…
-
The UK wants you to sign up for £1B cyber defense force
War in Ukraine causes major rethink in policy and spending First seen on theregister.com Jump to article: www.theregister.com/2025/05/30/uk_cyber_defense/
-
Critical Cisco IOS XE Flaw Permits Arbitrary File Upload, PoC Released
A critical security vulnerability, tracked as CVE-2025-20188, has been discovered in Cisco IOS XE Wireless LAN Controllers (WLCs), threatening enterprise wireless infrastructures worldwide. This flaw, scoring a maximum 10.0 on the CVSS scale, allows unauthenticated remote attackers to upload arbitrary files and potentially execute commands as root, granting full control over affected devices. The vulnerability…
-
North Korean IT Workers Exploit Legitimate Software and Network Tactics to Evade EDR
A North Korean IT worker, operating under a false identity, was uncovered infiltrating a Western organization with a sophisticated remote-control system. This incident, exposed during a U.S. federal raid on a suspected laptop farm, showcases a chilling trend where adversaries leverage legitimate software and low-level network protocols to evade traditional Endpoint Detection and Response (EDR)…
-
Hackerangriff auf Außenministerium alarmiert Nato und EU
Die EU macht chinesische Hacker für eine bösartige Cyberkampagne gegen das Außenministerium in Tschechien verantwortlich.Ein mutmaßlicher chinesischer Hackerangriff gegen das Außenministerium in Tschechien alarmiert die Nato und die EU. In einer gemeinsamen Erklärung der 32 Nato-Staaten heißt es, man beobachte mit wachsender Besorgnis die zunehmenden böswilligen Cyberaktivitäten, die von der Volksrepublik China ausgehen und sei…
-
ConnectWise Hit by Advanced Cyberattack: Internal Data at Risk
ConnectWise, a leading provider of IT management and remote access software, has confirmed a cyberattack attributed to a sophisticated nation-state actor. The breach, discovered in May 2025, impacted a limited number of customers using the company’s ScreenConnect cloud platform, a tool widely used for remote support and system maintenance. ConnectWise responded by engaging forensic experts…
-
DragonForce entfesselt den Machtkampf im Cyber-Untergrund
Nach dem Fall von LockBit kämpfen neue Angreifergruppen um die Vorherrschaft im Ransomware-‘Geschäft”. Dabei schrecken auch vor Angriffen auf ihre Konkurrenten nicht zurück. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/dragonforce-entfesselt-den-machtkampf-im-cyber-untergrund/
-
Krankenhaus-Betreiber in Großbritannien von Cyberangriff auf Mobile Device Management betroffen
Cyber security incident at UCLH First seen on uclh.nhs.uk Jump to article: www.uclh.nhs.uk/news/cyber-incident-uclh-may2025
-
Versicherungsunternehmen in Singapur von Cyberangriff auf einen Dienstleister betroffen
Details of 146 Income Insurance policyholders compromised after cyber attack of external vendor First seen on straitstimes.com Jump to article: www.straitstimes.com/singapore/consumer/details-of-146-income-insurance-policyholders-compromised-after-cyberattack-on-external-vendor
-
Apache Tomcat CGI Servlet Flaw Enables Security Constraint Bypass
A newly disclosed vulnerability, CVE-2025-46701, has been identified in Apache Tomcat’s CGI servlet, allowing attackers to bypass security constraints under specific conditions. The flaw, announced on May 29, 2025, is rooted in the improper handling of case sensitivity within the pathInfo component of URLs mapped to the CGI servlet. When Tomcat is deployed on a…
-
SentinelOne Recovers: Platform Back Online After Extended Outage
On May 29, 2025, SentinelOne, a leading cybersecurity provider, experienced a significant platform outage that disrupted access to its commercial customer consoles worldwide. The incident began earlier in the day and was promptly acknowledged by SentinelOne, which communicated updates to its customers and partners through its support portal and direct messaging. The outage primarily affected…
-
ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach
ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor.”ConnectWise recently learned of suspicious activity within our environment that we believe was tied to a sophisticated nation-state actor, which affected a very small…
-
Security outfit SentinelOne’s services back online after lengthy outage
Probably not a cyber-incident, but definitely not a good look First seen on theregister.com Jump to article: www.theregister.com/2025/05/30/sentinelone_outage/
-
Webinar | How to Build a Platform-Based Defense Against Evolving Cyber Threats
Palo Alto Networks on How to Construct a Defense for Modern Threats. The rapid evolution of cyber threats, amplified by the integration of AI into adversarial tactics, calls for a shift in defensive strategies. Traditional approaches are no longer sufficient to address the sophistication, scale, and speed of modern attacks. First seen on govinfosecurity.com Jump…
-
CISA’s New SIEM Guidance Tackles Visibility and Blind Spots
US, Australian Cyber Agencies Say Visibility Gaps Threaten Detection and Response. The Cybersecurity and Infrastructure Security Agency issued new guidance urging organizations to streamline Security Information and Event Management platform integration by prioritizing impactful log data and reducing blind spots that continue to plague even mature security operations centers. First seen on govinfosecurity.com Jump to…
-
Covenant Health Dealing With Cyberattack Affecting Hospitals
Catholic Healthcare Organization Took IT Systems Offline in Response to Incident. Covenant Health, a Catholic healthcare organization serving New England and parts of Pennsylvania, is dealing with a cyber incident that has forced the entity to take its IT systems offline, affecting services at several of its facilities. That includes some hospitals and medical testing…
-
Over 9,000 Routers Hijacked: ASUS Users Caught in Ongoing Cyber Operation
Over 9,000 ASUS routers were hacked in a stealth cyberattack exploiting CVE-2023-39780. Learn how it works and what ASUS users should do to stay safe. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/asus-routers-hijacked-2025/
-
UK Launches ‘Kill Web’ Linking Cyber Operations and Military
New Cyber and Electromagnetic Command Pitched as Lessons Learned from Ukraine. The United Kingdom pledged Thursday one billion pounds for a military Digital Targeting Web the government said will enable quick fire targeting of enemy assets, including through offensive cyber operations. Ways of warfare are rapidly changing, said Defense Secretary John Healy. First seen on…
-
Threat Actors Exploit Nifty[.]com Infrastructure in Sophisticated Phishing Attack
Threat actors have orchestrated a multi-wave phishing campaign between April and May 2025, leveraging the legitimate infrastructure of Nifty[.]com, a prominent Japanese Internet Service Provider (ISP), to execute their attacks. Uncovered by Raven, a leading threat detection entity, this operation stands out due to its ability to evade conventional email security systems by abusing trusted…
-
US government sanctions tech company involved in cyber scams
The Treasury said FUNNULL was involved in providing infrastructure for pig butchering crypto scams. First seen on techcrunch.com Jump to article: techcrunch.com/2025/05/29/us-government-sanctions-tech-company-involved-in-cyber-scams/
-
PureHVNC RAT Uses Fake Job Offers and PowerShell to Evade Security Defenses
A new and highly evasive malware campaign delivering the PureHVNC Remote Access Trojan (RAT) has been identified by Netskope Threat Labs, showcasing a complex multi-layer infection chain designed to bypass modern security defenses. This campaign, active in 2024, leverages fake job offers from well-known global brands like Bershka, Fragrance Du Bois, John Hardy, and Dear…
-
Interlock Ransomware Uses NodeSnake RAT for Persistent Access to Corporate Networks
In a two UK-based universities have fallen victim to a sophisticated Remote Access Trojan (RAT) dubbed NodeSnake within the past two months. According to analysis by Quorum Cyber’s Threat Intelligence (QCTI) team Report, this malware, likely deployed by the ransomware group Interlock, showcases advanced capabilities for persistent access and network infiltration. Emerging Threat Targets Higher…