Tag: service
-
Russian Hackers Leverage Bulletproof Hosting to Shift Network Infrastructure
Russian-aligned cyber threat groups, UAC-0050 and UAC-0006, have significantly escalated their operations in 2025, targeting entities worldwide with a focus on Ukraine. These groups employ bulletproof hosting services to mask their network infrastructure, enabling sophisticated campaigns involving financial theft, espionage, and psychological operations. UAC-0050, linked to Russian law enforcement agencies, has transitioned to deploying NetSupport…
-
Phishing platform ‘Lucid’ behind wave of iOS, Android SMS attacks
A phishing-as-a-service (PhaaS) platform named ‘Lucid’ has been targeting 169 entities in 88 countries using well-crafted messages sent on iMessage (iOS) and RCS (Android). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phishing-platform-lucid-behind-wave-of-ios-android-sms-attacks/
-
GSA Plans FedRAMP Revamp
The General Services Administration is planning to use automation to speed up the process to determine which cloud services federal agencies are allowed to buy. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/gsa-plans-fedramp-revamp
-
How CISOs can balance business continuity with other responsibilities
Tags: attack, backup, breach, business, cio, ciso, compliance, cyber, cyberattack, cybersecurity, data, data-breach, finance, framework, healthcare, incident, incident response, metric, nist, ransomware, resilience, risk, service, strategy, supply-chain, technology, threat, usa, vulnerabilityCIO-CISO divide: Who owns business continuity?: While CISOs may find that their remit is expanding to cover business continuity, a lack of clear delineation of roles and responsibilities can spell trouble.To effectively handle business continuity, cybersecurity leaders need a framework to collaborate with IT leadership.Responding to events requires a delicate balance between thoroughness of investigation…
-
170,000 Impacted by Data Breach at Chord Specialty Dental Partners
An email security incident at Chord Specialty Dental Partners, a US dental service organization, has impacted more than 170,000 people. The post 170,000 Impacted by Data Breach at Chord Specialty Dental Partners appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/170000-impacted-by-data-breach-at-chord-specialty-dental-partners/
-
Morphing Meerkat phishing kits exploit DNS MX records
Morphing Meerkat phishing kits exploit DNS MX records to deliver spoofed login pages, targeting over 100 brands. Infoblox researchers discovered a new phishing-as-a-service (PhaaS) platform that generated multiple phishing kits, called Morphing Meerkat, using DNS mail exchange (MX) records to deliver fake login pages and targeting over 100 brands. Threat actors are exploiting DNS techniques…
-
9 Best DDoS Protection Service Providers in 2025
DDoS protection service providers can detect the early stages of an attack. Compare best DDoS vendors for your network’s needs. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/products/distributed-denial-of-service-ddos-protection-vendors/
-
HECVAT 4.0
What is HECVAT 4.0? HECVAT 4.0 (Higher Education Community Vendor Assessment Toolkit) is a standardized framework designed to help higher education institutions evaluate the cybersecurity, privacy, and compliance practices of their third-party vendors. This toolkit is particularly relevant to colleges, universities, and other educational institutions that rely on external vendors for various services, especially those……
-
Inside Daisy Cloud: 30K Stolen Credentials Exposed
Veriti research recently analyzed stolen data that was published in a telegram group named “Daisy Cloud” (potentially associated with the RedLine Stealer), exposing the inner workings of a cybercrime marketplace. This group offers thousands of stolen credentials in an ongoing basis across a wide range of services, from crypto exchanges to government portals, at disturbingly……
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 39
Tags: android, detection, framework, Hardware, international, malware, marketplace, microsoft, ransomware, serviceSecurity Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Microsoft Trusted Signing service abused to code-sign malware Shedding light on the ABYSSWORKER driver VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware New Android Malware Campaigns Evading Detection Using Cross-Platform Framework .NET MAUI Raspberry Robin: Copy…
-
Lucid: The Rising Threat of Phishing-as-a-Service
In the ever-evolving landscape of cyber threats, Phishing-as-a-Service (PhAAS) platforms have emerged as a significant concern, enabling cybercriminals First seen on securityonline.info Jump to article: securityonline.info/lucid-the-rising-threat-of-phishing-as-a-service/
-
Meanwhile, in Japan, train stations are being 3D-printed in an afternoon
Tags: serviceHow’s that for Platform-as-a-Service? First seen on theregister.com Jump to article: www.theregister.com/2025/03/28/japan_3d_printing_railway/
-
Cyberangriff auf einen Weiterbildungsanbieter in Frankreich
AKTO, victime d’une intrusion de son système d’information, informe ses parties prenantes de la suspension temporaire de ses services et d’une fuite de données à caractère personnelle First seen on akto.fr Jump to article: www.akto.fr/akto-victime-dune-intrusion-de-son-systeme-dinformation-informe-ses-parties-prenantes-de-la-suspension-temporaire-de-ses-services-et-dune-fuite-de-donnees-a-caractere-pers/
-
Building Smarter, Safer Businesses: How SecureFLO is Bridging AI Innovation with Cybersecurity
Building Smarter, Safer Businesses: How SecureFLO is Bridging AI Innovation with Cybersecurity Building Smarter, Safer Businesses: How SecureFLO is Bridging AI Innovation with Cybersecurity In today’s fast-evolving digital landscape, businesses are racing to adopt AI technologies to drive efficiency, automate operations, and scale faster. But with great innovation comes greater responsibility”, particularly in securing the…
-
Russian Hackers Impersonate CIA to Steal Ukrainian Defense Intelligence Data
In a complex cyber operation discovered by Silent Push Threat Analysts, Russian hackers have launched a multi-pronged phishing campaign impersonating various organizations, including the CIA, to gather intelligence on individuals sympathetic to Ukraine’s defense efforts. The campaign, believed to be orchestrated by Russian Intelligence Services or aligned actors, utilizes a network of fraudulent websites to…
-
Gefährlich bequem: So treiben professionelle Phishing-Dienste die Bedrohung in die Höhe
Ein neuer Bericht zeigt: Ransomware-Bedrohungen haben sich im letzten Jahr vervierfacht vor allem durch den Boom krimineller Ransomware-as-a-Service-Angebote. Auch Phishing-Attacken nehmen wieder deutlich zu, ebenfalls angetrieben durch diese ‘Cybercrime-as-a-Service”-Modelle. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/gefaehrlich-bequem-so-treiben-professionelle-phishing-dienste-die-bedrohung-in-die-hoehe/
-
VanHelsing ransomware: what you need to know
First reported earlier in March 2025, VanHelsing is a new ransomware-as-a-service operation. First seen on tripwire.com Jump to article: www.tripwire.com/state-of-security/vanhelsing-ransomware-what-you-need-know
-
Medusa: Ransomware-as-a-Service seit 2021 aktiv aktuell mit verstärkter Aktivität
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/medusa-ransomware-2021-zunahme-aktivitaet
-
Revenue Cycle Management Firm Hack Affects Patients, Clients
Incident Spotted in March 2024 Is Yet Another Attack Against Medical Billing Firms. A Nebraska-based firm that provides revenue cycle management and billing services to healthcare firms is notifying tens of thousands of people and an undisclosed number of companies that their personal, health and financial information was compromised in a March 2024 hack. First…
-
New ‘Lucid’ Phishing Platform Abuses iMessage, Android RCS to Slip Past Defenses
A sophisticated cybercrime service known as >>Lucid
-
Seceon Shines at Channel Partners Conference Expo and MSP Summit 2025
The Channel Partners Conference & Expo, co-located with the MSP Summit, took place from March 24-27, 2025, at The Venetian Resort & Expo in Las Vegas. Recognized as the world’s largest channel event, it brought together over 7,800 channel professionals, including agents, VARs, MSPs, integrators, and service providers, to discuss the latest trends in AI,…
-
Phishing-as-a-service operation uses DNS-over-HTTPS for evasion
A newly discovered phishing-as-a-service (PhaaS) operation that researchers call Morphing Meerkat, has been using the DNS over HTTPS (DoH) protocol to evade detection. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/phishing-as-a-service-operation-uses-dns-over-https-for-evasion/
-
Building Your First Cybersecurity Service Stack as an MSP
First seen on scworld.com Jump to article: www.scworld.com/native/building-your-first-cybersecurity-service-stack-as-an-msp
-
Chinese hackers spend years roaming telecommunications service
First seen on scworld.com Jump to article: www.scworld.com/news/chinese-hackers-spend-years-roaming-telecommunications-service
-
RFK Jr. Cuts at HHS Affect HIPAA, Cyber Response Units
HHS Laying Off 10,000 More People, Consolidating Divisions, Shifting Priorities. The U.S. Department of Health and Human Services announced a major restructuring and workforce reductions on Thursday. The changes disclosed so far include reshuffling units of HHS involved in healthcare sector cybersecurity response activities and HIPAA regulatory work. First seen on govinfosecurity.com Jump to article:…
-
PCI DSS 4.0 Compliance Requires a New Approach to API Security
Retailers, Financial Services, and the API Security Wake-Up Call With the PCI DSS 4.0 compliance deadline fast approaching, Cequence threat researchers have uncovered troubling data: 66.5% of malicious traffic is targeting retailers. And attackers aren’t just after payment data. They’re weaponizing APIs to exploit every stage of the digital buying process. The conclusions in this……
-
Deleting DNA Data From 23andMe
“‹23andMe, the prominent consumer genetic testing company, filed for Chapter 11 bankruptcy on March 23, 2025, due to declining demand for its services and a significant data breach affecting millions of users. Co-founder Anne Wojcicki resigned as CEO but remains on the company’s board. Implications for Customer Genetic Data The bankruptcy raises concerns about the……
-
Classiscam Operators Use Automated Malicious Sites to Steal Financial Data
Classiscam, an automated scam-as-a-service operation, has been identified as a significant threat in Central Asia, leveraging sophisticated techniques to defraud users of online marketplaces and e-commerce platforms. This fraudulent scheme, highlighted in the High-Tech Crime Trends Report 2025, utilizes Telegram bots to generate fake websites that mimic legitimate services, effectively deceiving victims into sharing their…
-
New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records
Cybersecurity researchers have shed light on a new phishing-as-a-service (PhaaS) platform that leverages the Domain Name System (DNS) mail exchange (MX) records to serve fake login pages that impersonate about 114 brands.DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishing kit, and the related activity under the moniker Morphing Meerkat.”The threat…