Collecting Cyber-News from over 60 sources

Tag: cyber

Operation SyncHole: Lazarus APT targets supply chains in South Korea

Apr 25, 2025 1:50 PM

Tags: apt, cyber, espionage, group, kaspersky, korea, lazarus, north-korea, supply-chain

The North Korea-linked Lazarus Group targeted at least six firms in South Korea in a cyber espionage campaign called Operation SyncHole. Kaspersky researchers reported that the North Korea-linked APT group Lazarus targeted at least six firms in South Korea in a cyber espionage campaign tracked as Operation SyncHole. The campaign has been active since at…
Critical Commvault Flaw Rated 10/10: CSA Urges Immediate Patching

Apr 25, 2025 1:50 PM

Tags: backup, cve, cyber, data, flaw, remote-code-execution, risk, update, vulnerability

The Cyber Security Agency of Singapore (CSA) has warned users about a critical vulnerability affecting the Commvault Command Center. This Commvault vulnerability, identified as CVE-2025-34028, has been rated with a severity score of 10 out of 10 on the Common Vulnerability Scoring System (CVSS v3.1). It allows unauthenticated remote code execution, posing a direct risk…
Vor diesen Ransomware-Banden sollten Sie sich hüten

Apr 25, 2025 12:50 PM

Tags: ai, cyber, cyberattack, data, data-breach, exploit, extortion, germany, group, hacker, intelligence, leak, lockbit, malware, moveIT, ransomware, service, software, strategy, threat, tool, usa, vulnerability, zero-day

Ransomware-Attacken werden immer mehr. Höchste Zeit, die Schutzmaßnahmen hochzufahren.In den ersten drei Monaten des laufenden Jahres gab es einen neuen Höchststand bei den weltweit gemeldeten Ransomware-Vorfällen. Laut dem aktuellen Bericht State of Ransomware von Check Point Research (CPR) haben Hacker im ersten Quartal 2025 insgesamt 2.289 Unternehmen erpresst 126 Prozent mehr als im Vorjahreszeitraum (1.011…
Microsoft Defender XDR False Positive Leaked Massive 1,700+ Sensitive Documents to Publish

Apr 25, 2025 12:50 PM

Tags: cyber, data, data-breach, detection, edr, leak, microsoft, risk, threat

An alarming data leak involving Microsoft Defender XDR has exposed more than 1,700 sensitive documents from hundreds of organizations, following a chain reaction triggered by a critical false positive error. Security researchers at ANY.RUN first identified and reported the incident, highlighting major weaknesses in automated threat detection systems and the risks posed by user behaviors…
RSAC 2025 Innovation Sandbox – Aurascape: Reconstructing the Intelligent Defense Line of AI Interactive Visibility and Native Security

Apr 25, 2025 11:50 AM

Tags: ai, cyber, cybersecurity, defense, google, infrastructure, intelligence, network, startup, technology

Company Overview Aurascape is a cybersecurity startup founded in 2023 and headquartered in Santa Clara, California, USA. The company was co-founded by senior security experts and engineers from world-class technology companies such as Palo Alto Networks, Google, and Amazon. The team has deep expertise in the fields of network security, artificial intelligence, and network infrastructure,…The…
RSAC 2025 Innovation Sandbox – Knostic: Reshaping the Access Control Paradigm for Enterprise AI Security

Apr 25, 2025 11:50 AM

Tags: access, ai, control, corporate, cyber, data, intelligence, network, privacy, risk, startup, technology

Introduction As generative artificial intelligence (GenAI) and large language models (LLM) rapidly penetrate corporate operations, data leakage and privacy risks have become major challenges faced by enterprises. Knostic, a startup founded in 2023, is providing enterprises with a layer of intelligent security protection with its innovative Need-to-Know access control technology to ensure the safe deployment…The…
6 types of risk every organization must manage, and 4 strategies for doing it

Apr 25, 2025 11:50 AM

Tags: ai, attack, backup, best-practice, breach, business, compliance, control, cyber, cybersecurity, data, finance, framework, fraud, GDPR, governance, government, grc, hacker, healthcare, infrastructure, insurance, intelligence, law, mitigation, office, phishing, ransom, ransomware, regulation, risk, risk-assessment, risk-management, service, startup, strategy, technology, threat, training, vulnerability

Cybersecurity risks Threats such as data breaches, phishing attacks, system intrusions, and broader digital vulnerabilities fall under the umbrella of security risks. The definition of cybersecurity risk is constantly evolving, now encompassing threats related to artificial intelligence and AI-driven systems.If you’re trying to mitigate risks in this area, you need to think not just about…
Hackers access sensitive SIM card data at South Korea’s largest telecoms company

Apr 25, 2025 11:50 AM

Tags: access, attack, cyber, data, hacker, korea, malware, mobile, network

Mobile network operator SK Telecom, which serves approximately 34 million subscribers in South Korea, has confirmed that it suffered a cyber attack earlier this month that saw malware infiltrate its internal systems, and access data related to customers’ SIM cards. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/hackers-access-sensitive-sim-card-data-at-south-koreas-largest-telecoms-company
‘SessionShark’ A New Toolkit Bypasses Microsoft Office 365 MFA Security

Apr 25, 2025 11:50 AM

Tags: 2fa, authentication, cyber, cybercrime, marketplace, mfa, microsoft, office, phishing, service, threat

Security researchers have uncovered a new and sophisticated threat to Microsoft Office 365 users: a phishing-as-a-service toolkit dubbed “SessionShark O365 2FA/MFA.” Promoted through cybercriminal marketplaces, SessionShark is designed to bypass Microsoft’s multi-factor authentication (MFA) protections”, an alarming escalation in the ongoing battle between defenders and cyber attackers. A Toolkit Purpose-Built to Evade 2FA and MFA…
Hackers Exploit MS-SQL Servers to Deploy Ammyy Admin for Remote Access

Apr 25, 2025 11:50 AM

Tags: access, cyber, cyberattack, cybersecurity, exploit, hacker, malicious, malware, microsoft, sql, threat, tool, unauthorized, vulnerability

A sophisticated cyberattack campaign has surfaced, targeting poorly managed Microsoft SQL (MS-SQL) servers to deploy malicious tools like Ammyy Admin and PetitPotato malware. Cybersecurity researchers have observed attackers exploiting vulnerabilities in these servers to gain unauthorized access, execute commands for reconnaissance, and install malware that facilitates remote access and privilege escalation. This emerging threat underscores…
New Report Reveals How AI is Rapidly Enhancing Phishing Attack Precision

Apr 25, 2025 11:50 AM

Tags: ai, attack, cloud, cyber, cybercrime, phishing, zero-trust

The Zscaler ThreatLabz 2025 Phishing Report unveils the alarming sophistication of modern phishing attacks, driven by generative AI (GenAI). By examining over 2 billion blocked phishing transactions on the Zscaler Zero Trust Exchange cloud security platform from January to December 2024, the report highlights a seismic shift in cybercriminal tactics. Cybercriminals Leverage GenAI for Hyper-Targeted…
159 CVEs Exploited in the Wild in Q1 2025, 8.3% Targeted Within 1-Day Vulnerabilities Exploited

Apr 25, 2025 11:50 AM

Tags: cve, cyber, exploit, kev, threat, vulnerability

VulnCheck’s latest report for Q1 2025 has identified 159 Common Vulnerabilities and Exposures (CVEs) publicly disclosed as exploited in the wild for the first time. Alarmingly, 28.3% of these Known Exploited Vulnerabilities (KEVs) saw evidence of exploitation within just one day of their CVE disclosure, underscoring the lightning-fast pace at which threat actors capitalize on…
Wie Unternehmen ihre Cyber-Resilienz stärken können

Apr 25, 2025 10:50 AM

Tags: cyber, resilience, strategy

Immer mehr Sicherheitsverantwortliche fordern: Die Risikobewertung von Drittanbietern muss fester Bestandteil jeder Cyber-Resilienz-Strategie werden. Einheitliche Standards fehlen zwar, doch es gibt wirksame Maßnahmen, mit denen Unternehmen ihre Abwehr stärken können. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/wie-unternehmen-ihre-cyber-resilienz-staerken-koennen/
5 Most Common Security Attack Methods in 2024: Mandiant’s M-Trends Report

Apr 25, 2025 10:50 AM

Tags: attack, cloud, cyber, google, mandiant, threat

Mandiant, which was acquired by Google Cloud in 2022, paints a picture of global cyber threats from last year in order to help readers be better prepared this year. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-mandiant-m-trends-security-report/
Hackers Claim TikTok Breach, Leak Over 900,000 Usernames and Passwords

Apr 25, 2025 10:50 AM

Tags: breach, cyber, data, group, hacker, hacking, leak, login, password

A hacker collective known as R00TK1T claims to have breached TikTok’s user database, allegedly leaking login information for over 900,000 users. The group, which has previously made waves in the hacking community with bold claims”, often with little substantiated evidence”, has taken to underground forums to boast about their latest exploit. Alleged Account Deletions and…
FBI Offers $10 Million Reward for information on Salt Typhoon Hackers

Apr 25, 2025 10:50 AM

Tags: cyber, hacker

The Federal Bureau of Investigation (FBI), in partnership with the U.S. Department of State, has announced a reward of up to $10 million for information leading to the identification or location of individuals connected to the recent “Salt Typhoon” cyberattacks. The campaign, which is believed to be linked to actors affiliated with the People’s Republic…
Russian VPS Servers With RDP and Proxy Servers Enable North Korean Cybercrime Operations

Apr 25, 2025 9:50 AM

Tags: cyber, cybercrime, Internet, korea, network, north-korea, russia

Trend Research has uncovered a sophisticated network of cybercrime operations linked to North Korea, heavily utilizing Russian internet infrastructure. Specifically, IP address ranges in the towns of Khasan and Khabarovsk, Russia, assigned to organizations under TransTelecom (ASN AS20485), are pivotal in these activities. Khasan, just a mile from the North Korea-Russia border and connected via…
Spring Security Vulnerability Exposes Valid Usernames to Attackers

Apr 25, 2025 9:50 AM

Tags: crypto, cve, cyber, data-breach, flaw, login, vulnerability

A newly identified security vulnerability, CVE-2025-22234, has exposed a critical weakness in the widely-used Spring Security framework. According to the HeroDevs report, affecting several versions of the spring-security-crypto package, this flaw makes it possible for attackers to discern valid usernames through observable differences in login response times”, an avenue for so-called “timing attacks.” Spring Security…
Microsoft’s Patch for Symlink Vulnerability Introduces New Windows DenialService Flaw

Apr 25, 2025 8:50 AM

Tags: cyber, flaw, microsoft, service, update, vulnerability, windows

Microsoft’s recent attempt to resolve a critical privilege escalation vulnerability has inadvertently introduced a new denial-of-service (DoS) flaw in Windows systems, leaving organizations vulnerable to update failures and potential security risks. In early April 2025, Microsoft addressed CVE-2025-21204, a security flaw that allowed attackers to abuse symbolic links (symlinks) to elevate privileges via the Windows servicing…
SAP NetWeaver 0-Day Vulnerability Enables Webshell Deployment

Apr 25, 2025 8:50 AM

Tags: access, backdoor, cve, cyber, cybersecurity, exploit, sap, vulnerability, zero-day

Cybersecurity analysts have issued a high-priority warning after several incidents revealed active exploitation of SAP NetWeaver, the widely deployed enterprise integration platform. Attackers have leveraged an unreported 0-day vulnerability to deploy web shells, which give them remote command execution capabilities and persistent backdoor access even on fully patched systems. CVE Details The exposure centers around…
HYCU stellt R-Shield vor – neue Maßstäbe für Cyber-Resilienz in SaaS-, Cloud- und On-Prem-Umgebungen

Apr 25, 2025 8:50 AM

Tags: cloud, cyber, data, resilience, saas

Die neue Technologie ist in HYCUs bewährte Data Resiliency Cloud (R-Cloud) integriert und wurde entwickelt, um Unternehmen umfassend vor Cyberbedrohungen zu schützen über alle Plattformen und Anwendungen hinweg. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/hycu-stellt-r-shield-vor-neue-massstaebe-fuer-cyber-resilienz-in-saas-cloud-und-on-prem-umgebungen/a40581/
Exposure validation emerges as critical cyber defense component

Apr 25, 2025 7:50 AM

Tags: control, cyber, defense, threat

Organizations have implemented various aspects of threat exposure validation, including security control validation (51%) and filtering threat exposures based on the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/25/exposure-validation-processes/
U.S. Secret Service Reveals Ways to Identify Credit Card Skimmers

Apr 25, 2025 7:50 AM

Tags: credit-card, crime, crimes, cyber, linkedin, office, risk, service, threat

With credit card skimming crimes escalating nationwide, the U.S. Secret Service’s Washington Field Office is sharing essential tips for the public to protect themselves from this growing threat, shared by Officials in LinkedIn post. According to the agency, credit card skimming involves criminals installing illicit devices to steal card information, has become a “low-risk, high-reward”…
Cyber-Zwischenfall bei einem Schulbezirk in Texas, USA

Apr 25, 2025 6:51 AM

Tags: cyber, data, incident, network, usa

Santa Fe ISD parents are concerned about data security after ‘cyber event’ disrupts campus network First seen on abc13.com Jump to article: abc13.com/post/santa-fe-isd-working-fix-network-issues-cyber-event-disrupts-internet-phone-service-campus/16242442/
DDoS-Angriff auf eine Wahlbehörde in Südkorea

Apr 25, 2025 6:51 AM

Tags: attack, cyber, cyberattack, ddos

NEC Blocks IP Address, Seeks Police Probe after Cyber Attack on Own Statistical System First seen on world.kbs.co.kr Jump to article: world.kbs.co.kr/service/news_view.htm
Cyberangriff auf eine Brauerei in Bayern

Apr 25, 2025 6:51 AM

Tags: cyber, cyberattack

Branche meldet Cyber-Angriffe First seen on lebensmittelzeitung.net Jump to article: www.lebensmittelzeitung.net/tech-logistik/nachrichten/it-sicherheit-branche-meldet-cyber-angriffe-183909
Cyber-Zwischenfall bei einem Internat in Baden-Württemberg, Deutschland

Apr 25, 2025 6:51 AM

Tags: cyber, germany, incident

Cyber-Vorfall am Birklehof, FAQ – Aktuelle Informationen First seen on birklehof.de Jump to article: birklehof.de/cybervorfall/
New infosec products of the week: April 25, 2025

Apr 25, 2025 6:51 AM

Tags: cyber, infosec

Here’s a look at the most interesting products from the past week, featuring releases from Bitdefender, PowerDMARC, Skyhawk Security, Stellar Cyber, Swimlane, and Veracode. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/25/new-infosec-products-of-the-week-april-25-2025/
Beyond the Inbox: ThreatLabz 2025 Phishing Report Reveals How Phishing Is Evolving in the Age of GenAI

Apr 25, 2025 1:50 AM

Tags: access, ai, attack, authentication, best-practice, captcha, cloud, control, credentials, crypto, cyber, cybercrime, data, defense, detection, dmarc, email, exploit, finance, google, identity, jobs, login, malicious, malware, mfa, phishing, radius, risk, scam, spam, strategy, tactics, technology, theft, threat, tool, vulnerability, zero-day, zero-trust

Gone are the days of mass phishing campaigns. Today’s attackers are leveraging generative AI (GenAI) to deliver hyper-targeted scams, transforming every email, text, or call into a calculated act of manipulation. With flawless lures and tactics designed to outsmart AI defenses, cybercriminals are zeroing in on HR, payroll, and finance teams”, exploiting human vulnerabilities with…
AI speeds up analysis work for humans, two federal cyber officials say

Apr 25, 2025 12:50 AM

Tags: ai, cyber, cybersecurity

More broadly, AI is viewed as being a double-edged sword in cybersecurity, one that can bolster both defensive and offensive operations. First seen on cyberscoop.com Jump to article: cyberscoop.com/ai-speeds-up-analysis-work-for-humans-two-federal-cyber-officials-say/