Tag: cyber
-
UK NHS Rolls Out Voluntary Cyber Charter for IT Suppliers
Urges Companies to Regularly Patch Their Products. The British National Health Service is prodding suppliers to commit to voluntary cybersecurity measures in a bid to prevent disruptive hacks. Among the proposed measures are regularly patching IT systems, instituting multifactor authentication and requiring IT suppliers to monitor and log their systems to allow prompt incident response.…
-
Big Steelmaker Halts Operations After Cyber Incident
Nucor made it clear its investigation is still in the early stages and didn’t specify the nature or scope of the breach, nor who the threat actor might be. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/steel-manufacturer-stalls-operations-cyber-incident
-
Europol cracks down on cyber fraud syndicate
First seen on scworld.com Jump to article: www.scworld.com/brief/europol-cracks-down-on-cyber-fraud-syndicate
-
Appointment of new NSA, Cyber Command leaders reportedly imminent
Tags: cyberFirst seen on scworld.com Jump to article: www.scworld.com/brief/appointment-of-new-nsa-cyber-command-leaders-reportedly-imminent
-
CISA overturns modified cyber advisory dissemination plan
First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-overturns-modified-cyber-advisory-dissemination-plan
-
Cyber-Risk Calculator Takes the Guesswork Out of Assessment
Resilience’s new tool aims to help organizations better understand their risk profiles and make more informed decisions about improving their security posture. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/calculator-guesswork-measure-cyber-risk
-
NSA cyber director Luber to retire at month’s end
Tags: cyberDave Luber, a 38-year NSA veteran, is taking advantage of the early retirement option being offered by the agency as it aims to shed 8 percent of its civilian staff. First seen on therecord.media Jump to article: therecord.media/nsa-cyber-director-dave-luber-to-retire
-
Cyber fiends battering UK retailers now turn to US stores
DragonForce-riding ransomware ring also has ‘shiny object syndrome’ so will likely move on to another sector soon First seen on theregister.com Jump to article: www.theregister.com/2025/05/15/cyber_scum_attacking_uk_retailers/
-
Coinbase Data Breach Customers Personal Info, Government”‘ID Transaction Data Exposed
Coinbase, the largest cryptocurrency exchange in the United States, has disclosed a significant cybersecurity incident that could cost the company up to $400 million. The breach, revealed in a regulatory filing and confirmed by company officials, stemmed from a sophisticated insider campaign targeting the firm’s overseas support contractors and employees. Coinbase Data Breach On May…
-
Threat Actors Exploit Open Source Packages to Deploy Malware in Supply Chain Attacks
The Socket Threat Research Team has uncovered a surge in supply chain attacks where threat actors weaponize open source software libraries to deliver malicious payloads such as infostealers, remote shells, and cryptocurrency drainers. With modern development heavily reliant on ecosystems like npm, PyPI, Go Module, Maven Central, and RubyGems where 7090% of codebases consist of…
-
Record-Breaking $27 Billion Black Market ‘Haowang Guarantee’ Deals Conducted Behind Closed Doors
Major victory against online crime, two of the world’s largest illicit marketplaces-Huione Guarantee (also known as “Haowang Guarantee”) and Xinbi Guarantee-were forced offline on May 13, 2025. These platforms collectively enabled over $35 billion in transactions, mostly in the stablecoin Tether (USDT), for a range of illegal goods and services including money laundering, stolen data,…
-
CISA Alerts on Active Exploitation of Zero-Day Vulnerability in Multiple Fortinet Products
Tags: cisa, communications, cve, cyber, cybersecurity, detection, email, exploit, fortinet, infrastructure, network, vulnerability, zero-dayThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding five zero-day vulnerabilities affecting multiple Fortinet products, after evidence emerged of active exploitation in the wild. The vulnerabilities, tracked as CVE-2025-32756, impact Fortinet’s FortiVoice, FortiMail, FortiNDR, FortiRecorder, and FortiCamera platforms, widely used in enterprise environments for unified communications, email, network detection,…
-
Largest US crypto exchange says cost of recent cyber-attack could reach $400m
Hackers paid overseas Coinbase employees for account data; company is offering $20m reward for informationThe biggest cryptocurrency exchange in the US forecast that a cyber-attack that breached account data of a “small subset” of its customers would cost it between $180m and $400m. Coinbase said that price tag would not include the $20m ransom demanded…
-
A Unified Approach to Exposure Management: Introducing Tenable One Connectors and Customized Risk Dashboards
Unified visibility and context are the keys to an effective exposure management program. Learn how the new Tenable One connectors and unified dashboards give you a comprehensive view of your attack surface, help you streamline decision-making and empower your teams to uncover hidden risks, prioritize critical exposures and respond to threats with confidence. In 2022,…
-
North Korea’s ‘state-run syndicate’ looks at cyber operations as a survival mechanism
A new report from DTEX Systems is the deepest look at how North Korea’s remote IT workforce schemes are the tip of the iceberg when it comes to its cyber operations. First seen on cyberscoop.com Jump to article: cyberscoop.com/north-korea-cybercrime-dtex-research-center-227/
-
Inside Turla’s Uroboros Infrastructure and Tactics Revealed
In a nation-state cyber espionage, a recent static analysis of the Uroboros rootkit, attributed to the infamous APT group Turla, uncovers a chilling display of sophistication and mastery over Windows kernel internals. With the sample identified by the MD5 hash ed785bbd156b61553aaf78b6f71fb37b, this malware-first linked to Turla around 2014-2015-stands as a testament to the group’s elite…
-
Intruder vs. Acunetix vs. Attaxion: Comparing Vulnerability Management Solutions
The vulnerability management market is projected to reach US$24.08 billion by 2030, with numerous vendors offering seemingly different solutions to the same problem. How does an organization choose the right vulnerability management tool for its needs? Today, we compare three tools that offer overlapping (but different) vulnerability management capabilities”, Intruder, Acunetix, and Attaxion. We’ll start…
-
CISA Alerts on Five Active Zero-Day Windows Vulnerabilities Being Exploited
Tags: cisa, cyber, cybersecurity, exploit, infrastructure, kev, microsoft, mitigation, network, risk, vulnerability, windows, zero-dayCybersecurity professionals and network defenders, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five newly identified Windows 0-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities, currently exploited in the wild, present significant risks for organizations relying on Microsoft Windows environments. The CISA urges all stakeholders to prioritize immediate mitigation efforts…
-
Hackers Exploit Google Services to Send Malicious Law Enforcement Requests
Tags: cyber, cybersecurity, exploit, google, hacker, infrastructure, law, malicious, phishing, serviceCybersecurity researchers have uncovered a sophisticated phishing campaign where malicious actors exploit Google services to dispatch fraudulent law enforcement requests. This audacious scheme leverages the trust associated with Google’s infrastructure, specifically Google Forms and Google Drive, to craft and distribute highly convincing requests that appear to originate from legitimate law enforcement entities. The primary objective…
-
New .NET Multi-Stage Loader Targets Windows Systems to Deploy Malicious Payloads
A recently discovered .NET-based multi-stage loader has caught the attention of cybersecurity researchers due to its complex architecture and ability to deploy a range of malicious payloads on Windows systems. Tracked since early 2022 by Threatray, this loader employs a sophisticated three-stage process to deliver commodity stealers, keyloggers, and Remote Access Trojans (RATs) such as…
-
Coinbase Offers $20m Bounty to Take Down Cybercrime Ring Behind Hack
Coinbase is offering a $20m reward to help catch the threat actor behind a cyber-attack that could cost it between $180-$400m First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/coinbase-offers-20m-bounty/
-
Coinbase Agents Bribed, Data of ~1% Users Leaked; $20M Extortion Attempt Fails
Cryptocurrency exchange Coinbase has disclosed that unknown cyber actors broke into its systems and stole account data for a small subset of its customers.”Criminals targeted our customer support agents overseas,” the company said in a statement. “They used cash offers to convince a small group of insiders to copy data in our customer support tools…
-
Nucor Steel Manufacturer Halts Production After Cyberattack
Nucor Corporation, one of North America’s largest steel producers, has temporarily halted production at multiple facilities following a cybersecurity breach that compromised critical operational systems. The incident, disclosed in a May 15, 2025, SEC filing, marks one of the most significant cyberattacks on heavy industry infrastructure in recent years. While the Charlotte-based company has begun…
-
Enisa Launched New European Vulnerability Database to Strengthen Cybersecurity
European Union Agency for Cybersecurity (ENISA) has officially launched the European Vulnerability Database (EUVD), a groundbreaking platform designed to enhance digital security across the EU. Developed in accordance with the NIS2 Directive, the database is now operational and accessible to the public, aiming to aggregate, standardize, and disseminate vital information about cyber vulnerabilities affecting Information…
-
Xanthorox Emerging BlackHat AI Tool Empowering Hackers in Phishing and Malware Campaigns
Tags: ai, conference, crypto, cyber, cybercrime, cybersecurity, dark-web, github, hacker, intelligence, malware, phishing, toolArtificial intelligence platform named Xanthorox has emerged as a potent new tool for cybercriminals, enabling the automated generation of phishing campaigns, malware, and hyperrealistic deepfakes. Unlike traditional dark-web tools restricted to hidden forums, Xanthorox’s developer openly advertises its capabilities on public platforms like GitHub, YouTube, and Telegram while accepting cryptocurrency payments for access. Cybersecurity experts…
-
Node.js Vulnerability Enables Attackers to Crash Processes and Disrupt Services
Node.js project has released a critical security update addressing several vulnerabilities that could allow attackers to crash server processes and disrupt critical services. The security fixes, announced on May 14, 2025 by Node.js maintainer RafaelGSS, affect multiple release lines (LTS and Current) and target issues identified as CVE-2025-23166, CVE-2025-23167, and CVE-2025-23165. The updates are immediately…
-
Largest US crypto exchange hit by cyber-attack with costs expected of up to $400m
Hackers paid overseas Coinbase employees for account data; company is offering $20m reward for informationThe biggest cryptocurrency exchange in the US forecast that a cyber-attack that breached account data of a “small subset” of its customers would cost it between $180m and $400m. Coinbase said that price tag would not include the $20m ransom demanded…
-
Arctic Wolf führt Incident360-Retainer ein und definiert Cyber-Readiness and Response neu
Arctic Wolf, ein weltweit führender Anbieter von Security-Operations-Lösungen, gibt die Einführung des Arctic Wolf Incident360 Retainers bekannt ein neues Angebot, das proaktive Incident-Readiness mit einer umfassenden Incident-Response-Abdeckung kombiniert. Entwickelt als Ersatz für veraltete Service-Stundenmodelle, die teuer sein und den Reaktionsprozess verlangsamen können, bietet der Incident360-Retainer Unternehmen Kostentransparenz, Flexibilität und die Möglichkeit, schnell und gezielt […]…