Tag: threat
-
FBI: Endlife routers hacked for cybercrime proxy networks
The FBI warns that threat actors are deploying malware on end-of-life (EoL) routers to convert them into proxies sold on the 5Socks and Anyproxy networks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-end-of-life-routers-hacked-for-cybercrime-proxy-networks/
-
Education giant Pearson hit by cyberattack exposing customer data
Education giant Pearson suffered a cyberattack, allowing threat actors to steal corporate data and customer information, BleepingComputer has learned. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/education-giant-pearson-hit-by-cyberattack-exposing-customer-data/
-
Report: Most firms not ready for AI-powered cyber threats
First seen on scworld.com Jump to article: www.scworld.com/brief/report-most-firms-not-ready-for-ai-powered-cyber-threats
-
Barracuda Adds Multimodal AI to Threat Detection Stack
First seen on scworld.com Jump to article: www.scworld.com/news/barracuda-adds-multimodal-ai-to-threat-detection-stack
-
Trump’s Defense Department cyber policy nominee pledges to bolster cyber threat deterrence
First seen on scworld.com Jump to article: www.scworld.com/brief/trumps-defense-department-cyber-policy-nominee-pledges-to-bolster-cyber-threat-deterrence
-
SMBs Know They’re At Risk, but Most Aren’t Embracing AI
A survey by CrowdStrike finds the gap between SMB awareness of cyber threats and efforts by them to protect themselves is widening, with not enough of them spending the money needed on AI and other tools to defend against ransomware and other attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/smbs-know-theyre-at-risk-but-most-arent-embracing-ai/
-
The IT help desk kindly requests you read this newsletter
How do attackers exploit authority bias to manipulate victims? Martin shares proactive strategies to protect yourself and others in this must-read edition of the Threat Source newsletter. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/the-it-help-desk-kindly-requests-you-read-this-newsletter/
-
CISA’s Acting Director Defends Cuts Amid Growing Turmoil
Top Cyber Official Says CISA Wants to Eliminate Duplication and Increase Efficiency. The acting director of the Cybersecurity and Infrastructure Security Agency told a House appropriations subcommittee Thursday the nation’s cyber defense agency was continuing to improve its ability to respond to growing threats from China despite budget cuts and looming workforce reductions. First seen…
-
38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases
Cybersecurity researchers have exposed what they say is an “industrial-scale, global cryptocurrency phishing operation” engineered to steal digital assets from cryptocurrency wallets for several years.The campaign has been codenamed FreeDrain by threat intelligence firms SentinelOne and Validin.”FreeDrain uses SEO manipulation, free-tier web services (like gitbook.io, webflow.io, and github.io First seen on thehackernews.com Jump to article:…
-
US Federal Agencies Alert on “Unsophisticated” OT Cyber-Threats
Cyber incidents targeting OT in US critical infrastructure have prompted renewed federal action First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-alert-unsophisticated-ot-cyber/
-
Qilin Ransomware Ranked Highest in April 2025 with Over 45 Data Leak Disclosures
Threat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented .NET compiled loader codenamed NETXLOADER as part of a campaign observed in November 2024.”NETXLOADER is a new .NET-based loader that plays a critical role in cyber attacks,” Trend Micro researchers Jacob Santos, Raymart Yambot, John…
-
From Managing Vulnerabilities to Managing Exposure: The Critical Shift You Can’t Ignore
Tags: ai, attack, best-practice, breach, business, cloud, computing, control, cyber, cybersecurity, data, data-breach, endpoint, identity, infrastructure, intelligence, Internet, office, risk, service, software, strategy, technology, threat, tool, vulnerability, vulnerability-managementVulnerability management remains core to reducing cyber risk, but as the attack surface grows, teams need a risk-driven strategy that looks beyond vulnerabilities to see the bigger picture. Discover how exposure management unifies data and prioritizes real exposures, keeping teams proactive and ahead of cyber threats. The limits of siloed security Over the years, the…
-
New Attack Exploits X/Twitter Ad URL Feature to Deceive Users
Silent Push Threat Analysts have recently exposed a sophisticated financial scam leveraging a vulnerability in X/Twitter’s advertising display URL feature to deceive users. This attack manipulates the platform’s URL display mechanism to present a legitimate-looking link, such as “From CNN[.]com,” while redirecting unsuspecting victims to a malicious cryptocurrency scam site impersonating Apple’s brand. This campaign,…
-
Countries Begin NATO’s Locked Shields Cyber-Defense Exercise
The 15th annual event helps countries test and develop defenses against current and emerging cyber threats, including disinformation, quantum computing, and AI. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/countries-nato-locked-shields-cyber-defense-exercise
-
CISA warns of cyberattacks targeting the US oil and gas infrastructure
Tags: advisory, cisa, control, cyberattack, cybersecurity, flaw, infrastructure, intelligence, Internet, network, open-source, password, risk, threatStronger passwords, segmentation, and manual operations are advised: CISA cited past analysis to emphasize that targeted systems use default or easily guessable (using open-source tools) passwords. Changing default passwords for strong and unique ones is important for public-facing internet devices that have the capability to control OT systems or processes, it added in the advisory.Segmenting…
-
DOGE Big Balls Ransomware Leverages Open-Source Tools and Custom Scripts for Multi-Stage Attacks
A recent discovery by Netskope Threat Labs has brought to light a highly complex ransomware variant dubbed >>DOGE Big Balls,
-
Iranian Hackers Posing as Model Agency to Target Victims
Unit 42, the threat intelligence arm of Palo Alto Networks, has exposed a covert operation likely orchestrated by Iranian cyber actors. The campaign involves a fraudulent website, megamodelstudio[.]com, meticulously designed to impersonate the Hamburg-based Mega Model Agency. Cyberespionage Campaign Uncovered Registered on February 18, 2025, and hosted at IP address 64.72.205[.]32 since March 1, 2025,…
-
Russian COLDRIVER Hackers Deploy LOSTKEYS Malware to Steal Sensitive Information
The Google Threat Intelligence Group (GTIG) has uncovered a sophisticated new malware dubbed LOSTKEYS, attributed to the Russian government-backed threat actor COLDRIVER, also known as UNC4057, Star Blizzard, and Callisto. Active since at least December 2023, with significant campaigns observed in January, March, and April 2025, LOSTKEYS represents a notable evolution in COLDRIVER’s toolkit, which…
-
Qilin Leads April 2025 Ransomware Spike with 45 Breaches Using NETXLOADER Malware
Threat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented .NET compiled loader codenamed NETXLOADER as part of a campaign observed in November 2024.”NETXLOADER is a new .NET-based loader that plays a critical role in cyber attacks,” Trend Micro researchers Jacob Santos, Raymart Yambot, John…
-
CrowdStrike cuts 500 jobs in AI pivot, but flags risks
A CISO’s new mandate As security vendors trim traditional roles and lean more heavily on AI, will support, integration, and incident response suffer? Ali warned CISOs to “review vendor roadmaps for signs of over-prioritizing AI.”She cautioned that replacing essential human expertise, such as threat researchers or customer success teams, with automated systems like large language…
-
Countries Begin NATO’s Locked Shields Cyber Defense Exercise
The NATO-run live cyber exercise event helps countries test and develop defenses against current and emerging cyber threats including disinformation, quantum, and AI. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/countries-nato-locked-shields-cyber-defense-exercise
-
MirrorFace Targets Japan and Taiwan with ROAMINGMOUSE and Upgraded ANEL Malware
The nation-state threat actor known as MirrorFace has been observed deploying malware dubbed ROAMINGMOUSE as part of a cyber espionage campaign directed against government agencies and public institutions in Japan and Taiwan.The activity, detected by Trend Micro in March 2025, involved the use of spear-phishing lures to deliver an updated version of a backdoor called…
-
How To Secure Digital Wallets from Phishing Attacks
Digital wallets have become increasingly popular, offering users an easy way to make payments, store cryptocurrencies, and manage their money. But as more people use digital wallets, the risk of cyber threats, especially phishing attacks, has also grown. Phishing is a trick used by hackers to steal sensitive information like passwords and financial details. This…
-
Confusion Reigns as Threat Actors Exploit Samsung MagicInfo Flaw
Researchers spot in-the-wild exploits of Samsung MagicInfo despite recent patch First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/threat-actors-exploit-samsung/
-
#Infosec2025: Combating Deepfake Threats at the Age of AI Agents
Organizations can start defending against deepfakes now, before efficient detectors are available First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/infosec2025-combating-deepfake/
-
The Most Pressing Security Threat to Business is Hidden in Plain Sight
Ultimately, investing in security isn’t just about the digital world. For organizations to be successful, they need to take a fundamentally holistic approach to protecting what matters most – people, company data and IP. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/the-most-pressing-security-threat-to-business-is-hidden-in-plain-sight/
-
OpenCTI: Free Cyber Threat Intelligence Platform for Security Experts
OpenCTI (Open Cyber Threat Intelligence) stands out as a free, open source platform specifically designed to address this need-delivering robust capabilities for cyber threat intelligence (CTI) management and analysis. Created by Filigran, OpenCTI allows organizations to structure, store, and visualize both technical details (like Tactics, Techniques, and Procedures-TTPs-and observables) and non-technical information (such as attribution…