Tag: cyber
-
AiTM Phishing Kits Bypass MFA by Hijacking Credentials and Session Tokens
Tags: 2fa, attack, authentication, credentials, cyber, cybercrime, exploit, mfa, phishing, service, softwareDarktrace’s Security Operations Center (SOC) in late 2024 and early 2025, cybercriminals have been exploiting legitimate Software-as-a-Service (SaaS) platforms like Milanote to orchestrate sophisticated phishing campaigns. These attacks, bolstered by the Tycoon 2FA phishing kit, demonstrate an advanced Adversary-in-the-Middle (AiTM) approach that circumvents multi-factor authentication (MFA) protections. Leveraging Legitimate Services for Stealthy Attacks By abusing…
-
Nitrogen Ransomware Uses Cobalt Strike and Log Wiping in Targeted Attacks on Organizations
Threat actors have leveraged the Nitrogen ransomware campaign to target organizations through deceptive malvertising strategies. Recent investigations have uncovered a disturbingly effective method involving fake software downloads, such as a counterfeit “WinSCP” installer, propagated through malicious ads on platforms like Bing. One documented case revealed a user searching for “WinSCP download” via Microsoft Edge being…
-
US Homeland Secretary Kristi Noem Details Cyber Strategy
‘Making America Safe Again Through Cyberdefense’ Is Focus of Her RSAC Speech. Cybersecurity is national security, said U.S. Homeland Security Secretary Kristi Noem during an RSAC Conference speech detailing her agenda for revamping the Department of Homeland Security’s approach to cybersecurity, including a streamlined Cybersecurity and Infrastructure Security Agency. First seen on govinfosecurity.com Jump to…
-
Researchers Reveal Threat Actor TTP Patterns and DNS Abuse in Investment Scams
Cybersecurity researchers have uncovered the intricate tactics, techniques, and procedures (TTPs) employed by threat actors in investment scams, which, according to the Federal Trade Commission (FTC), resulted in a record-breaking loss of US$5.7 billion in 2024-a 24% surge from the previous year. These scams, often disguised as legitimate opportunities such as cryptocurrency exchanges, leverage advanced…
-
How CISOs Can Strengthen Supply Chain Security in 2025
The responsibilities of Chief Information Security Officers (CISOs) are rapidly evolving as digital transformation and global interconnectivity reshape the modern supply chain. In 2025, the supply chain will be more than just a logistical function; it will be a complex, dynamic web of partners, vendors, and technologies, each introducing new vulnerabilities and attack vectors. High-profile…
-
Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks
Tags: access, attack, communications, control, cyber, cybersecurity, espionage, group, infrastructure, malware, rat, russia, tacticsCybersecurity researchers have shed light on a Russian-speaking cyber espionage group called Nebulous Mantis that has deployed a remote access trojan called RomCom RAT since mid-2022.RomCom “employs advanced evasion techniques, including living-off-the-land (LOTL) tactics and encrypted command and control (C2) communications, while continuously evolving its infrastructure leveraging First seen on thehackernews.com Jump to article: thehackernews.com/2025/04/nebulous-mantis-targets-nato-linked.html
-
The CISO’s Guide to Effective Cloud Security Strategies
As organizations accelerate cloud adoption, CISOs face unprecedented challenges securing dynamic, multi-cloud environments. The shift to cloud-native architectures, hybrid workloads, and decentralized data storage has expanded the attack surface, exposing enterprises to sophisticated threats like supply chain compromises, misconfigured APIs, and insider risks. With 70% of breaches now linked to cloud assets, CISOs must balance…
-
AI-fueled cyber crime at risk of outpacing traditional defenses, Check Point warns
The security firm said in a new report that defenders should begin using AI to counter cyber criminals’ adoption of the technology. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-security-cyber-crime-data-leak-check-point-report/746669/
-
WhatsApp Unveils New AI Features While Ensuring Full Message Secrecy
WhatsApp, the world’s most popular messaging platform, has announced a major expansion of artificial intelligence (AI) capabilities, promising to enhance user experience while reinforcing its longstanding commitment to privacy and message secrecy. Meta, WhatsApp’s parent company, has integrated its generative AI assistant, Meta, directly into the app, allowing users to ask questions, generate images, and…
-
Wormable AirPlay Zero-Click RCE Flaw Allows Remote Device Hijack via Wi-Fi
A major set of vulnerabilities-collectively named “AirBorne”-in Apple’s AirPlay protocol and SDK have been unveiled, enabling an array of severe attack vectors. Most critically, these flaws allow zero-click “wormable” Remote Code Execution (RCE), meaning attackers can take over Apple and third-party devices via Wi-Fi without any user interaction. The impact spans billions of devices globally, including…
-
DARPA believes AI Cyber Challenge could upend patching as the industry knows it
Federal research leaders suggested Tuesday that AI could lead industries to “nearly eliminate software vulnerabilities” in critical infrastructure. First seen on cyberscoop.com Jump to article: cyberscoop.com/darpa-ai-grand-challenge-rsac-2025-patching/
-
Chrome 136 Fixes 20-Year-Old Privacy Bug in Latest Update
Google has begun rolling out Chrome 136 to the stable channel for Windows, Mac, and Linux, bringing significant security and privacy upgrades to millions of users worldwide. The update, set to be distributed over the coming days and weeks, addresses a range of vulnerabilities. However, its most notable change closes a privacy loophole that has…
-
Why cyber resilience must be part of every organization’s DNA
As AI brings about excitement and transformative potential, the report reveals that organizations are forging ahead with innovations despite increased security concerns, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/30/rethink-cyber-resilience/
-
Gaining Independence with NHI Lifecycle Management
Can Non-Human Identities Truly Empower Independent Security Systems? Non-Human Identities (NHIs) are becoming an unavoidable part of our cyber defenses. Managing their lifecycle has become an integral aspect of creating independent security systems. By embracing NHI lifecycle management, professionals can help reinforce their organization’s security architecture, reduce associated risks, and increase operational efficiency. Why is……
-
DHS Secretary Noem: CISA needs to get back to ‘core mission’
In an appearance at the 2025 RSAC Conference, the Homeland Security secretary said the cyber agency was too focused on being the “Ministry of Truth” under the previous administration. First seen on cyberscoop.com Jump to article: cyberscoop.com/kristi-noem-rsac-2025-cisa-mission/
-
Cyber experts, Democrats urge Trump administration not to break up cyber coordination in State reorg
Tags: cyberSplitting up the Cyberspace and Digital Policy bureau undercuts efforts to streamline cyber efforts at the department and undermines coordination in the U.S. and abroad, critics of the plan argue. First seen on cyberscoop.com Jump to article: cyberscoop.com/state-department-reorg-cyber-diplomacy-cyberspace-digital-policy/
-
Gov.uk One Login yet to meet government cyber security standards for critical public services
The government’s flagship digital identity system still does not fully conform to key national security standards three years after launch, while questions remain over whether historic security problems have been resolved First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623357/Govuk-One-Login-yet-to-meet-government-cyber-security-standards-for-critical-public-services
-
Trump’s undermining of federal cyber efforts demands outrage, says ex-CISO chief Krebs
First seen on scworld.com Jump to article: www.scworld.com/brief/trumps-undermining-of-federal-cyber-efforts-demands-outrage-says-ex-ciso-chief-krebs
-
Report: Cyber threats bombard cybersecurity vendors
First seen on scworld.com Jump to article: www.scworld.com/brief/report-cyber-threats-bombard-cybersecurity-vendors
-
Palo Alto Networks’ reported ProtectAI buy for over $500M accompanied by new cyber tool releases
First seen on scworld.com Jump to article: www.scworld.com/brief/palo-alto-networks-reported-protectai-buy-for-over-500m-accompanied-by-new-cyber-tool-releases
-
Blackpoint Cyber’s New CompassOne Drives Unified Security Posture for MSSPs
First seen on scworld.com Jump to article: www.scworld.com/news/blackpoint-cybers-new-compassone-drives-unified-security-posture-for-mssps
-
Cyber Espionage Campaign Targets Uyghur Exiles with Trojanized Language Software
A sophisticated cyberattack targeted senior members of the World Uyghur Congress (WUC), the largest Uyghur diaspora organization, using a weaponized version of UyghurEditPP-a trusted open-source Uyghur language text editor. This incident exemplifies the technical evolution of digital transnational repression and the exploitation of cultural software by state-aligned threat actors, likely linked to the Chinese government.…
-
From Mission-Centric to People-Centric: Competitive Leadership in Cyber
Making a case for empathy in cyber-leadership roles as a strategic business advantage. First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/mission-people-competitive-leadership-cyber
-
WarGames it’s not 1983 anymore
China’s state-sponsored cyber operations, driven by groups like Volt Typhoon, Salt Typhoon, Brass Typhoon, and APT41, and amplified by techniques like Fast Flux DNS, are not chasing Hollywood apocalypse”, they’re seizing America’s networks, turning our infrastructure into a weapon against us. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/wargames-its-not-1983-anymore/
-
Researchers Uncover SuperShell Payloads and Various Tools in Hacker’s Open Directories
Tags: control, cyber, cybersecurity, hacker, infrastructure, linux, malicious, open-source, risk, software, toolCybersecurity researchers at Hunt have uncovered a server hosting advanced malicious tools, including SuperShell command-and-control (C2) payloads and a Linux ELF Cobalt Strike beacon. The discovery, originating from a routine search for open-source proxy software, highlights the pervasive risks of unsecured infrastructure and the sophistication of modern cyber threats. Hunt’s continuous scanning of public IPv4…
-
Konni APT Deploys Multi-Stage Malware in Targeted Organizational Attacks
A sophisticated multi-stage malware campaign, potentially orchestrated by the North Korean Konni Advanced Persistent Threat (APT) group, has been identified targeting entities predominantly in South Korea. Cybersecurity experts have uncovered a meticulously crafted attack chain that leverages advanced obfuscation techniques and persistent mechanisms to compromise systems and exfiltrate sensitive data. This campaign underscores the persistent…
-
Outlaw Cybergang Launches Global Attacks on Linux Environments with New Malware
The Outlaw cybergang, also known as “Dota,” has intensified its global assault on Linux environments, exploiting weak or default SSH credentials to deploy a Perl-based crypto mining botnet. Detailed insights from a recent incident response case in Brazil, handled by Kaspersky, reveal the group’s evolving tactics. Sophisticated Threat Targets Weak SSH Credentials The attackers target…
-
Google Reports 75 Zero-Day Vulnerabilities Actively Exploited in the Wild
In a comprehensive report released by the Google Threat Intelligence Group (GTIG), 75 zero-day vulnerabilities were identified as actively exploited in the wild throughout 2024, marking a slight decline from 98 in 2023 but an increase from 63 in 2022. These vulnerabilities, defined as flaws exploited before a patch becomes publicly available, underscore a persistent…
-
New Gremlin Stealer Advertised on Hacker Forums Targets Credit Card Data and Login Credentials
A formidable new information-stealing malware dubbed Gremlin Stealer has surfaced in the cybercrime underground, actively promoted since mid-March 2025 on platforms like the Telegram channel CoderSharp. Discovered by Unit 42 researchers at Palo Alto Networks, this malware, crafted in C#, poses a significant risk to individuals and organizations by targeting a wide array of sensitive…
-
20.5 Million DDoS Barrage Shattered Records Leading Attack Fired Off 4.8 Billion Packets
Cloudflare’s latest DDoS Threat Report for the first quarter of 2025 reveals that the company mitigated a record-shattering 20.5 million Distributed Denial of Service (DDoS) attacks, marking a 358% surge year-over-year and a 198% increase quarter-over-quarter compared to the previous period. This unprecedented volume, representing 96% of the total attacks blocked throughout the entire year…