Tag: cyber
-
Iranian APT ‘BladedFeline’ Hides in Network for 8 Years
ESET published research on the Iranian APT BladedFeline, which researchers believe is a subgroup of the cyber-espionage entity APT34. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/iranian-apt-bladedfeline-hides-network-8-years
-
Cisco Alerts Users to Critical ISE Vulnerability Exposing Sensitive Data
Cisco has issued a critical security advisory (Advisory ID: cisco-sa-ise-aws-static-cred-FPMjUcm7) for its Identity Services Engine (ISE) when deployed on major cloud platforms”, Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). The vulnerability, tracked as CVE-2025-20286 and classified under CWE-259 (Use of Hard-coded Password), carries a CVSS v3.1 base score of 9.9, indicating…
-
Get out of the audit committee: Why CISOs need dedicated board time
Tags: ai, business, ciso, cyber, cybersecurity, data, framework, mitigation, resilience, risk, risk-management, strategy, technology, threat, updateThe full partnership model between CISO and board: Full and frank security discussions are more than just a ‘nice to have’. The SEC has indicated it expects public companies with senior leadership to be transparent in how they assess and communicate cybersecurity risks.By extension, CISOs have an important role in communicating risks to senior leadership…
-
U.S. Authorities Shut Down Major Dark Web Marketplace with 117,000 Users
In a blow to the cybercrime underworld, the U.S. Attorney’s Office for the Eastern District of Virginia announced the seizure of approximately 145 domains, spanning both darknet and traditional internet spaces, associated with the notorious BidenCash marketplace. This coordinated operation, executed with support from the U.S. Secret Service, FBI, Dutch National High Tech Crime Unit,…
-
Outlook Users Targeted by New HTML-Based Phishing Scheme
A recent phishing campaign has revealed a sophisticated technique that exploits Microsoft Outlook’s unique handling of HTML emails to conceal malicious links from corporate users. The attack, initially appearing as a standard phishing attempt impersonating a Czech bank, leverages conditional HTML comments to display different content depending on the email client used to open the…
-
Cyber Resilience in Zeiten geopolitischer Unsicherheit
Tags: cio, ciso, cloud, compliance, cyber, cyberattack, firewall, governance, infrastructure, monitoring, resilience, risk, risk-analysis, siem, update, vulnerability-managementCyberbedrohungen existieren längst nicht mehr im luftleeren Raum sie entstehen im Spannungsfeld von Geopolitik, regulatorischer Zersplitterung und einer stetig wachsenden digitalen Angriffsfläche.Cybersecurity ist heute ein rechtliches, operatives und geopolitisches Thema. Für CIOs und CISOs ist die Botschaft eindeutig: Resilienz bedeutet nicht mehr nur, zu reagieren, sondern vorbereitet zu sein. Vorbereitung heißt, Systeme und Teams aufzubauen,…
-
Minimierung von Schwachstellen in OT-Umgebungen
Die OT-Cybersicherheits-Governance-Plattform von TXOne Networks stellt in einzigartiger Weise aussagekräftige Leitlinien bereit, welche CPS-Schwachstellen zur Gewährleistung des Betriebs vorrangig berücksichtigt werden müssen. TXOne Networks, ein führendes Unternehmen im Bereich der Sicherheit für Cyber-Physical Systems (CPS), kündigt eine erweiterte Version seiner an. wird bereits von zahlreichen führenden Industrieunternehmen aus […] First seen on netzpalaver.de Jump to…
-
Quiet Moments Matter: Building Resilience Amid Cyber Crises
Invest in Preparation and Training During the Calmer Times Between Attacks Cyberattacks may make headlines, but the daily discipline of security – patching routines, threat hunting, tabletop exercises and user education campaigns – is where resilience is forged. These tasks might not feel heroic, but they build technical and human infrastructure to handle the next…
-
Trump’s CISA director, national cyber director picks obtain industry support
First seen on scworld.com Jump to article: www.scworld.com/brief/trumps-cisa-director-national-cyber-director-picks-obtain-industry-support
-
Group-IB CEO: Firms lack cyber threat direction
First seen on scworld.com Jump to article: www.scworld.com/brief/group-ib-ceo-firms-lack-cyber-threat-direction
-
Cyber defense unit elevated to new command status
First seen on scworld.com Jump to article: www.scworld.com/brief/cyber-defense-unit-elevated-to-new-command-status
-
New bill seeks unified energy cyber response
Tags: cyberFirst seen on scworld.com Jump to article: www.scworld.com/brief/new-bill-seeks-unified-energy-cyber-response
-
Why Identity Security Still Lags in Healthcare Sector
Identity security is still one of the most underinvested areas of cybersecurity across the healthcare sector, regardless of the depth of cyber resources available to many different types and sizes of entities, said Hugo Lai, CISO at Temple University Health System. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/identity-security-still-lags-in-healthcare-sector-i-5480
-
FBI: Play ransomware breached 900 victims, including critical orgs
In an update to a joint advisory with CISA and the Australian Cyber Security Centre, the FBI said that the Play ransomware gang had breached roughly 900 organizations as of May 2025, three times the number of victims reported in October 2023. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-play-ransomware-breached-900-victims-including-critical-orgs/
-
Microsoft Launches Free Security Program for European Governments
Tags: ai, china, cyber, cybersecurity, government, intelligence, microsoft, ransomware, russia, threatMicrosoft is offering European countries a new cybersecurity program for free to help them defend against threats from nation-states like China and Russia, ransomware gangs, and AI-powered cyber threats through greater intelligence sharing, investments, and partnerships. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/microsoft-launches-free-security-program-for-european-governments/
-
News alert: $198K in Grants Awarded to Boost Cybersecurity Workforce in Massachusetts
Boston, MA, Jun. 4, 2025, The Healey-Driscoll administration and Massachusetts Technology Collaborative’s (MassTech) MassCyberCenter awarded $198,542 to four Massachusetts-based programs focused on preparing professionals for the cybersecurity workforce. MassTech provided the funds through the Alternative Cyber Career Education (ACE) “¦ (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/news-alert-198k-in-grants-awarded-to-boost-cybersecurity-workforce-in-massachusetts/
-
CrowdStrike’s former CTO on cyber rivalries and how automation can undermine security for early-stage startups
“One of the biggest vulnerabilities in companies is actually humans,” CrowdStrike co-founder and former CTO Dmitri Alperovitch told TechCrunch in this week’s episode of Equity. “The more you automate, the more opportunities there are for people to find vulnerabilities in your system.” With the $50 billion Chinese AI market potentially slipping out of reach for…
-
Microsoft outlines three-pronged European cyber strategy
Microsoft chair Brad Smith outlines an expansive cyber programme targeting governments across Europe with enhanced threat intelligence and support First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625190/Microsoft-outlines-three-pronged-European-cyber-strategy
-
Infosecurity 2025: SMEs feel on their own in the face of cyber attacks
Project findings to be presented at Infosecurity Europe 2025 highlight vulnerability of SMEs to cyber attack First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625332/Infosecurity-2025-SMEs-feel-on-their-own-in-the-face-of-cyber-attacks
-
Threat Actors Exploit Malware Loaders to Circumvent Android 13+ Accessibility Safeguards
Threat actors have successfully adapted to Google’s stringent accessibility restrictions introduced in Android 13 and later versions. These safeguards, rolled out in May 2022, were designed to prevent malicious applications from abusing accessibility services by blocking such access for sideloaded apps. However, cybercriminals have found ways to bypass these protections, leveraging sophisticated malware loaders and…
-
DCRat Targets Latin American Users to Steal Banking Credentials
IBM X-Force has uncovered a series of targeted email campaigns orchestrated by Hive0131, a financially motivated threat group likely originating from South America. Observed in early May 2025, these campaigns specifically target users in Colombia, masquerading as official notifications from The Judiciary of Colombia, particularly the Civil Circuit of Bogota. The attacks aim to deliver…
-
Lumma Infostealer Developers Persist in Their Malicious Activities
Tags: credentials, cyber, cybercrime, group, infrastructure, malicious, malware, microsoft, service, toolA coordinated operation by Europol, the FBI, Microsoft, and other public and private sector partners targeted the Lumma infostealer, a prolific malware distributed via a malware-as-a-service (MaaS) model. Known for stealing credentials and being a tool of choice for notorious cybercriminal groups like Scattered Spider, Angry Likho, and CoralRaider, Lumma’s infrastructure faced significant disruption. Starting…
-
#Infosec2025: Cybersecurity Support Networks Too Fragmented for SMBs, Say Experts
Experts argue the case for “communities of support” to boost SMB cyber-resilience First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/infosec2025-cybersecurity-support/
-
New Eleven11bot Hacks 86,000 IP Cameras for Large-Scale DDoS Attack
The newly identified Eleven11bot malware has compromised over 86,000 IP cameras across the Asia-Pacific (APAC) region, transforming these devices into a massive botnet for launching large-scale Distributed Denial of Service (DDoS) attacks. This incident, detailed in the Q1 2025 DDoS overview from StormWall’s global scrubbing centers, underscores the escalating sophistication of cyber threats targeting Internet…
-
Malicious ‘Sleeper Agent’ Browser Extensions Infected 1.5 Million Users Globally
LayerX, a cybersecurity firm, has uncovered a sophisticated network of malicious browser extensions, dubbed “sleeper agents,” that are currently installed on nearly 1.5 million devices worldwide. These extensions, masquerading as legitimate in-browser sound management tools, are built on a shared codebase and infrastructure, indicating a coordinated effort by a single developer or group. Despite their…
-
Aembit Recognized on the 2025 Rising in Cyber List of Top Cybersecurity Startups
Aembit, the workload identity and access management (IAM) company, today announced its inclusion in Rising in Cyber 2025, an independent list launched by Notable Capital to spotlight the 30 most promising cybersecurity startups shaping the future of security. Unlike traditional rankings, Rising in Cyber 2025 honorees were selected through a multi-stage process grounded in real-world validation.…
-
Windows Authentication Coercion Attacks Present Major Risks to Enterprise Networks
Authentication coercion remains a potent attack vector in Windows environments, enabling attackers with even low-privileged domain accounts to force targeted systems, often high-value servers or domain controllers, to authenticate to attacker-controlled hosts. This technique is closely tied to NTLM and Kerberos relay attacks, where the coerced authentication session is intercepted and relayed to other services,…
-
New Malware Attack Uses Malicious Chrome Edge Extensions to Steal Sensitive Data
Cybersecurity experts from Positive Technologies’ Security Expert Center have uncovered a sophisticated malicious campaign dubbed >>Phantom Enigma,