Tag: cyber
-
Cardiff’s children’s chief confirms data leak 2 months after cyber risk was ‘escalated’
Department director admits Welsh capital’s council still trying to get heads around threat of dark web leaks First seen on theregister.com Jump to article: www.theregister.com/2025/03/28/cardiff_childrens_chief_says_city/
-
Navigating Cyber-Risks and New Defenses
Digital transformation has revolutionized industries with critical infrastructure, but it has also introduced new vulnerabilities. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/navigating-cyber-risks-new-defenses
-
Cyber-crew claims it cracked American cableco, releases terrible music video to prove it
Tags: cyberWOW! DID! SOMEONE! REALLY! STEAL! DATA! ON! 400K! USERS?! First seen on theregister.com Jump to article: www.theregister.com/2025/03/28/arkana_wow_ransomware/
-
Hoff’s Rule: People First
Dark Reading Confidential Episode 5: Christofer Hoff, chief secure technology officer at LastPass, shares the human side of the story of how he led his team through a major cyber incident and built from the ground up a security team and security culture. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/dark-reading-confidential-hoff-rule-people-first
-
5 ways federal agencies can reduce cyber risks from tech debt
First seen on scworld.com Jump to article: www.scworld.com/perspective/5-ways-federal-agencies-can-reduce-cyber-risks-from-tech-debt
-
Trump CISA Cuts Threaten US Election Integrity, Experts Warn
Expert speakers discussed the impact of reported cutbacks to CISA on the ability of local officials to protect against surging cyber-attacks on US election infrastructure First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/trump-cisa-cuts-us-election/
-
ISMG Editors: Ransomware’s Stealth vs. Spectacle Tactics
Tags: attack, china, cyber, cybersecurity, espionage, infrastructure, ransomware, strategy, tactics, updateAlso: Rapid7’s Boardroom Shake-Up, China’s Shift Tactical Cyber Shift. In this week’s update, ISMG editors unpacked stealth vs. spectacle in ransomware attacks, Rapid7’s boardroom shake-up led by activist investors, and China’s shift from cyber espionage to infrastructure sabotage – driving key shifts in global cybersecurity strategy and resilience. First seen on govinfosecurity.com Jump to article:…
-
Cybersecurity spending set to jump 12.2% in 2025
Global cybersecurity spending is expected to grow by 12.2% in 2025, according to the latest forecast from the IDC Worldwide Security Spending Guide. The rise in cyber threats … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/28/idc-cybersecurity-spending-2025/
-
aiSIEM-Cguard: Revolutionizing Cybersecurity with AI-Powered Threat Detection
In today’s evolving digital landscape, cyber threats are becoming increasingly sophisticated, targeting organizations of all sizes. Traditional security measures struggle to keep up with the sheer volume and complexity of modern cyberattacks. To counter these challenges, businesses need a proactive, AI-driven security solution that offers real-time threat detection, automated responses, and comprehensive security analytics. Seceon’s…
-
SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
From WannaCry to the MGM Resorts Hack, ransomware remains one of the most damaging cyberthreats to plague enterprises. Chainalysis estimates that corporations spend nearly $1 billion dollars on ransom each year, but the greater cost often comes from the reputational damage and operational disruption caused by the attack. Ransomware attacks typically involve tricking victims into…
-
New Python-Based Discord RAT Targets Users to Steal Login Credentials
A recently identified Remote Access Trojan (RAT) has raised alarms within the cybersecurity community due to its innovative use of Discord’s API as a Command and Control (C2) server. This Python-based malware exploits Discord’s extensive user base to execute commands, steal sensitive information, and manipulate both local machines and Discord servers. Bot Initialization and Functionality…
-
CISA Budget Cuts Weaken US Election Security, Officials Warn
State and Local Election Offices Face Growing Cyber Threat Amid Federal Budget Cuts. Top-ranking current and former security officials warned Thursday that President Donald Trump’s budget cuts to the Cybersecurity and Infrastructure Security Agency and other election security efforts have left U.S. election infrastructure vulnerable to escalating cyber threats. First seen on govinfosecurity.com Jump to…
-
MORSE Corp to pay $4.6M to settle cyber fraud lawsuit
First seen on scworld.com Jump to article: www.scworld.com/brief/morse-corp-to-pay-4-6m-to-settle-cyber-fraud-lawsuit
-
RFK Jr. Cuts at HHS Affect HIPAA, Cyber Response Units
HHS Laying Off 10,000 More People, Consolidating Divisions, Shifting Priorities. The U.S. Department of Health and Human Services announced a major restructuring and workforce reductions on Thursday. The changes disclosed so far include reshuffling units of HHS involved in healthcare sector cybersecurity response activities and HIPAA regulatory work. First seen on govinfosecurity.com Jump to article:…
-
CISOs’ Challenge: Securing MFA Adoption With Risk Messaging
Tags: ai, authentication, business, ciso, compliance, cyber, mfa, phishing, risk, tactics, vulnerabilityAICD’s Figueroa on Business-Focused Communication for Authentication Progress. Modern phishing tactics now leverage voice, SMS and AI-powered impersonation, yet many Asia-Pacific organizations continue relying on vulnerable single-factor authentication, said Marco Figueroa, senior manager of cyber security, risk and compliance at the Australian Institute of Company Directors. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisos-challenge-securing-mfa-adoption-risk-messaging-a-27848
-
Blacklock Ransomware Infrastructure Breached, Revealing Planned Attacks
Tags: access, attack, breach, cyber, cybersecurity, data, exploit, group, infrastructure, intelligence, leak, ransomware, vulnerabilityResecurity, a prominent cybersecurity firm, has successfully exploited a vulnerability in the Data Leak Site (DLS) of Blacklock Ransomware, gaining unprecedented access to the group’s infrastructure. This breach, occurring during the winter of 2024-2025, allowed researchers to collect substantial intelligence about the ransomware group’s activities and planned attacks. Exploitation of Local File Include Vulnerability The…
-
Classiscam Operators Use Automated Malicious Sites to Steal Financial Data
Classiscam, an automated scam-as-a-service operation, has been identified as a significant threat in Central Asia, leveraging sophisticated techniques to defraud users of online marketplaces and e-commerce platforms. This fraudulent scheme, highlighted in the High-Tech Crime Trends Report 2025, utilizes Telegram bots to generate fake websites that mimic legitimate services, effectively deceiving victims into sharing their…
-
OT-Sicherheit ohne Beeinträchtigung der Systemstabilität
TXOne Networks, ein führendes Unternehmen im Bereich der Sicherheit von Cyber-Physical Systems (CPS), hat die Version 3.2 seiner Stellar-Endpunktlösung veröffentlicht, um seine Fähigkeiten, vom Endpunktschutz bis hin zu umfassenderen Erkennungs- und Reaktionsmöglichkeiten in OT-Umgebungen (Operational-Technology), auszubauen. Stellar vereinfacht die Suche nach und Erkennung von Bedrohungen und überwindet gleichzeitig die Einschränkungen herkömmlicher IT-Lösungen für Endpoint-Detection and…
-
Threat Actors Compromise 150,000 Websites to Promote Chinese Gambling Platforms
A large-scale cyberattack has compromised approximately 150,000 legitimate websites by injecting malicious JavaScript to redirect visitors to Chinese-language gambling platforms. The campaign, first detected in February 2025 with 35,000 infected sites, has since expanded significantly, leveraging obfuscated scripts and iframe injections to hijack browsers. Attackers use domains like zuizhongyj[.]com to host payloads, which display full-screen…
-
Cyber Security Conference – Omniac-App warnt bei Datendiebstahl
First seen on security-insider.de Jump to article: www.security-insider.de/omniac-app-schwarz-digits-schutz-datenlecks-a-5ef4baca6dd4768c4f7895821fce4486/
-
UK NCSC offers security guidance for domain and DNS registrars
The UK National Cyber Security Centre (NCSC) has released security guidance for domain registrars and operators of Domain Name System (DNS) services. >>DNS registrars … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/27/ncsc-offers-security-guidance-for-domain-and-dns-registrars/
-
Threat Actors Use Fake Booking.com Emails to Deceive Hotel Staff and Gain System Access
A sophisticated phishing campaign targeting the hospitality industry has been uncovered, with threat actors impersonating Booking.com to gain access to hotel systems and customer data. Microsoft Threat Intelligence has attributed the ongoing attacks, which began in December 2024 and continued through February 2025, to a group known as Storm-1865. The campaign primarily targets North America,…
-
New Research Links RansomHub’s EDRKillShifter to Established Ransomware Gangs
ESET researchers have connections between the newly emerged ransomware-as-a-service (RaaS) group RansomHub and established ransomware gangs, including Play, Medusa, and BianLian. Emerging Threat Actor Connects Multiple Ransomware Operations The investigation centered on RansomHub’s custom EDR killer tool, EDRKillShifter, which has gained popularity among ransomware affiliates since its introduction in May 2024. The research team identified…
-
New FamousSparrow Malware Targets Hotels and Engineering Firms with Custom Backdoor
ESET researchers have uncovered new activity from the China-aligned APT group FamousSparrow, revealing two previously undocumented versions of their custom SparrowDoor backdoor. The group, thought to be inactive since 2022, compromised a US-based trade organization in the financial sector and a Mexican research institute in July 2024. The first variant closely resembles the CrowDoor malware…
-
The Importance of Allyship For Women in Cyber
Interview with Taylor Pyle, a Cybersecurity Engineer at Viasat on her experience with both cyber and mentorship. The post The Importance of Allyship For Women in Cyber appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/the-importance-of-ally-ship-for-women-in-cyber/
-
PlayBoy Locker Ransomware Targets Windows, NAS, and ESXi Systems
A new ransomware strain, PlayBoy LOCKER, has been identified targeting Windows, NAS, and ESXi systems. First discovered in September 2024 as a Ransomware-as-a-Service (RaaS) offering, the malware later had its full source code put up for sale in November, potentially enabling wider distribution by other threat actors. New Ransomware Strain Emerges with Multi-OS Capabilities The…
-
Kubernetes Ingress-nginx Remote Code Execution Vulnerability (CVE-2025-1974)
Overview Recently, NSFOCUS CERT detected that Kubernetes issued a security announcement and fixed the Kubernetes Ingress-nginx remote code execution vulnerability (CVE-2025-1974). The Ingress controller deployed in Kubernetes Pod can be accessed through the network without authentication. When the Admission webhook is open, an unauthenticated attacker can remotely inject any nginx configuration by sending a special…The…
-
Massive Data Breach Hits NSW Online Registry: 9,000+ Files Stolen
A major cybersecurity incident has struck the New South Wales court system, as cybercrime detectives investigate a significant data breach affecting the Department of Communities and Justice (DCJ). The breach targeted the NSW Online Registry Website (ORW), a critical platform that houses sensitive information related to both civil and criminal cases across the state. The…
-
Large-Scale Phishing Campaign Targets Defense and Aerospace Companies
A recent investigation by DomainTools Investigations (DTI) has uncovered a massive phishing infrastructure targeting defense and aerospace entities, particularly those linked to the conflict in Ukraine. This sophisticated campaign involves a network of mail servers supporting domains that mimic legitimate organizations, designed to steal critical credentials from employees in these sectors. The infrastructure relies on…