Tag: ibm
-
Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs
The China-aligned threat actor known as Mustang Panda has been observed using an updated version of a backdoor called TONESHELL and a previously undocumented USB worm called SnakeDisk.”The worm only executes on devices with Thailand-based IP addresses and drops the Yokai backdoor,” IBM X-Force researchers Golo Mühr and Joshua Chung said in an analysis published…
-
Mustang Panda Uses SnakeDisk USB Worm and Toneshell Backdoor to Target Air-Gap Systems
IBM X-Force researchers have uncovered sophisticated new malware campaigns orchestrated by the China-aligned threat actor Hive0154, also known as Mustang Panda. The discovery includes an advanced Toneshell backdoor variant that evades detection systems and a novel USB worm called SnakeDisk specifically targeting Thailand-based devices. Enhanced Toneshell Backdoor Evades Detection The latest iteration of Toneshell, dubbed…
-
Red Hat back-office team to be Big and Blue whether they like it or not
Legal, HR, Finance and Accounting moving to IBM from 2026. Engineering and others staying put… for now First seen on theregister.com Jump to article: www.theregister.com/2025/09/08/red_hatters_to_be_big/
-
TDL 002 – Defending the DNS: How Quad9 Protects the Internet with John Todd
Tags: access, apple, attack, business, china, ciso, communications, control, country, crime, cyber, cybersecurity, data, defense, dns, email, encryption, firewall, google, ibm, india, infrastructure, intelligence, Internet, jobs, law, malicious, malware, network, phishing, privacy, service, strategy, technology, threat, tool, zero-trustSummary The Defender’s Log episode features John Todd from Quad9, discussing their mission to protect the internet through secure DNS. Quad9, a non-profit launched in 2017 with founding partners Global Cyber Alliance, Packet Clearing House, and IBM, provides a free, global recursive DNS resolver that blocks malicious domains. Todd emphasizes that Quad9’s success is a…
-
Authenticated Attackers Could Exploit IBM Watsonx Vulnerability to Access Sensitive Data
A newly disclosed security vulnerability, tracked as CVE-2025-0165, has been reported, specifically concerning the users of the IBM Watsonx Orchestrate Cartridge within the IBM Cloud Pak for Data platform. The flaw, officially acknowledged in a security bulletin released by IBM on August 31, 2025, enables blind SQL injection attacks, potentially allowing authenticated attackers to manipulate…
-
Das kostet ein Data Breach 2025
Tags: ai, api, breach, ciso, cyberattack, cyersecurity, data, data-breach, germany, ibm, infrastructure, intelligence, ransomware, risk, security-incident, siem, supply-chain, threat, usa, vulnerabilityLaut einer aktuellen Studie liegen die durchschnittlichen Kosten einer Datenpanne in Deutschland bei 3,87 Millionen Euro.Laut dem aktuellen ‘Cost of a Data Breach”- Report von IBM sind die Kosten einer Datenpanne in Deutschland auf 3,87 Millionen Euro (ca. 4,03 Millionen Dollar) pro Vorfall gesunken im Vorjahr lagen sie noch bei 4,9 Millionen Euro (ca. 5,31…
-
What is the cost of a data breach?
Tags: access, ai, api, attack, automation, breach, business, ciso, compliance, cyber, cyberattack, cybersecurity, data, data-breach, detection, finance, fraud, healthcare, ibm, identity, incident response, india, infrastructure, insurance, intelligence, jobs, law, metric, privacy, programming, ransom, ransomware, regulation, risk, security-incident, service, skills, software, supply-chain, technology, theft, threat, tool, vulnerabilityCanada ($4.84 million) and the UK ($4.14million) remain in the top 10 hardest hit, with ASEAN or Association of Southeast Asian Nations ($3.67 million), Australia ($2.55 million), and India ($2.51 million) among the top 15. Breaches by industry: Healthcare remains the industry hit with the highest costs per breach by far, at $7.42 million despite…
-
QuirkyLoader: A New Malware Loader Spreading Infostealers and Remote Access Trojans (RATs)
IBM X-Force has tracked QuirkyLoader, a sophisticated loader malware deployed by threat actors to distribute prominent families such as Agent Tesla, AsyncRAT, FormBook, MassLogger, Remcos, Rhadamanthys, and Snake Keylogger. This multi-stage threat initiates through spam emails from legitimate providers or self-hosted servers, attaching malicious archives containing a legitimate executable, an encrypted payload masquerading as a…
-
IBM’s Cost of a Data Breach Report 2025
IBM’s 2025 Cost of a Data Breach Report drives home that point: attackers today are often “logging in rather than hacking in”. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/ibms-cost-of-a-data-breach-report-2025/
-
CastleBot MaaS Released Diverse Payloads in Coordinated Mass Ransomware Attacks
IBM X-Force has uncovered CastleBot, a nascent malware framework operating as a Malware-as-a-Service (MaaS) platform, enabling cybercriminals to deploy a spectrum of payloads ranging from infostealers to sophisticated backdoors implicated in ransomware operations. First detected in early 2025 with heightened activity since May, CastleBot facilitates the delivery of threats like NetSupport and WarmCookie, which have…
-
Durch Datenlecks verursachte Kosten sind gefallen
Tags: ai, breach, cyberattack, data, data-breach, deep-fake, fraud, germany, ibm, infrastructure, phishing, risk, security-incident, service, usaDurch KI unterstützte Angriffe wie Phishing und Deepfakes nehmen weiter zu, doch Unternehmen zögern in gleichem Maße nachzurüsten.Die gute Nachricht zuerst: Wie IBM in seinem jährlich erscheinenden Cost of a Data Breach Report herausfand, sind die durchschnittlichen Kosten eines Datenlecks in Deutschland erstmals seit fünf Jahren wieder gesunken. Ein einzelner Vorfall kostete demnach 2024 im…
-
Durch Datenlecks verursachte Kosten sind gefallen
Tags: ai, breach, cyberattack, data, data-breach, deep-fake, fraud, germany, ibm, infrastructure, phishing, risk, security-incident, service, usaDurch KI unterstützte Angriffe wie Phishing und Deepfakes nehmen weiter zu, doch Unternehmen zögern in gleichem Maße nachzurüsten.Die gute Nachricht zuerst: Wie IBM in seinem jährlich erscheinenden Cost of a Data Breach Report herausfand, sind die durchschnittlichen Kosten eines Datenlecks in Deutschland erstmals seit fünf Jahren wieder gesunken. Ein einzelner Vorfall kostete demnach 2024 im…
-
Top cybersecurity M&A deals for 2025
Tags: 5G, access, ai, api, apple, application-security, attack, automation, awareness, banking, breach, business, ceo, cisco, cloud, compliance, control, crowdstrike, cyber, cybersecurity, data, ddos, defense, detection, edr, email, endpoint, finance, firewall, gitlab, government, group, ibm, identity, incident response, infrastructure, intelligence, leak, microsoft, mitigation, network, password, programming, risk, risk-management, saas, service, software, sophos, strategy, supply-chain, technology, threat, tool, training, vulnerability, waf, zero-trustPalo Alto Networks to buy CyberArk for $25B as identity security takes center stage July 30, 2025: Palo Alto Networks is making what could be its biggest bet yet by agreeing to buy Israeli identity security company CyberArk for around $25 billion. “We envision Identity Security becoming the next major pillar of our multi-platform strategy, complementing our leadership…
-
Average global data breach cost now $4.44 million
IBM released its Cost of a Data Breach Report, which revealed AI adoption is greatly outpacing AI security and governance. While the overall number of organizations … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/04/ibm-cost-data-breach-report-2025/
-
IBM Cost of a Data Breach Report 2025 – Kosten von Datenlecks sinken in Deutschland erstmals seit 5 Jahren
First seen on security-insider.de Jump to article: www.security-insider.de/kosten-pro-datenleck-deutschland-sinken-ibm-bericht-a-4ba549f297f96ba3efc34664647dd9a0/
-
IBM Report: Shadow AI and Poor Governance Linked to Costlier Breaches in 2025
Only 34% of organizations with AI governance audit for misuse, IBM’s 2025 breach report warns. Lack of oversight is raising risks and costs. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-breach-risks-rise-as-governance-lags/
-
Global Data Breach Costs Go Down, but Not in US
AI Tools Detect Breaches Quicker but Shadow AI Causes Breaches, Too. Organizations are detecting data breaches more quickly and paying less to remediate them, says IBM’s new Cost of a Data Breach Report 2025. Some caveats apply, with U.S. organizations experiencing higher breach costs. Breach fallout from shadow AI is also rising. First seen on…
-
Enterprises neglect AI security and attackers have noticed
IBM report shows a rush to embrace technology without safeguarding it, and as for governance… First seen on theregister.com Jump to article: www.theregister.com/2025/07/30/firms_are_neglecting_ai_security/
-
Average cost of a data breach in US shoots to record $10 million
The global average cost of a data breach fell from $4.88 million in 2024, a 9% decrease that now matches numbers seen in 2023. First seen on therecord.media Jump to article: therecord.media/ibm-data-breach-report-us-losses
-
AI-enabled security pushes down breach costs for UK organisations
Organisations that are incorporating AI and automation into their cyber security practice are seeing improved outcomes when incidents occur, according to an IBM study First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366628086/AI-enabled-security-pushes-down-breach-costs-for-UK-organisations
-
IBM Report Sees Drop in Global Data Breach Costs Except in U.S.
An annual global analysis of 113,620 data breaches published by IBM today finds the cost of the average data breach decreased by 9% year over year, thanks mainly to faster discovery and containment. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/ibm-report-sees-drop-in-global-data-breach-costs-except-in-u-s/
-
CostaBreach-Report Kosten von Datenlecks sinken in Deutschland erstmals seit fünf Jahre
IBM veröffentlichte den jährlichen weltweiten . Die Ausgabe 2025 zeigt, dass die durchschnittlichen Kosten eines Datenlecks in Deutschland auf 3,87 Millionen Euro (ca. 4,03 Millionen US-Dollar) pro Vorfall gesunken sind im Vorjahr lagen sie noch bei 4,9 Millionen Euro (ca. 5,31 Millionen US-Dollar). Weltweit sank der Durchschnittswert auf 4,44 […] First seen on netzpalaver.de Jump…
-
Data Breach Costs Fall for First Time in Five Years
IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/data-breach-costs-fall/