Tag: cyber
-
Python-Based Discord RAT Enables Remote Control and Disruption Through a Simple Interface
A newly analyzed Python-based Remote Access Trojan (RAT) has emerged as a significant cybersecurity threat, utilizing Discord as its command-and-control (C2) platform. Disguised as a benign script, this malware transforms the popular communication tool into a hub for malicious operations, allowing attackers to remotely control infected systems with alarming ease. By exploiting Discord’s encrypted traffic…
-
M&S betting on customer patience as cyber-attack threatens to ruin 2025’s strong start
Fashion revival and warm weather had boosted the retailer but the attack has halted website sales<ul><li><a href=”https://www.theguardian.com/business/2025/apr/28/m-and-s-cyber-attack-crisis-orders-data-marks-spencer-website-apps-refund”>When will orders be back, and is my data at risk?</li><li><a href=”https://www.theguardian.com/business/2025/apr/28/m-and-s-marks-spencer-warehouse-staff-cyber-attack”>Hundreds of warehouse staff to stay at home</li></ul>Marks & Spencer was enjoying a strong start to 2025 thanks to a fashion revival and the warm spring weather. That…
-
M&S pauses deliveries of some food items to Ocado after cyber-attack
Hack has wiped more than £500m off Marks & Spencer’s stock market value of M&S in the past week<ul><li><a href=”https://www.theguardian.com/business/2025/apr/28/m-and-s-cyber-attack-crisis-orders-data-marks-spencer-website-apps-refund”>When will M&S orders be back, and is my data at risk?</li><li><a href=”https://www.theguardian.com/business/2025/apr/28/m-and-s-betting-on-customer-patience-as-cyber-attack-threatens-to-ruin-strong-start-to-2025″>M&S betting on customer patience amid 2025’s strong start</li></ul>Marks & Spencer has been forced to pause deliveries of some packaged food items to the…
-
M&S cyber-attack: when will orders be back, and is my data at risk?
Marks & Spencer has halted orders on its website and apps, giving customers a refund for those placed after Wednesday<ul><li><a href=”https://www.theguardian.com/business/2025/apr/28/m-and-s-marks-spencer-warehouse-staff-cyber-attack”>M&S tells hundreds of warehouse staff to stay at home</li></ul>The cyber-attack at Marks & Spencer is <a href=”https://www.theguardian.com/business/2025/apr/28/m-and-s-marks-spencer-warehouse-staff-cyber-attack”>continuing to cause chaos for shoppers, with no clarity yet as to when the retailer’s systems will be…
-
Blackpoint Cyber Extends MDR Service to Improve Cyber Resiliency
Blackpoint Cyber today at the 2025 RSA Conference unveiled a unified security posture and response platform that is based on the company’s managed detection and response (MDR) service. Company CTO Manoj Srivastava said the CompassOne platform provides organizations the tool to discover assets along with the guidance needed to improve their security posture. The overall..…
-
Blackpoint Cyber Launches CompassOne Unified Platform: 5 Things To Know
The launch of the new CompassOne unified platform makes Blackpoint Cyber ‘the first company to do full-on managed security posture plus MDR,’ CEO Jon Murchison tells CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2025/blackpoint-cyber-launches-compassone-unified-platform-5-things-to-know
-
Cybersecurity vendors are themselves under attack by hackers, SentinelOne says
“It’s practically taboo” for cyber firms to talk about being targeted, but SentinelLabs said in a new report that it has observed multiple threats. First seen on cyberscoop.com Jump to article: cyberscoop.com/cybersecurity-vendors-are-under-attack-sentinelone-says/
-
RansomHub Ransomware Deploys Malware to Breach Corporate Networks
The eSentire’s Threat Response Unit (TRU) in early March 2025, a sophisticated cyberattack leveraging SocGholish malware, also known as FakeUpdates, was uncovered targeting corporate networks. This attack, orchestrated by affiliates of RansomHub-a notorious Ransomware-as-a-Service (RaaS) group emerging in 2024-demonstrates a calculated approach to infiltrate high-profile organizations. SocGholish Malware as Initial Vector RansomHub markets its illicit…
-
19 APT Hackers Target Asia-based Company Servers Using Exploited Vulnerabilities and Spear Phishing Email
Tags: apt, attack, cyber, email, espionage, exploit, government, hacker, infrastructure, phishing, spear-phishing, threat, vulnerabilityThe NSFOCUS Fuying Laboratory’s global threat hunting system identified 19 sophisticated Advanced Persistent Threat (APT) attack campaigns, predominantly targeting regions across South Asia, East Asia, Eastern Europe, and South America. These incursions highlighted a continuation of targeted cyber espionage and sabotage activities, primarily focusing on government agencies, critical infrastructure, and prominent industry sectors through a…
-
FBI seeks public tips about Salt Typhoon
The bureau’s public alert follows months of conversations with the telecom industry about the far-reaching cyber espionage campaign by a Chinese nation-state threat actor. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fbi-china-salt-typhoon-hack-telecom-tips/746490/
-
Advanced Multi-Stage Carding Attack Hits Magento Site Using Fake GIFs and Reverse Proxy Malware
A multi-stage carding attack has been uncovered targeting a Magento eCommerce website running an outdated version 1.9.2.4. This version, unsupported by Adobe since June 2020, left the site vulnerable due to unpatched security flaws. The malware employed a deceptive .gif file, tampered browser sessionStorage data, and a malicious reverse proxy server to steal credit card…
-
Cyber-espionage campaign found targeting exiled Uyghurs
A highly tailored malware campaign was aimed at senior members of the World Uyghur Congress exile group, according to researchers at the Citizen Lab. First seen on therecord.media Jump to article: therecord.media/uyghurs-spearphishing-campaign-citizen-lab
-
Hannibal Stealer: Cracked Variant of Sharp and TX Malware Targets Browsers, Wallets, and FTP Clients
A new cyber threat, dubbed Hannibal Stealer, has surfaced as a rebranded and cracked variant of the Sharp and TX stealers, originally promoted by the reverse engineering group ‘llcppc_reverse.’ Developed in C# and leveraging the .NET Framework, this information-stealing malware poses a significant risk by targeting a wide array of sensitive data. Hannibal Stealer focuses…
-
Rack Ruby Framework Vulnerabilities Let Attackers Inject and Manipulate Log Content
Researchers Thai Do and Minh Pham have exposed multiple critical vulnerabilities in the Rack Ruby framework, a cornerstone of Ruby-based web applications with over a billion global downloads. Identified as CVE-2025-25184, CVE-2025-27111, and CVE-2025-27610, these flaws pose significant risks to applications built on frameworks like Ruby on Rails and Sinatra. Rack, acting as a modular…
-
Exposure Management Works When the CIO and CSO Are in Sync
Tags: access, ai, attack, business, cio, ciso, cloud, control, cyber, cybersecurity, data, data-breach, endpoint, finance, infrastructure, jobs, office, risk, strategy, technology, threat, tool, update, vulnerability, vulnerability-management, zero-dayEach Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, Tenable CIO Patricia Grant looks at how the CIO/CSO relationship is key to a successful exposure management program. You can read the entire Exposure Management Academy series here. When I…
-
From Spreadsheets to SaaS-Based Cyber Risk Registers – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/from-spreadsheets-to-saas-based-cyber-risk-registers-kovrr/
-
Top 7 Threat Intelligence Platforms Software in 2025
Threat intelligence platforms help analyze and share cyber threat data. Discover top TIPs , their features, use cases, and comparisons. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/products/threat-intelligence-platforms/
-
SAP NetWeaver 0-Day Flaw Actively Exploited to Deploy Webshells
SAP disclosed a critical zero-day vulnerability, identified as CVE-2025-31324, in its NetWeaver Visual Composer component. This vulnerability, with a maximum CVSSv3 severity score of 10.0, stems from a missing authorization check within the Metadata Uploader module of Visual Composer. When exploited, it allows unauthenticated attackers to upload arbitrary malicious files via specially crafted POST requests to…
-
Half of Mobile Devices Run Outdated Operating Systems
50% of mobile devices run outdated operating systems, increasing vulnerability to cyber-attacks, according to the latest report from Zimperium First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/50-mobile-devices-run-outdated/
-
M&S tells hundreds of warehouse staff to stay at home after cyber-attack
Castle Donington agency workers told not to go to work as website orders remain on hold for fourth day in a row<ul><li><a href=”https://www.theguardian.com/business/live/2025/apr/28/us-trade-war-tariffs-china-growth-targets-stock-markets-ftse-business-live-news”>Business live latest updates</li></ul>Marks & Spencer has told hundreds of workers at its main online distribution centre in Leicestershire to stay at home as website orders remain on hold for the fourth day…
-
Iran claims it stopped large cyberattack on country’s infrastructure
An Iranian state official said the country repelled “widespread and complex cyber attacks” on unspecified infrastructure over the weekend. First seen on therecord.media Jump to article: therecord.media/iran-cyberattack-national-infrastructure
-
Windows 11 25H2 Expected to Launch with Minor Changes
Microsoft is quietly preparing the next update to its flagship operating system,Windows 11 25H2, with new evidence pointing toward a SeptemberOctober 2025 release. Unlike the much-anticipated Windows 11 24H2-the major update arriving in 2024-the 25H2 release is shaping up to be a more modest affair, focusing on incremental improvements and under-the-hood changes rather than headline-grabbing…
-
JokerOTP Dismantled After 28,000 Phishing Attacks, 2 Arrested
JokerOTP dismantled after 28,000 phishing attacks across 13 countries; UK and Dutch police arrest two suspects linked to £7.5M cyber fraud. First seen on hackread.com Jump to article: hackread.com/jokerotp-dismantled-28000-phishing-attacks-2-arrested/
-
China Claims U.S. Cyberattack Targeted Leading Encryption Company
China has accused U.S. intelligence agencies of carrying out a sophisticated cyberattack against one of its foremost commercial cryptography providers, resulting in the theft of vast amounts of sensitive data. The allegations were announced in a report published Monday by China’s National Computer Network Emergency Response Technical Team/Coordination Center (CNCERT), intensifying digital tensions between the…
-
Critical FastCGI Library Flaw Exposes Embedded Devices to Code Execution
A severe vulnerability (CVE-2025-23016) in the FastCGI library-a core component of lightweight web server communication been disclosed, threatening countless embedded and IoT devices with remote code execution. FastCGI, widely used to connect web servers (like NGINX and lighttpd) to backend applications, is often found in resource-constrained devices such as network cameras, routers, and various smart…
-
Viasat Modems Zero-Day Vulnerabilities Let Attackers Execute Remote Code
A severe zero-day vulnerability has been uncovered in multiple Viasat satellite modem models, including the RM4100, RM4200, EM4100, RM5110, RM5111, RG1000, RG1100, EG1000, and EG1020. Identified by ONEKEY Research Lab through automated binary static analysis, the flaw, tracked as CVE-2024-6198, affects the “SNORE” web interface running on lighttpd over TCP ports 3030 and 9882. With…
-
Obfuscation Techniques: A Key Weapon in the Ongoing War Between Hackers and Defenders
Obfuscation stands as a powerful weapon for attackers seeking to shield their malicious code from defenders. This technique, which deliberately makes code hard to understand while preserving its functionality, is a cornerstone of the ongoing struggle between black hats and white hats. From penetration testers to antivirus developers, reverse engineers face an uphill battle against…
-
NSFOCUS ISOP Receives International Recognition: AI Drives Enterprise Security Operations from “Complex” to “Simple”
Santa Clara, Calif. April 27, 2024 Recently, NSFOCUS Intelligent Security Operations Platform (NSFOCUS ISOP) was once again recognized by the internationally renowned consulting firm Frost & Sullivan and won the 2024 “Global Modern SIEM Technology Innovation Leadership Award”. Frost & Sullivan Best Practices Recognition awards companies each year in a variety of regional and global…The…
-
React Router Vulnerabilities Allow Attackers to Spoof Content and Alter Values
The widely used React Router library, a critical navigation tool for React applications, has resolved two high-severity vulnerabilities (CVE-2025-43864 and CVE-2025-43865) that allowed attackers to spoof content, alter data values, and launch cache-poisoning attacks. Developers must update toreact-router v7.5.2immediately to mitigate risks. Key Vulnerabilities and Impacts 1.CVE-2025-43864: DoS via SPA Mode Cache Poisoning Attackers could…