Tag: data
-
Abyss Locker Ransomware Attacking Critical Network Devices including ESXi servers
The Abyss Locker ransomware, a relatively new but highly disruptive cyber threat, has been actively targeting critical network devices, including VMware ESXi servers, since its emergence in 2023. This ransomware group employs sophisticated tactics to infiltrate corporate networks, exfiltrate sensitive data, and encrypt systems for financial extortion. Its focus on virtualized environments has made it…
-
Flesh Stealer Malware Attacking Chrome, Firefox, and Edge Users to Steal Passwords
A newly identified malware, Flesh Stealer, is rapidly emerging as a significant cybersecurity threat in 2025. Designed to extract sensitive data such as passwords, cookies, and browsing history, the malware targets widely used browsers like Google Chrome, Mozilla Firefox, Microsoft Edge, and Opera. Additionally, it infiltrates messaging applications like Telegram and Signal to exfiltrate stored…
-
What is AI Security? How to Protect Your AI Models from Adversarial Attacks?
Artificial Intelligence (AI) is transforming industries by automating tasks, improving decision-making, and enhancing cybersecurity. However, AI models are increasingly being targeted by adversarial attacks, which can manipulate or compromise their integrity. The protection of sensitive data along with trust maintenance and accurate decision-making demands the establishment of AI security. This blog investigates AI security while……
-
Lazarus Group tricks job seekers on LinkedIn with crypto-stealer
North Korea-linked Lazarus Group is duping job seekers and professionals in an ongoing campaign that runs a LinkedIn recruiting scam to capture browser credentials, steal crypto wallet data, and launch persistence.According to a discovery made by BitDefender Labs, threat actors reach out with fake LinkedIn job offers to lure the victims into downloading and executing…
-
Authorities Arrested Hacker Who Compromised 40+ Organizations
Spanish authorities have arrested a hacker believed to be responsible for cyberattacks targeting over 40 public and private organizations globally. The suspect, apprehended on Tuesday in Calpe (Alicante), allegedly compromised sensitive data and disrupted critical services, including government agencies, international institutions, and private corporations. The operation was a collaborative effort between the PolicÃa Nacional and…
-
Google Cloud Platform Data Destruction via Cloud Build
A technical overview of Cisco Talos’ investigations into Google Cloud Platform Cloud Build, and the threat surface posed by the storage permission family. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/gcp-data-destruction-via-cloud-build/
-
OpenAI Data Breach Threat Actor Allegedly Claims 20 Million Logins for Sale
Tags: breach, credentials, cyber, cybersecurity, data, data-breach, email, login, openai, password, threatOpenAI may have become the latest high-profile target of a significant data breach. A threat actor has surfaced on underground forums, claiming possession of email and password credentials for a staggering 20 million OpenAI accounts. This alleged breach has raised serious concerns among tech users and cybersecurity experts worldwide. The threat actor, who remains anonymous,…
-
Top 3 Ransomware Threats Active in 2025
You arrive at the office, power up your system, and panic sets in. Every file is locked, and every system is frozen. A ransom demand flashes on your screen: “Pay $2 million in Bitcoin within 48 hours or lose everything.”And the worst part is that even after paying, there’s no guarantee you’ll get your data…
-
Spanish Police Arrest Suspected NATO and US Army Hacker
Spain’s National Police force has arrested a suspected data thief who targeted government and military victims First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/spanish-police-arrest-nato-us-army/
-
21% of CISOs pressured to not report compliance issues
Tags: awareness, breach, business, ceo, ciso, compliance, control, corporate, cybersecurity, data, dora, finance, framework, governance, incident response, infrastructure, insurance, law, nis-2, regulation, resilience, risk, security-incident, trainingCISOs are increasingly getting caught between business pressures and regulatory obligations, leaving them struggling to balance corporate loyalty and legal accountability.To wit: One in five (21%) security leaders have been pressured by other executives or board members not to report compliance issues at their companies, according to a recent study by security vendor Splunk.The same…
-
The overlooked risks of poor data hygiene in AI-driven organizations
In this Help Net Security interview, Oliver Friedrichs, CEO at Pangea, discusses why strong data hygiene is more important than ever as companies integrate AI into their … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/06/oliver-friedrichs-pangea-data-hygiene/
-
Comic Agilé Luxshan Ratnaravi, Mikkel Noe-Nygaard #323 Why Work Agile?
Tags: datavia the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/02/comic-agile-luxshan-ratnaravi-mikkel-noe-nygaard-323-why-work-agile/
-
Met Police spied on BBC journalists’ phone data for PSNI, MPs told
The Metropolitan Police monitored the phones of 16 BBC journalists on behalf of police in Northern Ireland’s, a cross-party group of MPs heard today First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618778/Met-Police-spied-on-BBC-journalists-phone-data-for-PSNI-MPs-told
-
White House Defends Musk Amid Sensitive Data Access Uproar
Lawmakers Warn of Security Risks as DOGE is ‘Running Roughshod’ in Federal Systems. Democrats on Capitol Hill are calling on the White House to provide transparency into billionaire Elon Musk’s attempts to shrink the U.S. government after reports indicated his unvetted aides gained access to key federal systems containing troves of sensitive data on millions…
-
The biggest breach of US government data is under way
Elon Musk’s DOGE has taken control and accessed large swathes of Americans’ private information held by the U.S. federal government. First seen on techcrunch.com Jump to article: techcrunch.com/2025/02/05/the-biggest-breach-of-u-s-government-data-is-under-way/
-
Thousands of McKinney, Texas, residents impacted by October data breach
The Dallas suburb said its government systems were breached on October 31 but security systems only discovered the incident two weeks later. First seen on therecord.media Jump to article: therecord.media/thousands-mckinney-texas-residents-impacted
-
Trump Hotels data purportedly stolen in cyberattack
First seen on scworld.com Jump to article: www.scworld.com/brief/trump-hotels-data-purportedly-stolen-in-cyberattack
-
Third-party breach impacts Grubhub customer data
First seen on scworld.com Jump to article: www.scworld.com/brief/third-party-breach-impacts-grubhub-customer-data
-
Mobile Malware Targeting Indian Banks Exposes 50,000 Users
Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mobile-malware-indian-banks/
-
IBM Cloud Pak Security Vulnerabilities Expose Sensitive Data to Attackers
IBM recently disclosed a series of significant security vulnerabilities in its Cloud Pak for Business Automation platform, raising alarms about the potential exposure of sensitive data to malicious actors. The security issues, detailed in an official bulletin published on February 4, 2025, affect multiple versions of the Cloud Pak ecosystem and associated open-source components. Vulnerabilities…
-
MoD set to develop £50m data analytics platform with Kainos
The Ministry of Defence has chosen IT services provider Kainos to develop its £50m data analytics platform across all armed services, over a three-year programme First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618611/MoD-set-to-develop-50m-data-analytics-platform-with-Kainos
-
Global ransomware payments plunge by a third amid crackdown
Money stolen falls from record $1.25bn to $813m as more victims refuse to pay off criminal gangsRansomware payments fell by more than a third last year to $813m (£650m) as victims refused to pay cybercriminals and law enforcement cracked down on gangs, figures reveal.The decline in such cyber-attacks where access to a computer or its…
-
International Civil Aviation Organization (ICAO) and ACAO Breached: Cyberespionage Groups Targeting Aviation Safety Specialists
The International Civil Aviation Organization (ICAO) is investigating a data breach affecting system and employee security. The International Civil Aviation Organization (ICAO), a specialized agency of the United Nations, is investigating a significant data breach that has raised concerns about the security of its systems and employees data. In the updated statement published by ICAO,…
-
Chinese Hackers Attacking Linux Devices With New SSH Backdoor
A sophisticated cyber espionage campaign attributed to the Chinese hacking group DaggerFly has been identified, targeting Linux systems through an advanced Secure Shell (SSH) backdoor known as ELF/Sshdinjector.A!tr. This malware, part of a broader attack framework, compromises Linux-based network appliances and Internet-of-Things (IoT) devices, enabling data exfiltration and prolonged persistence within compromised environments. Discovered in…
-
Why CRQ Methodologies Should Be Usable, Defensible, and Informative
In a thoroughly digital world, cyber incidents can have a huge financial impact, with the average cost of a data breach skyrocketing to $4.88 million. Still, too many businesses struggle Read More First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/why-crq-methodologies-should-be-usable-defensible-and-informative/
-
New trojan hijacks Linux and IoT devices
There’s a new trojan on the block, one that specifically targets network appliances and internet of things (IoT) devices running the open-source Linux operating system.FortiGuard Labs has identified a new malware kit, dubbed “ELF/Sshdinjector.A!tr”, that has the ability to infect and remotely control systems, establish root privilege, maintain malware presence, exfiltrate data such as user…