Tag: cyber
-
Beware of Fake Job Interview Challenges Targeting Developers to Deliver Malware
Tags: attack, credentials, crypto, cyber, cyberattack, jobs, korea, login, malicious, malware, north-korea, software, threatA new wave of cyberattacks, dubbed >>DeceptiveDevelopment,
-
New Phishing Attack Targets Amazon Prime Users to Steal Login Credentials
A new phishing campaign targeting Amazon Prime users has been identified, aiming to steal login credentials and other sensitive information, including payment details and personal verification data. The attack, analyzed by the Cofense Phishing Defense Center (PDC), uses a carefully crafted email impersonating official Amazon communications to deceive recipients. Sophisticated Email Spoofing Campaign Exploits Amazon…
-
How to create an effective incident response plan
Tags: access, advisory, attack, backup, breach, business, ceo, ciso, communications, corporate, cyber, cybersecurity, email, endpoint, exploit, finance, governance, guide, incident, incident response, insurance, law, lessons-learned, malicious, monitoring, network, office, phone, ransomware, risk, security-incident, service, strategy, supply-chain, technology, threat, updateEstablish a comprehensive post-incident communications strategy: Another key element that can make or break an incident response strategy is communications. Without clear communications among the major stakeholders of the business, a company might experience much longer downtimes or the loss of vital processes for extended periods.”How are you going to go about communicating? With whom?…
-
LightSpy Malware Expands With 100+ Commands to Target Users Across All Major OS Platforms
The LightSpy surveillance framework has significantly evolved its operational capabilities, now supporting over 100 commands to infiltrate Android, iOS, Windows, macOS, and Linux systems, and routers, according to new infrastructure analysis. First documented in 2020, this modular malware has shifted from targeting messaging applications to focusing on social media database extraction and cross-platform surveillance, marking…
-
Critical RCE Vulnerability in MITRE Caldera Proof of Concept Released
A critical remote code execution (RCE) vulnerability has been uncovered in MITRE Caldera, a widely used adversarial emulation framework. The flaw (CVE-2025-27364) affects all versions prior to commit 35bc06e, potentially exposing systems running Caldera servers to unauthenticated attacks. Attackers can exploit this vulnerability by abusing dynamic compilation features in Caldera’s Sandcat and Manx agents, leading to…
-
CISA Alerts: Oracle Agile Vulnerability Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding active exploitation of a severe deserialization vulnerability (CVE-2024-20953) in Oracle Agile Product Lifecycle Management (PLM) software. Added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on February 24, 2025, the flaw allows attackers with low-privileged access to execute arbitrary code on unpatched…
-
Hackers Evade Outlook Spam Filters to Deliver Malicious ISO Files
A newly discovered technique allows threat actors to circumvent Microsoft Outlook’s spam filters to deliver malicious ISO files, exposing organizations to sophisticated phishing campaigns. The bypass leverages hyperlink obfuscation to disguise malicious links as benign URLs, enabling attackers to distribute malware-laden disk image files directly to victims’ inboxes. As per a report by Afine, Security…
-
KernelSnitch: Uncovering a New Side-Channel Attack on Data Structures
Researchers at Graz University of Technology have uncovered a groundbreaking software-based side-channel attack,KernelSnitch, which exploits timing variances in Linux kernel data structures. Unlike hardware-dependent attacks, KernelSnitch targets hash tables, radix trees, and red-black trees, enabling unprivileged attackers to leak sensitive data across isolated processes, as per a report by a Researcher Published on Github. The…
-
Stately Taurus Cyber Attacks in Southeast Asia Tied to Bookworm Malware
A new report from Unit 42 has linked the Stately Taurus threat actor to Bookworm malware, revealing a First seen on securityonline.info Jump to article: securityonline.info/stately-taurus-cyber-attacks-in-southeast-asia-tied-to-bookworm-malware/
-
Can You Fully Control Your NHIs?
Is Your Organization Truly in Control of its Non-Human Identities? The increasing complexity of cyber interactions has necessitated a shift in our approach to security. One area that is often overlooked in traditional security models is the management of Non-Human Identities (NHIs). This critical aspect of access control plays a crucial role. Now, ask yourself,……
-
Confident in Your Cloud Security Strategy?
Are You Confident in Your Cloud Security Strategy? How confident are you in your cybersecurity strategy? The cyber threats demands a robust and comprehensive approach to securing all aspects of your digital assets. This security extends beyond human users and should include Non-Human Identities (NHIs) too. Understanding Non-Human Identities (NHIs) NHIs, or machine identities, are……
-
UAC-0212: Hackers Unleash Devastating Cyber Attack on Critical Infrastructure
In a recent escalation of cyber threats, hackers have launched a targeted campaign, identified as UAC-0212, aimed at compromising critical infrastructure facilities in Ukraine. This campaign, which began in the second half of 2024, involves sophisticated tactics to infiltrate the networks of developers and suppliers of automation and process control solutions. The attackers’ ultimate goal…
-
A 5-step blueprint for cyber resilience
First seen on scworld.com Jump to article: www.scworld.com/resource/a-5-step-blueprint-for-cyber-resilience
-
Why we need an expanded CISA to fight today’s cyber threats
First seen on scworld.com Jump to article: www.scworld.com/perspective/why-we-need-an-expanded-cisa-to-fight-todays-cyber-threats
-
TSforge New Tool Bypasses Windows Activation on All Versions
A significant breakthrough in bypassing Windows activation has been achieved with the introduction of TSforge, a powerful exploit developed by researchers. This tool is capable of activating every edition of Windows since Windows 7, as well as all Windows add-ons and Office versions since Office 2013. TSforge represents a major milestone in the history of…
-
Cybercriminals Impersonate Windows >>Commander Tool<< to Launch LummaC2 Malware Attack
The AhnLab Security Intelligence Center (ASEC) has uncovered a new cyberattack campaign leveraging the LummaC2 malware, which is being distributed under the guise of a cracked version of Total Commander. Total Commander is a widely used Windows file management tool offering features like advanced search, folder synchronization, and FTP/SFTP support. While the legitimate software provides…
-
Android App on Google Play Targets Indian Users to Steal Login Credentials
A malicious Android application, Finance Simplified (package: com.someca.count), has been identified on the Google Play Store, targeting Indian users under the guise of a financial management tool. The app, which claims to offer an EMI calculator, is instead a sophisticated malware platform facilitating predatory lending, data theft, and extortion. Rapid Spread and Exploitative Practices The…
-
Industrial Organizations Under Siege: Chinese Hackers Wield Advanced FatalRAT Malware
A recent investigation by Kaspersky ICS CERT has uncovered a sophisticated cyberattack targeting industrial organizations across the Asia-Pacific region, particularly those in Taiwan, Malaysia, China, Japan, Thailand, South Korea, Singapore, the Philippines, Vietnam, and Hong Kong. The attackers are using a highly advanced version of the FatalRAT malware, delivered through a complex multi-stage payload framework…
-
GitVenom Campaign Abuses Thousands of GitHub Repositories to Infect Users
The GitVenom campaign, a sophisticated cyber threat, has been exploiting GitHub repositories to spread malware and steal cryptocurrency. This campaign involves creating hundreds of fake GitHub repositories that appear legitimate but contain malicious code. These repositories are designed to lure unsuspecting developers into downloading and executing the malicious code, which can lead to significant financial…
-
UAC-0212: Hackers Unleash Devastating Cyber Assault on Critical Infrastructure
In a recent escalation of cyber threats, hackers have launched a targeted campaign, identified as UAC-0212, aimed at compromising critical infrastructure facilities in Ukraine. This campaign, which began in the second half of 2024, involves sophisticated tactics to infiltrate the networks of developers and suppliers of automation and process control solutions. The attackers’ ultimate goal…
-
Widespread Chrome Malware: 16 Extensions Infect Over 3.2 Million Users
A recent cybersecurity investigation has uncovered a cluster of 16 malicious Chrome extensions that have compromised at least 3.2 million users. These extensions, which include functionalities like screen capture, ad blocking, and emoji keyboards, were found to inject code into browsers, facilitating advertising and search engine optimization fraud. The threat actor behind this campaign is…
-
Sliver C2 Server Vulnerability Enables TCP Hijacking for Traffic Interception
A significant vulnerability has been discovered in the Sliver C2 server, a popular open-source cross-platform adversary emulation and red team framework. This vulnerability, identified as CVE-2025-27090, allows attackers to hijack TCP connections, enabling them to intercept and manipulate traffic. The exploit leverages a Server-Side Request Forgery (SSRF) technique, which can be particularly damaging as it…
-
Cyber-Sicherheit im Jahr 2025: ISACA hat fünf wichtige Trends identifiziert
Tags: cyberFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/cybersicherheit-2025-isaca-fuenf-wichtigkeit-trends-identifizierung
-
European Union calls for more cyber data-sharing with Nato
Updates to the EU’s Cyber Blueprint, establishing best practice for multilateral security incident response in Europe, include calls for more collaboration with Nato member states, as the geopolitical environment becomes ever more fractious First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366619486/European-Union-calls-for-more-cyber-data-sharing-with-Nato
-
Thailand Targets Cyber Sweatshops to Free 1,000s of Captives
Thai police said it was expecting to soon welcome 7,000 human trafficking victims, forced to work on cybercrime scams in call centers in Mynmar, in a first wave of people being freed from captivity. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/thailand-cyber-sweatshops-free-captives
-
Smart Bed Security Flaw Lets Hackers Access Other Network Devices
Tags: access, backdoor, credentials, cyber, data-breach, flaw, hacker, Internet, iot, network, service, vulnerabilityA security researcher has uncovered critical vulnerabilities in Eight Sleep’s internet-connected smart beds, revealing exposed Amazon Web Services (AWS) credentials, remote SSH backdoors, and potential access to users’ entire home networks. The findings underscore growing concerns about IoT device security as consumers increasingly adopt connected appliances for everyday use. Researcher Discovers AWS Keys and Remote…
-
IT/OT Convergence Fuels Manufacturing Cyber Incidents
Telstra found that 75% of cyber incidents impacting manufacturing firms originated from the targeting of IT systems connected to OT environments First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/itot-fuels-manufacturing-cyber/
-
Microsoft, McAfee und Adobe: 200.000 Phishing-Mails entdeckt
Sicherheitsforscher von Check Point Software Technologies Ltd. haben eine massive Phishing-Kampagne aufgedeckt, bei der Cyber-Kriminelle auf ausgeklügelte URL-Manipulation setzen. Insgesamt wurden 200.000 betrügerische E-Mails entdeckt, die sich weltweit verbreiten. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/microsoft-mcafee-und-adobe-200-000-phishing-mails-entdeckt
-
How to utilize VPN for safe work and remote work environments
A VPN enhances online privacy, encrypts data, and secures devices. Essential for remote work, it protects against cyber threats and ensures safer internet use. First seen on hackread.com Jump to article: hackread.com/how-to-utilize-vpn-safe-work-remote-work-environments/
-
Check Point co-founder on AI, quantum and independence
Gil Shwed, Check Point’s co-founder and executive chairman, discusses the company’s focus on AI-driven security and his commitment to remaining an independent force in the cyber security market First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366619525/Check-Point-co-founder-on-AI-quantum-and-independence