Collecting Cyber-News from over 60 sources

Tag: cyber

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

Mar 5, 2025 5:34 PM

Tags: access, attack, china, corporate, cyber, exploit, flaw, hacking, intelligence, microsoft, supply-chain, tactics, technology, threat, zero-day

The China-lined threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology (IT) supply chain as a means to obtain initial access to corporate networks.That’s according to new findings from the Microsoft Threat Intelligence team, which said the Silk Typhoon…
So werden PV-Anlagen digital angegriffen und geschützt

Mar 5, 2025 5:34 PM

Tags: access, ai, authentication, backup, best-practice, bug, china, cyber, cyberattack, cybersecurity, cyersecurity, firmware, framework, germany, iot, risk, software, technology, update, usa, vulnerability

Unternehmen setzen vermehrt auf Solaranlagen mit Batteriespeichern, um hohe Energiekosten und Netzstabilitätsrisiken zu minimieren. Diese Systeme sind allerdings oft nicht gehärtet und damit ein immer beliebteres Ziel bei Cyberkriminellen. Quality Stock ArtsSteigen die Energiepreise, werden kostenintensive Projekte wie Rechenzentren für Künstliche Intelligenz (KI) ebenfalls teurer. Große Unternehmen suchen deshalb verstärkt nach Möglichkeiten, ihren Energiehaushalt günstiger…
Ukraine’s intel service honors civilian hackers for the first time with military award

Mar 5, 2025 5:34 PM

Tags: country, cyber, cybersecurity, group, hacker, intelligence, military, service, ukraine

Ukraine’s military intelligence service (HUR) has honored a group of civilian cyber activists for their role “in strengthening national security,” marking the agency’s first official recognition of cybersecurity specialists outside the country’s military ranks. First seen on therecord.media Jump to article: therecord.media/ukraine-intel-service-honors-civilian-hackers-with-military-award
‘Cocktail of Cyber-Risk’ Should Stir Concerns Among CISOs

Mar 5, 2025 4:34 PM

Tags: ciso, cyber, risk

A global report published by the World Economic Forum points to a new world order characterized by greater instability, polarizing narratives, eroding trust, and insecurity. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/thinking-outside-box-cyber-risk
Nonprofits Face Surge in Cyber-Attacks as Email Threats Rise 35%

Mar 5, 2025 4:34 PM

Tags: attack, cyber, data, email, threat

Nonprofits are facing a surge in cyber-attacks as email threats rise 35%, targeting donor data and transactions First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nonprofits-email-threats-rise-35/
Critical vulnerabilities expose network security risks in Keysight’s infrastructure

Mar 5, 2025 3:34 PM

Tags: access, advisory, attack, best-practice, cisa, control, cve, cyber, cybersecurity, data, defense, exploit, flaw, infrastructure, Internet, malicious, mitigation, network, risk, service, software, strategy, threat, unauthorized, update, vpn, vulnerability

Potential threats to enterprises: Successful exploitation of these vulnerabilities could have dire consequences, including system crashes, arbitrary file deletions, and unauthorized access to sensitive information. Attackers leveraging these flaws may gain control over affected devices, facilitating further attacks within an enterprise’s network.Furthermore, multiple path traversal vulnerabilities (CVE-2025-21095 and CVE-2025-23416) identified in the affected software versions…
CISA Issues Alert on Actively Exploited VMware Vulnerabilities

Mar 5, 2025 3:34 PM

Tags: cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, linux, mitigation, threat, vmware, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) escalated warnings on March 4, 2025, by adding four severe vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. Federal agencies and private organizations are urged to prioritize mitigation efforts, as threat actors are actively weaponizing these flaws in VMware ESXi, Workstation, Fusion, and the Linux kernel. CVE-2025-22225:…
Thinking Outside the Box on Cyber-Risk

Mar 5, 2025 3:34 PM

Tags: ciso, cyber, risk, technology

CISOs should add more to their vision than technology as a global report published by the World Economic Forum identifies a closely interconnected cocktail of risk. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/thinking-outside-box-cyber-risk
CISA Expands Known Exploited Vulnerabilities Catalog with Four Critical Issues

Mar 5, 2025 2:34 PM

Tags: cisa, cyber, cybersecurity, exploit, infrastructure, kev, risk, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) Catalog with four new vulnerabilities, adding to the growing list of cyber risks that have been actively exploited. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cisa-known-exploited-vulnerabilities-catalog-3/
Cisco Webex for BroadWorks Flaw Opens Door for Attackers to Access Credentials

Mar 5, 2025 1:34 PM

Tags: access, cisco, communications, credentials, cyber, data, flaw, software, vulnerability, windows

Cisco Systems has disclosed a security vulnerability in its Webex for BroadWorks unified communications platform that could allow attackers to intercept sensitive credentials and user data under specific configurations. The flaw, tracked asCSCwo20742and classified as a low-severity issue, impacts organizations usingRelease 45.2of the software in Windows-based environments, prompting Cisco to release configuration-based fixes and recommend…
Over 10,000 WordPress Sites Exposed by Donation Plugin Code Execution Vulnerability

Mar 5, 2025 1:34 PM

Tags: attack, cyber, data-breach, exploit, flaw, remote-code-execution, vulnerability, wordpress

A critical security flaw in the widely usedGiveWP Donation Plugin and Fundraising Platformhas left over 10,000 WordPress websites vulnerable to remote code execution attacks since March 3, 2025. Tracked as CVE-2025-0912, the vulnerability allows unauthenticated attackers to hijack sites by exploiting a deserialization flaw in versions 3.19.4 and earlier. Vulnerability Overview The vulnerability stems from […]…
Beware! Fake CAPTCHA Hidden LummaStealer Threat Installing Silently

Mar 5, 2025 1:34 PM

Tags: attack, captcha, cyber, cybersecurity, data, github, infection, malware, threat

Cybersecurity researchers at G DATA have uncovered a sophisticated malware campaign utilizing fake booking websites to deliver the LummaStealer malware through deceptive CAPTCHA prompts. This new attack vector, discovered in January 2025, marks a significant shift in LummaStealer’s distribution methods, moving from traditional channels like GitHub and Telegram to malvertising techniques. The infection chain begins…
Operation Sea Elephant Targets Organizations to Steal Research Data

Mar 5, 2025 1:34 PM

Tags: cyber, data, espionage, group, threat

A sophisticated Advanced Persistent Threat (APT) group, known as CNC, has been conducting a cyber espionage campaign dubbed >>Operation Sea Elephant
North Korean IT Workers Exploit GitHub to Launch Global Cyber Attacks

Mar 5, 2025 1:34 PM

Tags: attack, cyber, cybersecurity, exploit, github, network, north-korea

A network of suspected North Korean IT workers is using GitHub to create and backstop fake personas, aiming to infiltrate companies globally, particularly in Japan and the United States. DPRK-Linked Network Targets Companies in Japan and US Cybersecurity firm Nisos has uncovered this operation, which appears to be part of Pyongyang’s efforts to fund its…
Cybercriminals Impersonate Electronic Frontier Foundation to Target Gaming Community

Mar 5, 2025 1:34 PM

Tags: cyber, cybercrime, exploit, phishing, tactics

A sophisticated phishing campaign targeting the Albion Online gaming community has been uncovered, revealing a complex operation involving impersonation of the Electronic Frontier Foundation (EFF) and deployment of advanced malware. The campaign, discovered on March 4, 2025, showcases the evolving tactics of cybercriminals in exploiting trust in reputable organizations and leveraging the immersive nature of…
U.S. Cracks Down on Nemesis Darknet Admin with New Treasury Sanctions

Mar 5, 2025 12:34 PM

Tags: cyber, dark-web, international, iran, law

The U.S. Department of the Treasury has intensified its global campaign against darknet-facilitated drug trafficking by sanctioning Behrouz Parsarad, the Iran-based administrator of the notorious Nemesis Marketplace. The move, announced on March 5, 2025, follows a 2024 international law enforcement operation that dismantled the platform, which enabled over $30 million in illicit drug sales”, including…
Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives

Mar 5, 2025 12:34 PM

Tags: cyber, flaw, malicious, update, vulnerability

A high-severity security flaw in the widely used Vim text editor allows attackers to execute arbitrary code on vulnerable systems by tricking users into opening specially crafted TAR archives. Tracked as CVE-2025-27423, this vulnerability has prompted urgent patching efforts and warnings for developers and system administrators globally. Technical Breakdown of the Vulnerability The flaw resides in…
Top 7 Cyber Security Challenges Faced by SaaS Organizations

Mar 5, 2025 12:34 PM

Tags: access, cloud, cyber, saas, service, software, technology

Today’s technology-driven world needs Software-as-a-Service (SaaS) organizations. Their software solutions help organizations perform effectively and efficiently. SaaS applications are easily available over the internet. It allows users to access them via a web browser without requiring complex installations or infrastructure. With 42,000 SaaS companies worldwide, it makes up 36.6% of the cloud service market. The……
Tracking Threat Actors: How Infrastructure Analysis Reveals Cyber Attack Patterns

Mar 5, 2025 11:34 AM

Tags: attack, cyber, infrastructure, threat

Unmasking Cyber Threats: How Infrastructure Tracking Aids Attribution The main subject of this article is to present our methods for clustering and identifying the purpose First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2025/03/05/tracking-threat-actors-how-infrastructure-analysis-reveals-cyber-attack-patterns/
Telegram EvilVideo Vulnerability Exploited to Run Malicious Code on Victims’ Devices

Mar 5, 2025 11:34 AM

Tags: attack, cyber, cybersecurity, exploit, infrastructure, malicious, vulnerability

A newly documented exploitation technique targeting Telegram’s file-sharing infrastructure has raised alarms in cybersecurity circles. Dubbed >>EvilVideo,
The dirty dozen: 12 worst ransomware groups active today

Mar 5, 2025 10:34 AM

Tags: access, ai, alphv, apt, attack, backup, breach, cloud, cyber, cybercrime, dark-web, data, detection, email, encryption, endpoint, exploit, extortion, finance, government, group, healthcare, infrastructure, intelligence, korea, law, leak, linux, lockbit, malicious, malware, moveIT, network, north-korea, organized, phishing, ransom, ransomware, russia, service, social-engineering, software, strategy, threat, tool, usa, vmware, vulnerability, windows, zero-day

Black Basta: History: Black Basta appeared on the ransomware scene in early 2022 and is believed to be a spin-off from Conti, a group notorious for attacking major organizations.How it works: Black Basta usually deploys malware through exploitation of known vulnerabilities and social engineering campaigns. “Employees in the target environment are email bombed and then…
Chinese cyber espionage growing across all industry sectors

Mar 5, 2025 9:34 AM

Tags: access, attack, authentication, botnet, breach, china, cisco, credentials, crowdstrike, cyber, cyberespionage, defense, espionage, exploit, finance, flaw, government, group, identity, Internet, iot, law, malware, mfa, network, service, social-engineering, technology, threat, update, vulnerability

New cyber operations in key sectors: Historically, Chinese cyberespionage groups have predominantly targeted organizations from the government, technology, and telecommunications sectors and that continued in 2024. Government orgs were a target for China-linked threat actors in virtually all regions of the world, and Salt Typhoon, a cyber unit tied to China’s MSS, made headlines in…
PoC Released for HPE Remote Support Tool Vulnerability Allowing Remote Code Execution

Mar 5, 2025 9:34 AM

Tags: cyber, exploit, flaw, injection, remote-code-execution, tool, vulnerability

Security researchers have released proof-of-concept (PoC) exploit code for critical vulnerabilities in Hewlett Packard Enterprise’s (HPE) Insight Remote Support (IRS) tool, including an unauthenticated XML External Entity (XXE) injection flaw (CVE-2024-53675) and a path traversal-based remote code execution (RCE) vulnerability (CVE-2024-53676). These flaws affect IRS versions prior to v7.14.0.629 and expose systems to arbitrary file disclosure and full SYSTEM-level…
Zoho ADSelfService Plus Flaw Allows Hackers to Gain Unauthorized Access

Mar 5, 2025 9:34 AM

Tags: access, authentication, cyber, flaw, hacker, identity, mfa, risk, unauthorized, vulnerability

A critical security flaw in Zoho’s widely used identity management solution, ADSelfService Plus, has been patched after researchers discovered it could enable attackers to hijack user sessions and compromise sensitive enrollment data. Tracked as CVE-2025-1723, the high-severity vulnerability underscores the risks of insufficient session validation in authentication systems, particularly when multi-factor authentication (MFA) safeguards are not…
Cyberangriff auf die Webseite einer Rundfunkanstalt in Litauen

Mar 5, 2025 8:34 AM

Tags: attack, cyber, cyberattack

LRT.lt suffered cyber-attack, operations not disrupted First seen on lrt.lt Jump to article: www.lrt.lt/en/news-in-english/19/2503154/lrt-lt-suffered-cyber-attack-operations-not-disrupted
Cyberangriff auf die Webseite eines Fußballvereins in Großbritannien

Mar 5, 2025 8:34 AM

Tags: attack, cyber, cyberattack

Club suffers cyber attack First seen on leedsunited.com Jump to article: www.leedsunited.com/en/news/club-suffers-cyber-attack
Why multi-cloud security needs a fresh approach to stay resilient

Mar 5, 2025 7:34 AM

Tags: ciso, cloud, cyber, resilience, strategy

As enterprises expand their multi-cloud strategies to drive agility and scalability, CISOs must prioritize cyber resilience across diverse cloud platforms. The complexities of … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/05/multi-cloud-security-approach-stay-resilient/
NVIDIA Issues Warning About Severe Security Flaws Enabling Code Attacks

Mar 5, 2025 7:34 AM

Tags: attack, computing, cyber, firmware, flaw, infrastructure, malicious, nvidia, service, update

NVIDIA has issued an urgent security bulletin urging customers using itsHopper HGX 8-GPU High-Performance Computing (HMC) systemsto immediately install firmware updates addressing two critical vulnerabilities. Released on February 28, 2025, the patches target flaws that could allow attackers to execute malicious code, escalate privileges, or cripple enterprise GPU infrastructure through denial-of-service (DoS) attacks. The advisories…
Chrome 134 Launches with Patches for 14 Crash-Inducing Vulnerabilities

Mar 5, 2025 7:34 AM

Tags: browser, chrome, cyber, flaw, google, linux, macOS, remote-code-execution, update, vulnerability, windows

Google has rolled out Chrome 134 to the stable channel for Windows, macOS, and Linux, addressing14 security vulnerabilities”, including high-severity flaws that could enable remote code execution or crashes. The update, version 134.0.6998.35 for Linux, 134.0.6998.35/36 for Windows, and 134.0.6998.44/45 for macOS, follows weeks of testing and includes critical fixes for vulnerabilities in components like…
Windows KDC Proxy RCE Vulnerability Allows Remote Server Takeover

Mar 5, 2025 7:34 AM

Tags: authentication, control, cvss, cyber, flaw, microsoft, rce, remote-code-execution, vulnerability, windows

A recently patched remote code execution (RCE) vulnerability in Microsoft Windows’ Key Distribution Center (KDC) Proxy implementation allows unauthenticated attackers to take control of vulnerable servers through manipulated Kerberos authentication traffic. Designated CVE-2024-43639 and rated 9.8 CVSS, this critical flaw stems from improper validation of message lengths during ASN.1 encoding operation, enabling memory corruption attacks. The vulnerability…