Tag: cyber
-
New Contacto Ransomware Evades AV Detection Uses Windows Console for Execution
In early January 2025, a new ransomware strain identified as Contacto surfaced, showcasing advanced techniques designed to bypass conventional security measures. This analysis provides insights into its operational mechanisms, particularly suited for professionals venturing into ransomware analysis. Operational Mechanisms Upon execution, Contacto ransomware employs the GetConsoleWindow() and ShowWindow() functions to retrieve and conceal its command…
-
New Cyber Threat Exposed: Advanced Techniques Used to Target German Systems
A new cyberattack targeting German entities has recently been uncovered by Cyble Research and Intelligence Labs (CRIL). This attack leverages sophisticated techniques such a First seen on thecyberexpress.com Jump to article: thecyberexpress.com/sliver-impact-and-dll-sideloading/
-
OWASP Smart Contract Top 10 2025 Released What’s new!
The Open Web Application Security Project (OWASP) has released its updated Smart Contract Top 10 for 2025, providing essential insights for developers and security teams in the rapidly evolving Web3 environment. This document outlines the most pressing vulnerabilities found in smart contracts, serving as a crucial resource for maintaining security and protecting against exploitation. OWASP’s new release…
-
Ransomware Attack Forces UK Brit High School to Close Doors For Students
A ransomware attack has compelled UK Brit, a prominent British high school, to close its doors to students for two days, specifically Monday, January 20, and Tuesday, January 21, 2025. This decision follows an incident that occurred on Friday, January 17, which has left school officials scrambling to address potential security breaches. In a statement…
-
EU to take aim at healthcare cyber threat
Tags: attack, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, extortion, healthcare, malicious, ransomware, service, threat, toolThe European Commission is presenting an action plan to strengthen cybersecurity in healthcare as one of its key priorities in the first 100 days of the commission’s new mandate.The healthcare sector has been under increasing pressure from cyberattacks in the past few years, with 309 cybersecurity incidents reported by member states in 2023. Ransomware tops…
-
Getting Better: Advances in Secrets Rotation Tech
Why is Secrets Rotation Technology Crucial in the Data Security Landscape? The safety of sensitive information matters more than ever. With the proliferation of Non-Human Identities (NHIs) and a marked increase in cyber threats, the management of these identities is an integral part of the data management ecosystem. This is where Secrets Rotation technology shines,……
-
PoC Exploit Released for TP-Link Code Execution Vulnerability (CVE-2024-54887)
A serious code execution vulnerability in the TP-Link TL-WR940N router, identified as CVE-2024-54887, has become the focus of intense scrutiny following the release of a proof-of-concept (PoC) exploit. This vulnerability allows attackers to execute arbitrary code on the device remotely without authentication, posing significant risks to network security. The following article provides an overview of…
-
OpenVPN Easy-rsa Vulnerability Allows Attacker to Bruteforce Private CA key
A significant security vulnerability, designated as CVE-2024-13454, has been discovered in the OpenVPN Easy-RSA tool, specifically affecting versions from 3.0.5 to 3.2.0 that utilize OpenSSL 3. This flaw pertains to the incorrect encryption of password-protected Certificate Authority (CA) private keys when using the easyrsa build-ca command. Instead of employing the secureaes-256-cbccipher as intended, Easy-RSA incorrectly defaults to…
-
PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers
Cybersecurity researchers are calling attention to a series of cyber attacks that have targeted Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China with a known malware called ValleyRAT.The attacks leverage a multi-stage loader dubbed PNGPlug to deliver the ValleyRAT payload, Intezer said in a technical report published last week.The infection chain commences with a…
-
Vim Command Line Text Editor Segmentation Vulnerability Patched
Christian Brabandt, a prominent figure in the Vim community, announced the patching of a medium-severity segmentation fault vulnerability identified as CVE-2025-24014. The vulnerability, discovered in versions of Vim before 9.1.1043, could potentially be exploited during silent Ex mode operations, which are designed to run without a visible interface. CVE-2025-24014 can be referenced for further details and tracking…
-
Addressing the intersection of cyber and physical security threats
In this Help Net Security, Nicholas Jackson, Director of Cyber Operations at Bitdefender, discusses how technologies like AI, quantum computing, and IoT are reshaping … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/21/nicholas-jackson-bitdefender-emerging-technologies-threats/
-
US Sanctions Chinese Hackers for Cyber Espionage Campaign
The U.S. Department of State has announced sanctions against two Chinese entities, Yin Kecheng and Sichuan Juxinhe Network First seen on securityonline.info Jump to article: securityonline.info/us-sanctions-chinese-hackers-for-cyber-espionage-campaign/
-
Silver Fox APT Targets Organizations with PNGPlug and ValleyRAT Malware
A sophisticated cyber-espionage campaign targeting organizations across China, Hong Kong, and Taiwan has been uncovered by Intezer’s research First seen on securityonline.info Jump to article: securityonline.info/silver-fox-apt-targets-organizations-with-pngplug-and-valleyrat-malware/
-
Information Security Manual (ISM)
What is the Information Security Manual (ISM)? The Information Security Manual (ISM) is a cybersecurity framework developed by the Australian Signals Directorate (ASD) to help organizations protect their IT and operational technology systems, applications, and data from cyber threats. The ISM is relevant to industries like government, defense, finance, healthcare, and other sectors where sensitive……
-
Esperts found new DoNot Team APT group’s Android malware
Researchers linked the threat actor DoNot Team to a new Android malware that was employed in highly targeted cyber attacks. CYFIRMA researchers linked a recently discovered Android malware to the Indian APT group known as DoNot Team. The Donot Team (aka APT-C-35 and Origami Elephant) has been active since 2016, it focuses on government and military organizations,…
-
Cybersecurity 2025: Check Point präsentiert alarmierenden Jahresbericht
Cyber-Sicherheit ist 2025 nicht nur ein technisches Thema es geht um den Schutz des Vertrauens in unsere Systeme und Institutionen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cybersecurity-2025-check-point-praesentiert-alarmierenden-jahresbericht/a39509/
-
Threat Intelligence’s Top Players Tackle Evolving Cyber Risk
Acquisitions, AI and Emerging Threats Define Strategy for Recorded Future, Google. From Google’s $5.4 billion acquisition of Mandiant to Recorded Future’s fraud insights following Mastercard’s $2.65 billion purchase, threat intelligence vendors are innovating with AI and are focused on operationalizing their data through automation and managed services. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/threat-intelligences-top-players-tackle-evolving-cyber-risk-a-27327
-
Forward-Thinking Industry Leaders Sponsor Most Inspiring Women in Cyber Awards 2025
Eskenzi PR are proud to announce that KnowBe4, Mimecast, Varonis, Bridewell, Certes, and Pentest Tools have joined BT as sponsors for this year’s Most Inspiring Women in Cyber Awards. The 5th annual event, held at the iconic BT Tower on the 26th February 2025, aims to celebrate trailblazers from across the cybersecurity industry who are…
-
MY TAKE: Here’s why Donald Trump really needs to fully embrace Joe Biden’s cybersecurity EO
As one of his final official acts, President Joe Biden issued a landmark directive, addressing the evolving challenges posed by cyber threats while charting a strategic course toward a more secure digital ecosystem. Related: How Trump views of AI, “¦ (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/my-take-heres-why-donald-trump-really-needs-to-fully-embrace-joe-bidens-cybersecurity-eo/
-
DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection
The Threat actor known as DoNot Team has been linked to a new Android malware as part of highly targeted cyber attacks.The artifacts in question, named Tanzeem (meaning “organization” in Urdu) and Tanzeem Update, were spotted in October and December 2024 by cybersecurity company Cyfirma. The apps in question have been found to incorporate identical…
-
Multiple Azure DevOps Vulnerabilities Let Inject CRLF Queries Rebind DNS
Researchers uncovered several significant vulnerabilities within Azure DevOps, specifically focusing on potential Server-Side Request Forgery (SSRF) weaknesses. The findings highlight the importance of robust security measures in cloud-based development environments. During testing, the researcher aimed to identify any Service Connections in the Azure environment that utilized privileged Service Principals. This is a critical area of…
-
Hackers Weaponize npm Packages To Steal Solana Private Keys Via Gmail
Socket’s threat research team has identified a series of malicious npm packages specifically designed to steal private keys from Solana wallets. The implicated packages”, @async-mutex/mutex, dexscreener, solana-transaction-toolkit, and solana-stable-web-huks”, typosquat on popular libraries, appearing to serve legitimate functions while covertly executing malware. The threat actors behind these packages utilize overlapping techniques, employing similar code to…
-
Hackers Weaponize MSI Packages PNG Files to Deliver Multi-stage Malware
Researchers have reported a series of sophisticated cyber attacks aimed at organizations in Chinese-speaking regions, including Hong Kong, Taiwan, and mainland China. These attacks employ a multi-stage loader known as PNGPlug to deliver a malware payload identified as ValleyRAT. The attack chain begins with a phishing webpage that entices victims into downloading a malicious Microsoft…
-
Russia-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware
Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremlin’s efforts to gather economic and political intelligence in Central Asia.The campaign has been assessed to be the work of an intrusion set dubbed UAC-0063, which likely shares overlap with APT28, a nation-state group affiliated with Russia’s…
-
Check Point veröffentlicht Security-Report 2025
Check Point Software Technologies hat seinen jährlichen Bericht ‘The State of Global Cyber Security 2025″ veröffentlicht. Angesichts eines alarmierenden Anstiegs der weltweiten Cyber-Angriffe um 44 Prozent im Vergleich zum Vorjahr enthüllt der Bericht neue Cyber-Trends, neue Taktiken von Hackern und gibt CISOs Anleitungen an die Hand, um unbeschadet durch das Jahr zu kommen. ‘Bei der Cybersicherheit…
-
NSFOCUS Included in External Threat Intelligence Service Providers Landscape Q1 2025
Santa Clara, Calif. January 20, 2025 NSFOCUS, a global provider of intelligent hybrid security solutions, announced that it has been included in the Forrester report, The External Threat Intelligence Service Providers Landscape, Q1 2025 among Notable Providers recently. This is the second time for NSFOCUS to be included in this report, as we have…The post…
-
New IoT Botnet Launching Large-Scale DDoS attacks Hijacking IoT Devices
Large-scale DDoS attack commands sent from an IoT botnet’s C&C server targeting Japan and other countries since late 2024. These commands targeted various companies, which include major Japanese corporations and banks. While a direct link cannot be confirmed, some targeted organizations reported temporary connection and network disruptions during this period that coincided with the observed…