Tag: cyber
-
Schluss mit schlechter Software
Tags: cisa, ciso, cyber, cyberattack, infrastructure, nis-2, resilience, risk, software, update, vulnerabilitySoftwaresicherheit beginnt beim Hersteller nicht beim Nutzer.Die Aussagen von Jen Easterly, bis Januar 2025 Direktorin der US-Bundesbehörde CISA (Cybersecurity and Infrastructure Security Agency), bringen es auf den Punkt: ‘Sichere Software ist nicht billig oder einfach umzusetzen aber es ist der einzig gangbare Weg, um IT-Systeme nachhaltig zu schützen.”Easterly zog in der Vergangenheit auch immer wieder…
-
What the AI Boom Reveals About Cybersecurity Careers
Cyber Education Needs to Go Beyond the Checklist to Prepare Future Professionals AI is redefining how organizations work, learn and defend themselves. But while the tech is moving fast, training strategies meant to prepare security professionals often lag far behind. That gap is persistent, pervasive and reshaping the very nature of cybersecurity careers. First seen…
-
Midwestern telco Cellcom confirms cyber incident after days of service outages
Cellcom CEO Brighid Riordan said the company has been dealing with a “cyber incident” but they “simply don’t have a lot of facts.” First seen on therecord.media Jump to article: therecord.media/midwestern-cellcom-telcom-cyberattack
-
GenAI Cyber Risks Drive Shift in Security Spending
First seen on scworld.com Jump to article: www.scworld.com/brief/genai-cyber-risks-drive-shift-in-security-spending
-
Survey finds gaps in cyber threat intel sharing
First seen on scworld.com Jump to article: www.scworld.com/brief/survey-finds-gaps-in-cyber-threat-intel-sharing
-
Improved US cyber-focused foreign aid sought by tech firm coalition
Tags: cyberFirst seen on scworld.com Jump to article: www.scworld.com/brief/improved-us-cyber-focused-foreign-aid-sought-by-tech-firm-coalition
-
CYRISMA’s Mark Balovnev on Winning the Cyber ‘WhackMole’ Game
Tags: cyberFirst seen on scworld.com Jump to article: www.scworld.com/video/cyrismas-mark-balovnev-on-winning-the-cyber-whack-a-mole-game
-
Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics
Tags: cyber, email, exploit, hacker, intelligence, military, russia, service, spy, technology, threat, ukraine, vpn, vulnerabilityRussian cyber threat actors have been attributed to a state-sponsored campaign targeting Western logistics entities and technology companies since 2022.The activity has been assessed to be orchestrated by APT28 (aka BlueDelta, Fancy Bear, or Forest Blizzard), which is linked to the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center, Military Unit…
-
LLM03: Supply Chain FireTail Blog
Tags: ai, compliance, cyber, data, encryption, exploit, LLM, malicious, mitigation, monitoring, open-source, organized, privacy, risk, service, software, strategy, supply-chain, training, update, vulnerabilityMay 21, 2025 – Lina Romero – LLM03: Supply Chain 20/5/2025 Excerpt The OWASP Top 10 List of Risks for LLMs helps developers and security teams determine where the biggest risk factors lay. In this blog series from FireTail, we are exploring each risk one by one, how it manifests, and mitigation strategies. This week,…
-
M&S cyber attack disruption likely to last until July
M&S says it has moved into recovery mode after a ransomware attack, but expects some disruption to persist throughout the coming weeks. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366624272/MS-cyber-attack-disruption-likely-to-last-until-July
-
NCSC: Russia’s Fancy Bear targeting logistics, tech organisations
The NCSC and its partner agencies have blown the whistle on an extensive campaign of malicious cyber attacks orchestrated by the Russian state Fancy Bear operation. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366624164/NCSC-Russias-Fancy-Bear-targeting-logistics-tech-orgs
-
Hackers Target Mobile Users Using PWA JavaScript to Bypass Browser Security
A sophisticated new injection campaign has been uncovered, targeting mobile users through malicious third-party JavaScript to deliver a Chinese adult-content Progressive Web App (PWA) scam. This attack, which redirects users to sites like hxxps://xjdm166[.]com, leverages the unique capabilities of PWAs to retain users longer and evade traditional browser security mechanisms. Unlike typical phishing attempts, this…
-
Docker Zombie Malware Infects Containers for Crypto Mining and Self-Replication
Tags: api, attack, container, crypto, cyber, cybersecurity, data-breach, docker, exploit, infrastructure, kaspersky, malicious, malwareA novel malware campaign targeting containerized infrastructures has emerged, exploiting insecurely exposed Docker APIs to spread malicious containers and mine Dero cryptocurrency. Dubbed a “Docker zombie outbreak” by cybersecurity researchers at Kaspersky, this attack leverages a self-replicating propagation mechanism to transform compromised containers into “zombies” that mine cryptocurrency and infect new victims. The campaign, detected…
-
Hackers Masquerade as Organizations to Steal Payroll Logins and Redirect Payments from Employees
ReliaQuest, hackers have deployed a cunning search engine optimization (SEO) poisoning scheme to orchestrate payroll fraud against a manufacturing sector customer. This deceptive strategy involves crafting fake authentication portals that mirror legitimate organizational login pages, manipulating search engine results to rank these malicious sites at the top. Unsuspecting employees, searching for payroll portals on mobile…
-
PupkinStealer Exploits Web Browser Passwords and App Tokens to Exfiltrate Data Through Telegram
A newly identified .NET-based information-stealing malware, dubbed PupkinStealer (also known as PumpkinStealer in some reports), has surfaced as a significant cyber threat, targeting sensitive data such as web browser passwords and application session tokens. First observed in the wild around April 2025, this malware is believed to have roots in Russian-speaking cybercrime communities, with indicators…
-
New Scan Uncovers 150K Industrial Systems Worldwide Vulnerable to Cyberattacks
A groundbreaking study leveraging advanced application-layer scanning has exposed approximately 150,000 industrial control systems (ICS) worldwide that are directly accessible on the public internet, posing severe risks of catastrophic cyberattacks. Conducted over a year from January 2024 to January 2025, this research utilizing comprehensive IPv4 scanning data from Censys targets 17 widely used ICS protocols,…
-
Windows 11 Introduces Enhanced Administrator Protection to Strengthen Security Against Elevated Privilege Attacks
Microsoft has unveiled Administrator Protection, a groundbreaking security feature for Windows 11 designed to safeguard systems against privilege escalation attacks. This new capability creates a security boundary around administrative operations, significantly reducing the attack surface that hackers exploit when targeting elevated processes. According to Microsoft’s Digital Defense Report 2024, token theft incidents have escalated to…
-
The cyber-attack is costly and embarrassing. But M&S should pull through
If £300m can be whittled down to £150m, it’s a big hit but still a long way from upsetting M&S’s broader revivalShouldn’t a robust IT system be able to withstand the odd “human error”, such as somebody at a third-party supplier being hoodwinked by devious cybercriminals? Isn’t <a href=”https://www.theguardian.com/business/2025/may/21/cyber-attack-cost-marks-and-spencer-lost-sales-company-results-reveal”>£300m at the expensive end for these…
-
AI drives cyber strategies, security execs say
Basic vulnerabilities account for most cyberattacks, but security leaders say they’re more concerned about the risks of AI, new research shows. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-security-risks-executives-survey/748664/
-
ThreatLocker Patch Management: A Security-First Approach to Closing Vulnerability Windows
Patching is basic cyber hygiene, but executing it at scale, securely, and fast? That’s the real challenge. ThreatLocker’s Patch Management flips the script with control, visibility, and Zero Trust workflows built for today’s threat landscape. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/threatlocker-patch-management-a-security-first-approach-to-closing-vulnerability-windows/
-
The Day I Found an APT Group In the Most Unlikely Place
Dark Reading Confidential Episode 6: Cyber researchers Ismael Valenzuela and Vitor Ventura share riveting stories about the creative tricks they used to track down advanced persistent threat groups, and the surprises they discovered along the way. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/the-day-i-found-an-apt-group-in-the-most-unlikely-place
-
BEC- und FTF-Angriffe haben letztes Jahr den meisten Schaden angerichtet
Kürzlich hat der Cyberversicherungsanbieter Coalition seinen neuesten jährlichen Cyber-Claims-Report vorgelegt. Dessen Kernaussage: Die Mehrheit der Cyberversicherungsansprüche des Jahres 2024 resultierte aus der Kompromittierung von Geschäfts-E-Mail-Betrug und Überweisungsbetrug. 60 Prozent der Cyberversicherungsansprüche, so der Report, entfielen auf Business-E-Mail Compromise (BEC)-Angriffe. 29 Prozent hatten einen Funds-Transfer-Fraud (FTF)-Angriff zur Folge. Unternehmen rät der Report, das Sicherheitsbewusstsein ihrer Mitarbeiter…
-
TeleTrusT aktualisiert Positionspapier und fordert klare Impulse aus der Politik
Deutschlands digitale Sicherheit braucht einen Neustart strategisch, europäisch und wertebasiert. Mit dem überarbeiteten Positionspapier ‘Cyber-Nation” fordert der Bundesverband IT-Sicherheit (TeleTrusT) die Bundesregierung auf, endlich klare Prioritäten zu setzen. Denn in Zeiten wachsender geopolitischer Spannungen, neuer EU-Gesetze und technologischer Abhängigkeiten ist ein souveräner Umgang mit IT-Sicherheit überfällig. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/digitale-souveraenitaet-teletrust-aktualisiert-positionspapier-und-fordert-klare-impulse-aus-der-politik/
-
PowerDNS Vulnerability Allows Attackers to Trigger DoS Attacks Through Malicious TCP Connections
PowerDNS has released a critical security update to address a vulnerability in its DNSdist load balancer that could allow remote attackers to trigger denial of service attacks without authentication. The issue, tracked as CVE-2025-30193, was patched in version 1.9.10 released on May 20, 2025. Security researchers warn that organizations using DNSdist should apply this update…
-
VanHelsing Ransomware Builder Exposed on Hacker Forums
The cybersecurity landscape reveal that the VanHelsing ransomware operation has experienced a significant security breach with its source code being leaked publicly. According to security researchers, this leak occurred after an internal dispute with a former developer who attempted to monetize the code before it was released freely by the ransomware operators. The leaked materials…
-
IBM Warns: One-Third of Cyber Attacks Use Advanced Tactics to Steal Login Credentials
IBM X-Force’s 2024 cybersecurity report, nearly one-third of cyber intrusions now rely on identity-based attacks, exploiting valid login credentials to breach systems. This alarming trend, continuing for the second consecutive year, highlights a shift in threat actor strategies, moving away from traditional brute-force methods to stealthier, more persistent tactics. Attackers are increasingly leveraging sophisticated tools,…
-
SideWinder APT Hackers Exploits Legacy Office Vulnerabilities to Deploy Malware Undetected
Tags: apt, credentials, cyber, exploit, government, hacker, malware, microsoft, military, office, threat, vulnerabilityThe Acronis Threat Research Unit (TRU) has revealed an advanced campaign believed to be orchestrated by the SideWinder advanced persistent threat (APT) group. This operation, running through early 2025, has primarily targeted high-value government and military institutions across Sri Lanka, Bangladesh, and Pakistan, exploiting unpatched legacy Microsoft Office vulnerabilities to deploy credential-stealing malware while evading…