Tag: cyber
-
Boards Urged to Follow New Cyber Code of Practice
The British government has launched a new code of practice designed to boost corporate cyber governance First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bords-urged-follow-new-cyber-code/
-
Phishing Up 175%: India’s New Cyber Report Flags BFSI Sector Vulnerabilities
I First seen on thecyberexpress.com Jump to article: thecyberexpress.com/digital-threat-report-2024/
-
Google Patches Actively Exploited Android 0-Day Vulnerability
Google has issued critical security updates to address a recently discovered zero-day vulnerability actively exploited in Android devices. The Android Security Bulletin for April 2025 highlights the details of multiple security vulnerabilities, including high-profile issues such asCVE-2024-53150andCVE-2024-53197, which have reportedly been exploited in targeted attacks. These vulnerabilities are addressed in the security patch levels of2025-04-05or…
-
Kellogg’s Servers Breached, Hackers Steal Sensitive Data
WK Kellogg Co., one of the world’s leading cereal and snack manufacturers, has fallen victim to a significant data breach, exposing the sensitive information of an undisclosed number of individuals. The breach, which occurred on December 7, 2024, was only discovered nearly three months later on February 27, 2025, according to a notification submitted by…
-
Why DEI is key for a cyber safe future
Tags: access, ai, country, cyber, cyberattack, cybersecurity, data-breach, infrastructure, mitigation, regulation, risk, skills, technology, threatgrow a workforce and body of expertise, not shrink it.By illuminating career pathways or creating opportunities for those who have been historically overlooked, DEIB programs welcome people that may not have been exposed or traditionally have lacked access to the space. Across the US, Black practitioners make up only 8% of the total tech workforce.…
-
Xanthorox AI: New Automated Hacking Tool Surfaces on Hacker Forums
A new malicious AI tool,Xanthorox AI, has emerged on underground hacker forums. Dubbed the >>Killer of WormGPT and all EvilGPT variants,
-
Apollo Router Vulnerability Enables Resource Exhaustion via Optimization Bypass
A critical vulnerability (CVE-2025-32032) has been identified in Apollo Router, a widely used GraphQL federation tool, allowing attackers to trigger resource exhaustion and denial-of-service (DoS) conditions. Rated7.5 (High)on the CVSS v3.1 scale, the flaw impacts users running unpatched versions of the software. Technical Overview The vulnerability resides in Apollo Router’s query planner, which failed to…
-
WhatsApp for Windows Flaw Allowed Remote Code Execution via File Attachments
A critical vulnerability identified as CVE-2025-30401 was recently disclosed, highlighting a major security flaw in WhatsApp for Windows. This issue, which primarily affects desktop application versions prior to 2.2450.6, allowed attackers to exploit mismatched file metadata to execute arbitrary code on unsuspecting users’ systems. Technical Details of CVE-2025-30401 According to the Facebook blog, the vulnerability arises from…
-
PoC Exploit Reveals SSH Key Exposure via Yelp Vulnerability on Ubuntu
Security researchers have uncovered a critical vulnerability (CVE-2025-3155) in Ubuntu’s default help browser Yelp that could expose sensitive system files including SSH private keys. The flaw impacts Ubuntu desktop installations and stems from improper handling of XML content in GNOME’s help documentation system. Technical Breakdown of CVE-2025-3155 Affected Systems: Vulnerability Chain: Attack Scenario Walkthrough Key…
-
Beyond the Firewall: Evansville Christian School Deploys Smarter Google Workspace Security Safety
How the School’s IT Team Gained Visibility, Prevents Cyber Threats, and Protects Student Data with Cloud Monitor Evansville Christian School in Newburgh, Indiana, supports about 1,100 students and 200 faculty and staff. Like many K-12 schools, they have foundational cybersecurity tools in place, including a firewall and GoGuardian for content filtering and student monitoring. But,…
-
Tariff Wars: The Technology Impact
How CIOs and CISOs Can Navigate With Balance Tariff wars may hit technology leaders hard in 2025 as the Trump administration’s 10% import tax, plus reciprocal tariffs, spikes costs. CIOs and CISOs face supply chain disruption and heightened cyber risks. But they can adapt with cloud shifts, smart deals and better advocacy. First seen on…
-
FBI investigates cyber forensics expert over allegations of falsified education, work background
Tags: cyberFirst seen on scworld.com Jump to article: www.scworld.com/brief/fbi-investigates-cyber-forensics-expert-over-allegations-of-falsified-education-work-background
-
Bipartisan Senate bill strengthens Secret Service’s cyber laundering probe authority
First seen on scworld.com Jump to article: www.scworld.com/brief/bipartisan-senate-bill-strengthens-secret-services-cyber-laundering-probe-authority
-
MSSPs, It’s Time to Own Cyber Brand Defense
First seen on scworld.com Jump to article: www.scworld.com/perspective/mssps-its-time-to-own-cyber-brand-defense
-
Threat Actors Exploit Toll Payment Services in Widespread Hacking Campaign
In a sophisticated cybercrime operation, the Smishing Triad, a China-based group, has been identified as the orchestrator behind a surge in smishing campaigns targeting consumers in the US and UK. These campaigns exploit toll payment services like FasTrak, E-ZPass, and I-Pass, with expectations of expanding globally. The Smishing Triad’s Modus Operandi The group employs fraudulent…
-
Everest Ransomware Gang’s Leak Site Hacked and Defaced
TechCrunch has uncovered a concerning development in consumer-grade spyware: a stealthy Android monitoring app that employs password-protected uninstallation to prevent removal. This app, which abuses built-in Android features like overlay permissions and device admin access, exemplifies the escalating technical sophistication of stalkerware tools designed for covert surveillance. While rebooting into >>safe mode
-
ToddyCat Attackers Exploited ESET Command Line Scanner Vulnerability to Conceal Their Tool
In a sophisticated cyberattack, the notorious ToddyCat APT group utilized a previously unknown vulnerability in ESET’s Command Line Scanner (ecls) to mask their malicious activities. The attack came to light when researchers detected a suspicious file named version.dll in the temp directories of multiple compromised systems. This file was identified as a tool called TCESB,…
-
Threat Actors Use VPS Hosting Providers to Deliver Malware and Evade Detection
Cybercriminals are intensifying phishing campaigns to spread the Grandoreiro banking trojan, targeting users primarily in Mexico, Argentina, and Spain. A detailed analysis by Forcepoint X-Labs reveals the sophisticated techniques employed by these attackers to evade detection and deliver malware. Phishing Tactics and Infrastucture The campaign begins with phishing emails purportedly from tax agencies, containing high-importance…
-
Auto-Color Linux Backdoor: TTPs and Internal Architecture Exposed
A newly identified Linux backdoor named >>Auto-Color,
-
Scattered Spider’s ‘King Bob’ Pleads Guilty to Cyber Charges
The 20-year-old was arrested in January 2024 alongside four other group members who carried out related cybercriminal acts, earning them similar charges. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/scattered-spider-king-bob-pleads-guilty-charges
-
Five Steps to Move to Exposure Management
Tags: access, attack, breach, business, cloud, compliance, cve, cyber, data, exploit, group, identity, infrastructure, Internet, iot, monitoring, network, password, risk, service, software, strategy, technology, threat, tool, vulnerability, vulnerability-managementEach Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we explore the five steps to take on your journey to exposure management. You can read the entire Exposure Management Academy series here. Chances are, you’re buried in vulnerabilities and…
-
Untersuchung: PDF wird zur Seuchenschleuder
Mit über 400 Milliarden geöffneten PDF-Dateien im letzten Jahr nutzen Cyber-Kriminelle das Format gezielt für versteckten Schadcode. Laut IT-Forensik erfolgen 68 Prozent aller Angriffe per E-Mail davon enthalten 22 Prozent bösartige PDF-Anhänge. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/untersuchung-pdf-wird-zur-seuchenschleuder/
-
Threat Actors Exploit Fake CAPTCHAs and Cloudflare Turnstile to Distribute LegionLoader
In a sophisticated attack targeting individuals searching for PDF documents online, cybercriminals are using deceptive CAPTCHA mechanisms combined with Cloudflare’s Turnstile to distribute the LegionLoader malware. According to Netskope Threat Labs, this campaign, which started in February 2025, has affected over 140 customers primarily in North America, Asia, and Southern Europe, with the technology and…
-
HellCat, Rey, and Grep Groups Dispute Claims in Orange and HighWire Press Cases
SuspectFile.com has uncovered a complex web of overlapping claims and accusations within the cybercrime underworld, highlighting a case involving the ransomware groups HellCat, Rey, and grep, along with the controversial group Babuk2. The investigation delves into two significant cyberattacks: one against the telecommunications company >>Orange>HighWire Press.
-
AI Surpasses Elite Red Teams in Crafting Effective Spear Phishing Attacks
In a groundbreaking development in the field of cybersecurity, AI has reached a pivotal moment, surpassing elite human red teams in the creation of effective spear phishing attacks. According to research conducted by Hoxhunt, AI agents have demonstrated a 24% higher effectiveness rate compared to human teams in simulated phishing campaigns against millions of global…
-
Threat Actors Use Windows Screensaver Files as Malware Delivery Method
Cybersecurity experts at Symantec have uncovered a sophisticated phishing campaign targeting various sectors across multiple countries, leveraging the Windows screensaver file format (.scr) as a vector for malware distribution. This method, while seemingly innocuous, allows attackers to execute malicious code under the guise of a harmless screensaver file. Campaign Overview The campaign, observed by Symantec,…
-
Darknet’s Xanthorox AI Offers Customizable Tools for Hackers
Xanthorox AI, a self-contained system for offensive cyber operations, has emerged on darknet forums First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/darknets-xanthorox-ai-hackers-tools/
-
EDR Antivirus Solutions Miss Two-Thirds (66%) of Malware Infections SpyCloud Research
Deep visibility into malware-siphoned data can help close gaps in traditional defenses before they evolve into major cyber threats like ransomware and account takeover SpyCloud, the leading identity threat protection company, today released new analysis of its recaptured darknet data repository that shows threat actors are increasingly bypassing endpoint protection solutions: 66% of malware infections…
-
20-Year-Old Scattered Spider Hacker Pleads Guilty in Major Ransomware Case
A 20-year-old Noah Urban, a resident of Palm Coast, Florida, pleaded guilty to a series of federal charges in a Jacksonville courtroom. Urban, linked to the infamous Scattered Spider hacking group, admitted to charges of conspiracy, wire fraud, and aggravated identity theft in Florida, as well as conspiracy to commit wire fraud in a separate…
-
Xanthorox AI Surfaces on Dark Web as Full Spectrum Hacking Assistant
A sophisticated new artificial intelligence (AI) platform tailored for offensive cyber operations, named Xanthorox AI, has been identified… First seen on hackread.com Jump to article: hackread.com/xanthorox-ai-dark-web-full-spectrum-hacking-assistant/