Tag: cyber
-
MIWIC25: Michelle Corrigan, Director of Digital Care Hub
Tags: cyberOrganised by Eskenzi PR in media partnership with the IT Security Guru, the Most Inspiring Women in Cyber Awards aim to shed light on the remarkable women in our industry. The following is a feature on one of 2024’s Top 20 women selected by an esteemed panel of judges. Presented in a Q&A format, the nominee’s answers are…
-
CISA Alerts on Active Exploitation of CentreStack Hard-Coded Key Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert highlighting a critical vulnerability in Gladinet CentreStack, a cloud-based enterprise file-sharing platform. The issue, tracked as CVE-2025-30406, involves the use of a hard-coded cryptographic key that could enable attackers to execute remote code on compromised systems, posing a major security risk to organizations relying on…
-
Ransomware Groups Target Organizations to Exfiltrate Data and Blackmail via Leak Site Posts
Ransomware attacks have continued their relentless assault on organizations worldwide, with a focus on data exfiltration and subsequent blackmail through leak site posts. Rapid7 Labs’ analysis of internal and public data provides insights into the evolving landscape of ransomware threats. Evolving Tactics in Ransomware Operations The ransomware ecosystem has seen a shift where established and…
-
Cyber Monday: 12 Tipps, um sicher zu shoppen
Der sogenannte Cyber Monday steht kurz bevor und leitet den Start des Weihnachtsverkaufs im Internet ein. Auch für Schnäppchenjäger und Anbieter in Deutschland gewinnt der Cyber Monday zunehmend an Popularität, doch leider wittern auch Kriminelle immer öfter an diesem Tag die große Beute. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2014/11/28/cyber-monday-12-tipps-um-sicher-zu-shoppen/
-
Is HR running your employee security training? Here’s why that’s not always the best idea
Tags: attack, awareness, best-practice, breach, business, ciso, communications, compliance, cyber, cybersecurity, data, finance, guide, healthcare, privacy, resilience, risk, security-incident, service, threat, training, vulnerabilityHR doesn’t have specialized security knowledge: Another limitation is that an organization’s security training can be a component in maintaining certain certifications, compliance, contractual agreements, and customer expectations, according to Hughes.”If that’s important to your organization, then security, IT, and compliance teams will know the subjects to cover and help guide in the importance of…
-
Adobe Security Update: Patches Released for Multiple Product Vulnerabilities
Adobe has announced critical security updates for several of its popular software products, addressing vulnerabilities that could potentially be exploited by attackers. The Product Security Incident Response Team (PSIRT) has urged all users to apply these updates immediately to protect their systems and data. These updates are part of Adobe’s ongoing commitment to ensuring the…
-
Cyber-Resilienz statt bloße Cyber-Resistenz: 5 Tipps für mehr Widerstandsfähigkeit gegenüber -angriffen
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/cyber-resilienz-statt-resistenz-5-tipps-widerstandsfaehigkeit-angriffe
-
New Double-Edged Email Attack Steals Office 365 Credentials and Delivers Malware
Cybersecurity experts have uncovered a sophisticated phishing campaign that employs a double-edged tactic to compromise Office 365 credentials and deliver malware, posing significant risks to organizations worldwide. The campaign, identified by the Cofense Phishing Defense Center (PDC), uses a file deletion reminder as a pretext to trick victims into engaging with what appears to be…
-
Europäischer Cyber Security Monat: Statistiken, Events und Tipps für Ihre Sicherheit
Tags: cyberIm Oktober 2012 ging der Europäische Cyber Security Monat (European Cyber Security Month ECSM) als Pilotprojekt europaweit an den Start. Die jährlich stattfindende Aktion zum Thema Cyber-Sicherheit wurde nach dem Vorbild erfolgreicher Aufklärungskampagnen rund um den Globus entwickelt. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2014/10/15/europaischer-cyber-security-monats-statistiken-events-und-tipps-fur-ihre-sicherheit/
-
New Mirai Botnet Variant Exploits TVT DVRs to Gain Admin Control
GreyNoise has noted a sharp escalation in hacking attempts targeting TVT NVMS9000 Digital Video Recorders (DVRs). The surge in malicious activity, peaking on April 3, 2025, with over 2,500 unique IP addresses, suggests a new variant of the notorious Mirai botnet is at play, exploiting an information disclosure vulnerability to seize administrative control over these…
-
HP-Bericht: Alte Schwachstellen sind eine große Gefahr
Aus dem Cyber Risk Report 2015 von HP geht hervor, dass 44 Prozent der in 2014 bekanntgewordenen Datenlücken auf Schwachstellen zurückzuführen sind, die zwei bis vier Jahre alt sind. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/02/25/hp-bericht-alte-schwachstellen-sind-eine-grose-gefahr/
-
Windows Kerberos Vulnerability Enables Security Feature Bypass
Microsoft has disclosed a new security vulnerability in Windows operating systems, tracked as CVE-2025-29809. This flaw, classified withImportantseverity, impacts the Kerberos authentication protocol, potentially enabling attackers to bypass critical security features. The vulnerability stems from weaknesses described underCWE-922: Insecure Storage of Sensitive Information, making it a pressing concern for organizations relying on Kerberos for secure authentication.…
-
US banking regulator reports on ‘major’ cyber incident involving senior officials’ emails
The U.S. Office of the Comptroller of the Currency told Congress that a breach of its email systems reported in February involved “highly sensitive information” in the accounts of high-ranking officials. First seen on therecord.media Jump to article: therecord.media/office-comptroller-currency-email-hack-report
-
Hellcat Ransomware Upgrades Arsenal to Target Government, Education, and Energy Sectors
Tags: attack, cyber, cybersecurity, exploit, government, group, phishing, ransomware, service, spear-phishing, tactics, vulnerability, zero-dayThe cybersecurity community has raised alarms over the rapid evolution of the Hellcat ransomware group, which has escalated its tactics to target critical sectors. Hellcat, which emerged in mid-2024, now employs a sophisticated blend of psychological manipulation, zero-day vulnerabilities, and Ransomware-as-a-Service (RaaS) to expand its influence. Spear Phishing and Zero-day Exploits Hellcat operators initiate attacks…
-
NCSC shares technical details of spyware targeting Uyghur, Tibetan and Taiwanese groups
The U.K.’s National Cyber Security Centre and international cybersecurity and intelligence agencies on Wednesday said hackers are deploying two forms of previously identified spyware to snoop on Uyghur, Tibetan and Taiwanese individuals and civil society organizations. First seen on therecord.media Jump to article: therecord.media/ncsc-shares-details-on-spyware-targeting-uyghur-tiben-taiwanese-groups
-
Was ist eine Cyber-Versicherung?
Eine Cyber-Versicherung kann ein hilfreiches Tool sein, das im Falle eines digitalen Sicherheitsvorfalls ermöglicht, das Risiko zu übertragen – allerdings nur bei richtiger Anwendung. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/06/05/ist-eine-cyber-versicherung/
-
Cyber-Resilient-Storage als wirksame Verteidigung gegen Bedrohungen
Digitale Umgebungen sind stetig Cyberbedrohungen ausgesetzt. Diese sind für die Betriebskontinuität eine kontinuierliche Herausforderung. Dies gilt nicht nur für große Unternehmen, sondern insbesondere auch für kleine und mittelständische Firmen (KMU): 82 Prozent der Ransomware-Angriffe im letzten Jahr betrafen Unternehmen mit weniger als 1000 Mitarbeitern. Besonders heikel: über 90 Prozent der Ransomware-Angriffe zielen auch auf die…
-
Pharmacist accused of using webcams to spy on women in intimate moments at work, home
Lawsuit claims sick cyber-voyeurism went undetected for years, using hundreds of PCs, due to lax infosec First seen on theregister.com Jump to article: www.theregister.com/2025/04/09/pharmacist_accused_of_cyber_voyeurism/
-
Cybersecurity Pulse Report 2025: Security Implications of AI
Navigating the Intersection of AI and Cybersecurity in an Era of Accelerating Risk. AI is reshaping cybersecurity, emerging as both a powerful defense mechanism and a sophisticated tool for cyber adversaries. The Cybersecurity Implications of AI Pulse Report 2025 provides an in-depth analysis of how AI is transforming the digital threat landscape. First seen on…
-
Accenture Federal Services and Google Public Sector Launch MxDR for Government to Strengthen Cyber Defenses
First seen on scworld.com Jump to article: www.scworld.com/news/accenture-federal-services-and-google-public-sector-launch-mxdr-for-government-to-strengthen-cyber-defenses
-
New Google Sec-Gemini v1 AI model shows promise in combating cyber threats
First seen on scworld.com Jump to article: www.scworld.com/brief/new-google-sec-gemini-v1-ai-model-shows-promise-in-combating-cyber-threats
-
In the wake of DOGE cuts on cyber, why the healthcare industry must step up
First seen on scworld.com Jump to article: www.scworld.com/perspective/in-the-wake-of-the-doge-cuts-on-cyber-why-the-healthcare-industry-must-step-up
-
Microsoft April 2025 Patch Tuesday: Fixing 121 Vulnerabilities, Including a Critical Zero-Day
Tags: cyber, exploit, flaw, microsoft, remote-code-execution, software, update, vulnerability, zero-dayMicrosoft has rolled out its April 2025 Patch Tuesday update, addressing 121 security vulnerabilities across its software ecosystem. This comprehensive update includes fixes for critical issues such as the elevation of privilege, remote code execution, and information disclosure vulnerabilities. Among the patched flaws is a zero-day vulnerability actively exploited in the wild, underscoring the urgency…
-
Hackers Conceal NFC Carders Behind Apple Pay and Google Wallet
Tags: apple, cyber, cybercrime, exploit, finance, fraud, google, hacker, mobile, nfc, password, technology, vulnerabilityIn a disturbing evolution of financial fraud, cybercriminals are leveraging advanced techniques to exploit mobile payment systems such as Apple Pay and Google Wallet. Once reliant on magnetic stripe card cloning, fraudsters have adapted to breakthroughs in card security technology like chip cards and one-time passwords, exploiting vulnerabilities in contactless payments and digital wallets. By…
-
Vidar Stealer Uses New Deception Technique to Hijack Browser Cookies and Stored Credentials
Vidar Stealer a notorious information-stealing malware has adopted a deceptive method to disguise itself as Microsoft’s BGInfo application. By exploiting a legitimate tool widely used by IT professionals to display system details, attackers have demonstrated advanced techniques to evade detection and execute malicious code designed to compromise sensitive data. BGInfo, part of Microsoft’s Sysinternals Suite,…
-
CISA, experts warn of Crush file transfer attacks as ransomware gang makes threats
The makers of the popular file transfer tool CrushFTP say a responsibly disclosed vulnerability in the software has been weaponized. CISA and cyber researchers are sounding alarm bells. First seen on therecord.media Jump to article: therecord.media/crushftp-vulnerability-exploited