Tag: cyber
-
Why SMEs can no longer afford to ignore cyber risk
In this Help Net Security interview, Steven Furnell, Professor of Cyber Security at the University of Nottingham, illustrates how small and medium-sized businesses (SMEs) must … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/01/steven-furnell-university-of-nottingham-smes-risk-exposure/
-
Commvault Confirms Zero-Day Attack Breached Its Azure Cloud Environment
Commvault, a global leader in data protection and information management, has confirmed that a sophisticated cyberattack involving a zero-day vulnerability breached its Azure cloud environment earlier this week. The breach, attributed to a suspected nation-state threat actor, underscores the evolving risks faced by cloud service providers and their clients. On February 20, 2025, Commvault was…
-
FBI Uncovers 42,000 Phishing Domains Tied to LabHost PhaaS Operation
The Federal Bureau of Investigation (FBI) has revealed the existence of 42,000 phishing domains associated with the notorious LabHost phishing-as-a-service (PhaaS) platform. This operation, which spanned from November 2021 through April 2024, was recently disabled by law enforcement and had enabled cybercriminals to target millions of victims worldwide. LabHost: A Major Player in Cybercrime LabHost,…
-
Cyberangriff auf eine Wasserbehörde in Indien
Cyber attack attempt on BWSSB’s Water connection portal, chairman says no sensitive data compromised First seen on indianexpress.com Jump to article: indianexpress.com/article/cities/bangalore/cyber-attack-bwssbs-water-connection-sensitive-data-9975380/
-
Tor Browser 14.5.1 Released with Enhanced Security and New Features
The Tor Project has announced the official release of Tor Browser 14.5.1, introducing a host of security improvements and new features designed to bolster privacy and ease of use for millions around the globe. The new version is now available on the Tor Browser download page and through the Tor distribution directory. Key Security Updates Tor Browser…
-
How ‘native English’ Scattered Spider group linked to M&S attack operate
Cybersecurity expert says group are ‘unusual but potently threatening’ coalition of ransomware hackersIf there is one noticeable difference between some members of the Scattered Spider hacking community and their ransomware peers, it will be the accent.Scattered Spider has been linked to a <a href=”https://www.theguardian.com/business/2025/apr/29/m-and-s-cyber-attack-linked-to-hacking-group-scattered-spider”>cyber-attack on UK retailer Marks & Spencer. But unlike other <a href=”https://www.theguardian.com/business/2023/jan/13/what-is-lockbit-ransomware-and-how-does-it-operate-malware-royal-mail”>ransomware…
-
APT28 Cyber Espionage Campaign Targets French Institutions Since 2021
The French National Cybersecurity Agency (ANSSI) has released a detailed report exposing a sustained and strategic cyber-espionage campaign First seen on securityonline.info Jump to article: securityonline.info/apt28-cyber-espionage-campaign-targets-french-institutions-since-2021/
-
Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan
In a renewed cyber-espionage campaign observed in March 2025, the notorious APT group Earth Kasha, believed to operate First seen on securityonline.info Jump to article: securityonline.info/earth-kasha-refines-spear-phishing-tactics-in-espionage-campaign-targeting-taiwan-and-japan/
-
Terralogic Opfer eines Cyberangriffs mit Datenabfluss?
Ist jemand Kunde beim IT-Dienstleister und Cloud-Anbieter Terralogic? Der US-Anbieter ist mutmaßlich Opfer eines Cyberangriffs mit Ransomware geworden, bei dem Daten von Kunden abgeflossen sein sollen. Aktuell ist mir noch nichts an Details bekannt, aber eine Cyber-Gang reklamiert, Daten von … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/01/terralogic-opfer-eines-cyberangriffs-mit-datenabfluss/
-
QA Securely Yours: An Agony Aunt’s Guide to Surviving Cyber
What happens when two titans of cybersecurity (Rebecca Taylor, Threat Intelligence Knowledge Manager and Researcher at Secureworks, a Sophos company, and Amelia Hewitt, Founder of CybAid and Managing Director at Hewitt Partnerships) join forces to write a book? Securely Yours: An Agony Aunt’s Guide to Surviving Cyber! Securely Yours is a practical Agony Aunt-style guide…
-
Billbug Expands Cyber-Espionage Campaign in Southeast Asia
The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/billbug-cyber-espionage-campaign-southeast-asia
-
Russian APT28 hackers have redoubled efforts during Ukraine war, says French security agency
Tags: apt, attack, backdoor, cisco, credentials, crowdstrike, cyber, detection, exploit, finance, government, group, hacker, hacking, infrastructure, intelligence, Internet, mail, malicious, military, monitoring, network, phishing, russia, service, theft, ukraine, vpn, vulnerabilityTargeting and Compromise of French Entities Using the APT28 Intrusion Set, the group now aggressively targets the networks of government organizations and companies connected to Ukraine’s allies, including France.Since 2021, the group has targeted specific industrial sectors including aerospace, financial services, think tanks and research, local government, and government ministries.Nothing APT28 does stands out as…
-
Experts See Little Progress After Major Chinese Telecom Hack
Salt Typhoon Exposed Major Flaws in Telecom Networks. Few Changes Have Been Made. After China’s Salt Typhoon breach of U.S. telecom networks, federal experts told Congress on Wednesday the nation remains dangerously exposed to another attack – despite warnings, investigations and interagency coordination, all of which have yet to produce systemic cyber defense improvements. First…
-
Russia-linked group Nebulous Mantis targets NATO-related defense organizations
Tags: apt, cyber, data, defense, espionage, government, group, infrastructure, phishing, rat, russia, spear-phishingPRODAFT researchers warn of Russia-linked APT group Nebulous Mantis targeting NATO-related defense organizations Nebulous Mantis, a Russian-speaking cyber espionage group (aka Cuba, STORM-0978, Tropical Scorpius, UNC2596), used RomCom RAT and Hancitor since 2019 to target critical infrastructure, governments, and NATO-linked entities. Since mid-2022, they’ve deployed RomCom via spear-phishing for espionage, lateral movement, and data theft.…
-
Merlin Cyber-Rimini Street Alliance Targets Government ERP Support, Cost Savings, and Modernization
First seen on scworld.com Jump to article: www.scworld.com/news/merlin-cyber-rimini-street-alliance-targets-government-erp-support-cost-savings-and-modernization
-
Commvault Advances Cyber Resilience with Cleanroom Recovery Enhancements, Expands Partnership with CrowdStrike
First seen on scworld.com Jump to article: www.scworld.com/news/commvault-advances-cyber-resilience-with-cleanroom-recovery-enhancements-expands-partnership-with-crowdstrike
-
Rackspace and Rubrik Launch Cyber Recovery Cloud for Fast, Isolated Recovery
First seen on scworld.com Jump to article: www.scworld.com/news/rackspace-and-rubrik-launch-cyber-recovery-cloud-for-fast-isolated-recovery
-
At RSAC, Kristi Noem calls to rein in CISA and reset DHS cyber strategy
First seen on scworld.com Jump to article: www.scworld.com/news/at-rsac-kristi-noem-calls-to-rein-in-cisa-and-reset-dhs-cyber-strategy
-
The Expanding Role of CISOs in Tech and Corporate Governance
Team8’s Liran Grinberg on How CISOs Influence Boardrooms and Enterprise Security. With cyber risk ranked as one of the top threats to business continuity, cybersecurity has now become a core component to business survival. Liran Grinberg, co-founder and managing partner at Team8, said the CISO’s role has transformed into one of the most critical positions…
-
From TV5Monde to Govt: France Blames Russia’s APT28 for Cyberattacks
France accuses Russia’s APT28 hacking group (Fancy Bear) of targeting French government entities in a cyber espionage campaign…. First seen on hackread.com Jump to article: hackread.com/tv5monde-govt-france-russia-apt28-cyberattacks/
-
Youth experience in Britain on a charity worker visa | Brief letters
Charity volunteers | The magic of kitchen objects | Bread on the table | Vegan amore divino | M&S cyber-attackThere is already a form of youth experience programme (<a href=”https://www.theguardian.com/world/2025/apr/25/eu-may-accept-12-month-work-visas-for-youth-experience-scheme-with-uk”>EU may accept 12-month work visas for ‘youth experience’ scheme with UK, 25 April), not only for EU citizens but for any nationality to come to…
-
BSidesLV24 Ground Truth Looking For Smoke Signals In Financial Statements, For Cyber
Author/Presenter: Brandon Pinzon Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/bsideslv24-ground-truth-looking-for-smoke-signals-in-financial-statements-for-cyber/
-
AI-fueled cybercrime may outpace traditional defenses, Check Point warns
The security firm said in a new report that defenders should begin using AI to counter cyber criminals’ adoption of the technology. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-security-cyber-crime-data-leak-check-point-report/746669/
-
Ransomware bei einer Polizei in Tennessee, USA
Message from Your Sheriff Regarding April 14th Cyber Ransomware Incident – UPDATE First seen on facebook.com Jump to article: www.facebook.com/permalink.php
-
Co-op shuts off IT systems to contain cyber attack
A developing cyber incident at Co-op has forced the retailer to pull the plug on some of its IT systems as it works to contain the attack First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623455/Co-op-shuts-off-IT-systems-to-contain-cyber-attack
-
Trellix Launches Phishing Simulator to Help Organizations Detect and Prevent Attacks
Trellix, a leader in cybersecurity solutions, has unveiled its latest innovation, the Trellix Phishing Simulator, designed to empower organizations in proactively identifying and mitigating phishing attacks. As phishing remains a leading cause of security breaches, often exploiting human error as the weakest link, this advanced tool aims to transform how businesses address employee vulnerabilities. Integrated…
-
AiTM Phishing Kits Bypass MFA by Hijacking Credentials and Session Tokens
Tags: 2fa, attack, authentication, credentials, cyber, cybercrime, exploit, mfa, phishing, service, softwareDarktrace’s Security Operations Center (SOC) in late 2024 and early 2025, cybercriminals have been exploiting legitimate Software-as-a-Service (SaaS) platforms like Milanote to orchestrate sophisticated phishing campaigns. These attacks, bolstered by the Tycoon 2FA phishing kit, demonstrate an advanced Adversary-in-the-Middle (AiTM) approach that circumvents multi-factor authentication (MFA) protections. Leveraging Legitimate Services for Stealthy Attacks By abusing…
-
Nitrogen Ransomware Uses Cobalt Strike and Log Wiping in Targeted Attacks on Organizations
Threat actors have leveraged the Nitrogen ransomware campaign to target organizations through deceptive malvertising strategies. Recent investigations have uncovered a disturbingly effective method involving fake software downloads, such as a counterfeit “WinSCP” installer, propagated through malicious ads on platforms like Bing. One documented case revealed a user searching for “WinSCP download” via Microsoft Edge being…
-
Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks
Tags: access, attack, communications, control, cyber, cybersecurity, espionage, group, infrastructure, malware, rat, russia, tacticsCybersecurity researchers have shed light on a Russian-speaking cyber espionage group called Nebulous Mantis that has deployed a remote access trojan called RomCom RAT since mid-2022.RomCom “employs advanced evasion techniques, including living-off-the-land (LOTL) tactics and encrypted command and control (C2) communications, while continuously evolving its infrastructure leveraging First seen on thehackernews.com Jump to article: thehackernews.com/2025/04/nebulous-mantis-targets-nato-linked.html
-
The CISO’s Guide to Effective Cloud Security Strategies
As organizations accelerate cloud adoption, CISOs face unprecedented challenges securing dynamic, multi-cloud environments. The shift to cloud-native architectures, hybrid workloads, and decentralized data storage has expanded the attack surface, exposing enterprises to sophisticated threats like supply chain compromises, misconfigured APIs, and insider risks. With 70% of breaches now linked to cloud assets, CISOs must balance…