Tag: cyber
-
Hackers Exploit DeepSeek Qwen AI Models for Malware Development
Check Point Research (CPR) has revealed that cybercriminals are increasingly leveraging the newly launched AI models, DeepSeek and Qwen, to create malicious content. These models, which lack robust anti-abuse provisions, have quickly become a preferred choice for threat actors over more regulated platforms like ChatGPT. The exploitation of these tools highlights a concerning shift in…
-
Former Google Engineer Charged for Allegedly Stealing AI Secrets for China
A federal grand jury has indicted Linwei Ding, also known as Leon Ding, a former Google software engineer, on four counts of theft of trade secrets. The charges stem from allegations that Ding stole proprietary artificial intelligence (AI) technologies from Google and shared them with companies based in the People’s Republic of China (PRC). According…
-
Check Point entdeckt ersten Missbrauch der KI-Modelle DeepSeek und Qwen
Der Aufstieg von KI-Modellen wie Qwen und DeepSeek markiert einen besorgniserregenden Trend in der Cyber-Welt, wo hochentwickelte Tools zunehmend für böswillige Zwecke missbraucht werden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-entdeckt-ersten-missbrauch-der-ki-modelle-deepseek-und-qwen/a39698/
-
CIOs and CISOs grapple with DORA: Key challenges, compliance complexities
Tags: access, automation, banking, business, cio, ciso, communications, compliance, control, country, cyber, cybersecurity, data, dora, finance, framework, GDPR, governance, jobs, law, monitoring, network, nis-2, penetration-testing, privacy, regulation, resilience, risk, risk-management, service, skills, supply-chain, technology, threat, tool, training, vulnerabilityIn force since January, the Digital Operational Resilience Act (DORA) has required considerable effort from CIOs and CISOs at 20 types of financial entities to achieve compliance. For many, the journey is not complete.”In the past months, financial entities targeted by DORA have been busy internally defining roles and responsibilities related to ICT security, identifying…
-
Building a Culture of Security: Employee Awareness and Training Strategies
Establishing a culture of security, where every employee actively contributes to protecting information, is key to building a strong shield against evolving cyber risks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/building-a-culture-of-security-employee-awareness-and-training-strategies/
-
Dell Update Manager Plugin Flaw Exposes Sensitive Data
Dell Technologies has issued asecurity advisory (DSA-2025-047)to address a vulnerability in the Dell Update Manager Plugin (UMP) that could expose sensitive data to malicious actors. The flaw, identified as CVE-2025-22402, is categorized as a low-risk issue but requires immediate attention and remediation for affected users. The vulnerability has been classified asImproper Neutralization of Script-Related HTML Tags…
-
DeepSeek iOS App Leaks Data to ByteDance Servers Without Encryption
DeepSeek iOS app”, a highly popular AI assistant recently crowned as the top iOS app since its January 25 release”, has been discovered to transmit sensitive user data to ByteDance servers without encryption. The security flaws, uncovered by mobile app security firm NowSecure, have prompted swift reactions from governments, enterprises, and cybersecurity experts worldwide. The…
-
Splunk Introduces >>DECEIVE<< an AI-Powered Honeypot to Track Cyber Threats
Splunk has unveiledDECEIVE(DECeption with Evaluative Integrated Validation Engine), an innovative, AI-augmented honeypot that mimics real-world systems to lure and study cyber attackers. By leveraging advanced artificial intelligence, DECEIVE provides organizations with a powerful means of tracking, analyzing, and understanding malicious activities in real time, offering actionable insights into attacker tactics and techniques. Revolutionizing Cybersecurity with…
-
Overconfident execs are making their companies vulnerable to fraud
Cyber fraud (which includes activity such as hacking, deepfakes, voice cloning and highly sophisticated phishing schemes) rose by 14% year over year, according to Trustpair. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/07/cyber-fraud-growth/
-
Die besten Cyber-Recovery-Lösungen
Tags: access, ai, backup, business, cloud, cyber, cyberattack, data, detection, endpoint, Hardware, incident response, mail, malware, microsoft, mitigation, monitoring, ransomware, risk, saas, service, software, threat, tool, update, vulnerability, zero-trust -
Kimsuky Group Leverages RDP Wrapper for Persistent Cyber Espionage
The notorious North Korean APT group Kimsuky has continued its cyber espionage operations, leveraging spear-phishing attacks and remote First seen on securityonline.info Jump to article: securityonline.info/kimsuky-group-leverages-rdp-wrapper-for-persistent-cyber-espionage/
-
Dennis Weyel erinnert im NISKontext daran: Firmenleitung haftet bei Cyber-Attacken!
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/dennis-weyel-erinnerung-nis-2-kontext-firmenleitung-haftung-cyber-attacken
-
Federal Cyber Workers Can Now Accept Trump Resignation Offer
CISO Buyout Offers, Industry-Wide Skills Shortage Raise Fears of Cybersecurity Gaps. The Cybersecurity and Infrastructure Security Agency has reversed an exemption for its staffers to participate in the administration’s “Fork in the Road” resignation program, as lawmakers and security experts warn of a growing cyber workforce shortage threatening U.S. national security. First seen on govinfosecurity.com…
-
The Digital Executive: How to Protect Your Personal and Professional Digital Footprint
Executives today operate in an increasingly connected world, where their digital presence is often as visible as their professional reputation. From corporate bios and media interviews to personal social media activity, an executive’s digital footprint is extensive and, if left unprotected, a cyber and physical security risk. Recent high-profile incidents, including the tragic killing of……
-
Hackers Exploit 3,000 ASP.NET Machine Keys to Hack IIS Web Servers Remotely
Microsoft has raised alarms about a new cyber threat involving ViewState code injection attacks exploiting publicly disclosed ASP.NET machine keys to compromise ISS web servers. Microsoft has identified over 3,000 publicly disclosed keys vulnerable to ViewState code injection attacks. Unlike stolen keys sold on dark web forums, these keys are openly available in code repositories,…
-
The Cyber Savanna: A Rigged Race You Can’t Win, but Must Run Anyway
When it comes to protecting your company from cyberattacks, you don’t have to be the fastest gazelle, you just can’t afford to be the slowest. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/cyber-savanna-rigged-race-you-cant-win-must-run-anyway
-
The Cyber-Driven Domino Effect: How Financial and Security Crises Bankrupt Businesses
First seen on scworld.com Jump to article: www.scworld.com/perspective/the-cyber-driven-domino-effect-how-financial-and-security-crises-bankrupt-businesses
-
UK’s Cyber Monitoring Centre begins incident classification work
The Cyber Monitoring Centre will work to categorise major incidents against a newly developed scale to help organisations better understand the nature of systemic cyber attacks and learn from their impact First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618805/UKs-Cyber-Monitoring-Centre-begins-incident-classification-work
-
Cyber security training for executives: Why and how to build it
Building effective cyber security training for executives is no longer just an option”, it’s a business necessity. In today’s rapid information sharing world, executive cyber awareness is First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/cyber-security-training-for-executives-why-and-how-to-build-it/
-
Ransomware Payments Decreased by 35% in 2024, Research Finds
Ransomware payments dropped 35% in 2024 due to law enforcement crackdowns and stronger cyber defenses, forcing attackers to adapt with new tactics. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/ransomware-payments-decrease-2024-chainalysis/
-
Abyss Locker Ransomware Attacking Critical Network Devices including ESXi servers
The Abyss Locker ransomware, a relatively new but highly disruptive cyber threat, has been actively targeting critical network devices, including VMware ESXi servers, since its emergence in 2023. This ransomware group employs sophisticated tactics to infiltrate corporate networks, exfiltrate sensitive data, and encrypt systems for financial extortion. Its focus on virtualized environments has made it…
-
Weaponized SVG Files With Google Drive Links Attacking Gmail, Outlook Dropbox Users
A new wave of phishing attacks is leveraging Scalable Vector Graphics (SVG) files to bypass traditional email security measures and target users of Gmail, Outlook, Dropbox, and other popular platforms. These attacks, which began gaining momentum in late 2024, have surged since January 2025, demonstrating the adaptability of threat actors in exploiting less scrutinized file…
-
Flesh Stealer Malware Attacking Chrome, Firefox, and Edge Users to Steal Passwords
A newly identified malware, Flesh Stealer, is rapidly emerging as a significant cybersecurity threat in 2025. Designed to extract sensitive data such as passwords, cookies, and browsing history, the malware targets widely used browsers like Google Chrome, Mozilla Firefox, Microsoft Edge, and Opera. Additionally, it infiltrates messaging applications like Telegram and Signal to exfiltrate stored…
-
Beware of Nova Stealer Malware Sold for $50 on Hacking Forums
The cybersecurity landscape faces a new challenge with the emergence of Nova Stealer, a malware marketed under the Malware-as-a-Service (MaaS) model. Priced as low as $50 for a 30-day license, this malicious tool has gained traction among cybercriminals for its affordability and effectiveness. Nova Stealer, a modified variant of the SnakeLogger malware, is designed to…
-
XE Hacker Group Exploiting Veracode 0-Day’s to Deploy Malware Steal Credit Card Details
Tags: access, credit-card, cve, cyber, cybercrime, exploit, group, hacker, malware, software, vulnerability, zero-dayThe XE Group, a sophisticated Vietnamese-origin cybercrime organization active since 2013, has escalated its operations by exploiting two zero-day vulnerabilities in VeraCore software, CVE-2024-57968 and CVE-2025-25181. These vulnerabilities, identified in a joint investigation by Intezer and Solis Security, have been used to deploy malware, steal sensitive information, and maintain long-term access to compromised systems. VeraCore…
-
New UK Cyber Monitoring Centre Introduces ‘Richter Scale’ for Cyber-Attacks
This new independent non-profit was set up by the UK insurance industry to bring more transparency around cyber events First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-uk-cyber-monitoring-centre/
-
Hacker nutzen Deepseek und Qwen bereits zur Entwicklung bösartiger Inhalte aus
Check Point Software Technologies sieht bereits den ersten Missbrauch der neuen KI-Modelle: nach dem Start von Deepseek und Qwen beobachteten Sicherheitsforscher von Check Point Research (CPR), dass Cyber-Kriminelle schnell von ChatGPT zu diesen neuen Plattformen wechselten, um bösartige Inhalte zu entwickeln. Hacker tauschen sich darüber aus, wie sie die Modelle manipulieren und unzensierte Inhalte anzeigen…
-
Paragon Spyware Allegedly Ends Spyware Contract with Italy
Paragon Solutions, an Israeli cybersecurity firm, has reportedly ended its spyware contract with Italy. The termination comes in the wake of revelations that its military-grade hacking software, Graphite, was allegedly used to target 90 individuals, including journalists and activists, across two dozen countries. This includes three Italian figures critical of the government’s policies. The spyware…