Collecting Cyber-News from over 60 sources

Tag: tool

Kali Linux 2025.3 released with 10 new tools, Wi-Fi enhancements

Sep 25, 2025 9:49 AM

Tags: kali, linux, tool, wifi

Kali Linux has released version 2025.3, the third version of 2025, featuring ten new tools, Nexmon support, and NetHunter improvements. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/kali-linux-20253-released-with-10-new-tools-wifi-enhancements/
LNK Malware Leverages Legit Windows Files to Slip Past Defenses

Sep 25, 2025 9:49 AM

Tags: access, attack, cyber, defense, detection, exploit, malicious, malware, threat, tool, windows

In a recently observed campaign emerging from Israel, threat actors have revived the use of Windows shortcut (.LNK) files to deliver a potent Remote Access Trojan (RAT). These seemingly innocuous shortcut files exploit Living-off-the-Land Binaries (LOLBins) such as odbcconf.exe to silently register and execute malicious DLLs, evading security tools and complicating detection efforts. The attack…
COLDRIVER APT Group Uses ClickFix to Deliver New PowerShell-Based Backdoor BAITSWITCH

Sep 25, 2025 9:49 AM

Tags: apt, backdoor, blizzard, credentials, cyber, group, malware, phishing, powershell, russia, social-engineering, threat, tool

Russia-linked threat actors continue targeting civil society with sophisticated social engineering campaigns and lightweight malware tools in September 2025. The campaign delivers two previously undocumented malware families: a downloader dubbed BAITSWITCH and a PowerShell-based backdoor named SIMPLEFIX. COLDRIVER, also tracked as Star Blizzard, Callisto, and UNC4057, has historically focused on credential phishing campaigns against NGOs, think tanks, journalists,…
AI coding assistants amplify deeper cybersecurity risks

Sep 25, 2025 9:49 AM

Tags: access, ai, api, application-security, attack, authentication, business, ceo, ciso, cloud, compliance, control, cybersecurity, data, data-breach, detection, fintech, flaw, governance, injection, leak, LLM, metric, open-source, programming, radius, risk, risk-management, service, software, startup, strategy, threat, tool, training, vulnerability

‘Shadow’ engineers and vibe coding compound risks: Ashwin Mithra, global head of information security at continuous software development firm Cloudbees, notes that part of the problem is that non-technical teams are using AI to build apps, scripts, and dashboards.”These shadow engineers don’t realize they’re part of the software development life cycle, and often bypass critical…
Kali Linux 2025.3 released with 10 new tools, Wi-Fi enhancements

Sep 25, 2025 8:49 AM

Tags: kali, linux, tool, wifi

Kali Linux has released version 2025.3, the third version of 2025, featuring ten new tools, Nexmon support, and NetHunter improvements. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/kali-linux-20253-released-with-10-new-tools-wifi-enhancements/
COLDRIVER APT Group Uses ClickFix to Deliver New PowerShell-Based Backdoor BAITSWITCH

Sep 25, 2025 8:49 AM

Tags: apt, backdoor, blizzard, credentials, cyber, group, malware, phishing, powershell, russia, social-engineering, threat, tool

Russia-linked threat actors continue targeting civil society with sophisticated social engineering campaigns and lightweight malware tools in September 2025. The campaign delivers two previously undocumented malware families: a downloader dubbed BAITSWITCH and a PowerShell-based backdoor named SIMPLEFIX. COLDRIVER, also tracked as Star Blizzard, Callisto, and UNC4057, has historically focused on credential phishing campaigns against NGOs, think tanks, journalists,…
New framework sets baseline for SaaS security controls

Sep 25, 2025 7:25 AM

Tags: control, framework, risk, saas, tool

Managing security across dozens or even hundreds of SaaS apps has become a major headache. Each tool has its own settings, permissions, and logs, and most third-party risk … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/25/csa-saas-security-capability-framework-sscf/
New framework sets baseline for SaaS security controls

Sep 25, 2025 7:25 AM

Tags: control, framework, risk, saas, tool

Managing security across dozens or even hundreds of SaaS apps has become a major headache. Each tool has its own settings, permissions, and logs, and most third-party risk … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/25/csa-saas-security-capability-framework-sscf/
New framework sets baseline for SaaS security controls

Sep 25, 2025 7:25 AM

Tags: control, framework, risk, saas, tool

Managing security across dozens or even hundreds of SaaS apps has become a major headache. Each tool has its own settings, permissions, and logs, and most third-party risk … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/25/csa-saas-security-capability-framework-sscf/
Kali Linux 2025.3 brings improved virtual machine tooling, 10 new tools

Sep 24, 2025 11:16 AM

Tags: kali, linux, penetration-testing, tool

OffSec has released Kali Linux 2025.3, the most up-to-date version of its popular penetration testing and digital forensics platform. What’s new in Kali Linux 2025.3 Better … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/24/kali-linux-2025-3-released/
5 questions CISOs should ask vendors

Sep 24, 2025 10:15 AM

Tags: ai, business, ciso, cloud, csf, detection, exploit, framework, infosec, mitre, nist, regulation, resilience, risk, threat, tool, training, update, vulnerability

2. Will it reduce my workload, add value or improve operations?: A common starting point is to ask questions about how a new tool will reduce workload, minimize risk, improve resilience or simplify operations.Basu wants to know whether the product can consolidate capabilities instead of adding yet another point solution. “Without that, each tool only…
5 questions CISOs should ask vendors

Sep 24, 2025 10:15 AM

Tags: ai, business, ciso, cloud, csf, detection, exploit, framework, infosec, mitre, nist, regulation, resilience, risk, threat, tool, training, update, vulnerability

2. Will it reduce my workload, add value or improve operations?: A common starting point is to ask questions about how a new tool will reduce workload, minimize risk, improve resilience or simplify operations.Basu wants to know whether the product can consolidate capabilities instead of adding yet another point solution. “Without that, each tool only…
Kali Linux 2025.3 Launches With Fresh Features and 10 New Pentesting Tools

Sep 24, 2025 10:15 AM

Tags: cyber, firmware, Hardware, kali, linux, mobile, penetration-testing, tool, update

Kali Linux 2025.3 has arrived, bringing a wave of improvements, updated firmware support, and a suite of ten new security tools. This release builds on the June 2025.2 update by refining core workflows, extending wireless capabilities, and preparing the distribution for emerging architectures. Whether you rely on virtual machines, Raspberry Pi devices, or mobile pentesting…
New “YiBackdoor” Malware Lets Hackers Run Commands and Steal Data

Sep 24, 2025 8:16 AM

Tags: backdoor, cyber, cybercrime, cybersecurity, data, hacker, malware, technology, threat, tool

Cybersecurity researchers at Zscaler ThreatLabz have identified a sophisticated new malware strain dubbed YiBackdoor, first detected in June 2025. This emerging threat represents a significant evolution in backdoor technology, sharing substantial code similarities with established malware families IcedID and Latrodectus. The discovery highlighted the continuous adaptation of cybercriminal tools, as YiBackdoor demonstrates capabilities that enable…
Application Security Posture Management ein Kaufratgeber

Sep 24, 2025 7:16 AM

Tags: application-security, cloud, compliance, container, gartner, supply-chain, tool, vulnerability

Um eine geeignete ASPM-Plattform auswählen zu können, ist ein tiefgreifendes Verständnis der eigenen Applikationsstruktur unerlässlich.Ähnlich wie Cyberbedrohungen sind auch die Anwendungen von Unternehmen mit der Zeit immer komplexer geworden. Das liegt vor allem daran, dass sie in einer Vielzahl von Domänen betrieben werden etwa der Cloud, Containern oder lokalen Systemen. Traditionelle Security-Tools stellt das vor…
Nosey Parker: Open-source tool finds sensitive information in textual data and Git history

Sep 24, 2025 7:16 AM

Tags: data, open-source, tool

Nosey Parker is an open-source command-line tool that helps find secrets and sensitive information hidden in text files. It works like a specialized version of grep, focused … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/24/nosey-parker-open-source-tool/
Application Security Posture Management ein Kaufratgeber

Sep 24, 2025 7:16 AM

Tags: application-security, cloud, compliance, container, gartner, supply-chain, tool, vulnerability

Um eine geeignete ASPM-Plattform auswählen zu können, ist ein tiefgreifendes Verständnis der eigenen Applikationsstruktur unerlässlich.Ähnlich wie Cyberbedrohungen sind auch die Anwendungen von Unternehmen mit der Zeit immer komplexer geworden. Das liegt vor allem daran, dass sie in einer Vielzahl von Domänen betrieben werden etwa der Cloud, Containern oder lokalen Systemen. Traditionelle Security-Tools stellt das vor…
Nosey Parker: Open-source tool finds sensitive information in textual data and Git history

Sep 24, 2025 7:16 AM

Tags: data, open-source, tool

Nosey Parker is an open-source command-line tool that helps find secrets and sensitive information hidden in text files. It works like a specialized version of grep, focused … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/24/nosey-parker-open-source-tool/
Exposed Docker Daemons Fuel DDoS Botnet

Sep 23, 2025 11:16 PM

Tags: botnet, cloud, data-breach, ddos, detection, docker, jobs, soc, tool

The for-hire platform leverages legitimate cloud-native tools to make detection and disruption harder for defenders and SOC analysts. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/exposed-docker-daemons-fuel-ddos-botnet
OpenAI Fixes Gmail Data Flaw in ChatGPT Agent

Sep 23, 2025 10:16 PM

Tags: access, ai, chatgpt, data, email, flaw, hacker, intelligence, openai, tool

Attackers Could Siphon Gmail Data Unnoticed From Users Who Let AI Tool Access Email. OpenAI patched a flaw in ChatGPT’s Deep Research agent that could have enabled hackers to extract Gmail data without the user’s knowledge. Radware researchers said the flaw affected subscribers who authorized the artificial intelligence tool to access their email accounts. First…
5 ways to streamline Identity Governance with this free tool

Sep 23, 2025 5:16 PM

Tags: access, governance, identity, tool

Identity Governance doesn’t have to be complex or costly. tenfold’s free Community Edition helps orgs (up to 150 users) streamline onboarding, access reviews & M365 permissions, all with a no-code IGA platform. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/5-ways-to-streamline-identity-governance-with-this-free-tool/
Apple’s New Memory Integrity Enforcement

Sep 23, 2025 3:16 PM

Tags: apple, computer, data, iphone, programming, software, spyware, tool, unauthorized, vulnerability

Apple has introduced a new hardware/software security feature in the iPhone 17: “Memory Integrity Enforcement,” targeting the memory safety vulnerabilities that spyware products like Pegasus tend to use to get unauthorized system access. From Wired: In recent years, a movement has been steadily growing across the global tech industry to address a ubiquitous and insidious…
Klassenzimmer offline Wie Cyber-Kriminelle im Zeitalter der KI das Bildungswesen angreifen

Sep 23, 2025 1:15 PM

Tags: ai, cyber, cyberattack, google, microsoft, risk, tool

Das moderne Klassenzimmer hat sich zu einem digitalen Schulhof gewandelt, der auf Plattformen wie Microsoft-Teams, Google-Classroom oder Zoom basiert. Diese Tools fördern zwar die Zusammenarbeit und Innovation, sind aber auch bevorzugte Ziele für Cyberangriffe, insbesondere solche, die KI nutzen. Somit sind Schulen und Universitäten Risiken ausgesetzt, die Schüler, Pädagogen und sogar die nationale Innovation direkt…
Klassenzimmer offline Wie Cyber-Kriminelle im Zeitalter der KI das Bildungswesen angreifen

Sep 23, 2025 1:15 PM

Tags: ai, cyber, cyberattack, google, microsoft, risk, tool

Das moderne Klassenzimmer hat sich zu einem digitalen Schulhof gewandelt, der auf Plattformen wie Microsoft-Teams, Google-Classroom oder Zoom basiert. Diese Tools fördern zwar die Zusammenarbeit und Innovation, sind aber auch bevorzugte Ziele für Cyberangriffe, insbesondere solche, die KI nutzen. Somit sind Schulen und Universitäten Risiken ausgesetzt, die Schüler, Pädagogen und sogar die nationale Innovation direkt…
Zloader Malware Used as Gateway for Ransomware Deployment in Corporate Networks

Sep 23, 2025 1:15 PM

Tags: access, banking, corporate, cyber, malware, network, ransomware, tool

Zloader, a sophisticated Zeus-based modular trojan that first emerged in 2015, has undergone a significant transformation from its original banking-focused purpose to become a dangerous tool for initial access and ransomware deployment in corporate environments. Following an almost two-year hiatus, this malware reemerged in September 2023 with substantial enhancements to its obfuscation techniques, domain generation…
GitHub Introduces npm Security with Stronger Authentication and Trusted Publishing

Sep 23, 2025 12:16 PM

Tags: authentication, cyber, github, malicious, open-source, software, technology, tool, update

Open source software powers much of today’s technology, enabling developers around the world to build and share tools, libraries, and applications. However, the same openness that drives innovation also presents serious security challenges. Attackers regularly target package registries like npm to compromise accounts and inject malicious code. In response, GitHub has announced significant updates to…
6 novel ways to use AI in cybersecurity

Sep 23, 2025 10:16 AM

Tags: access, ai, attack, authentication, business, ceo, cloud, cyberattack, cybersecurity, data, defense, detection, email, infrastructure, intelligence, malicious, malware, network, phishing, risk, service, tactics, technology, threat, tool, training

2. Machine-learning generative adversarial networks: Michel Sahyoun, chief solutions architect with cybersecurity technology firm NopalCyber, recommends using generative adversarial networks (GANs) to create, as well as protect against, highly sophisticated previously unseen cyberattacks. “This technique enables cybersecurity systems to learn and adapt by training against a very large number of simulated threats,” he says.GANs allow…
6 novel ways to use AI in cybersecurity

Sep 23, 2025 10:16 AM

Tags: access, ai, attack, authentication, business, ceo, cloud, cyberattack, cybersecurity, data, defense, detection, email, infrastructure, intelligence, malicious, malware, network, phishing, risk, service, tactics, technology, threat, tool, training

2. Machine-learning generative adversarial networks: Michel Sahyoun, chief solutions architect with cybersecurity technology firm NopalCyber, recommends using generative adversarial networks (GANs) to create, as well as protect against, highly sophisticated previously unseen cyberattacks. “This technique enables cybersecurity systems to learn and adapt by training against a very large number of simulated threats,” he says.GANs allow…
The CISO’s guide to rolling out generative AI at scale

Sep 23, 2025 10:16 AM

Tags: access, ai, best-practice, chatgpt, ciso, communications, governance, guide, jobs, lessons-learned, network, privacy, risk, technology, tool, training

Set the stage for success Before launch, host an organization-wide lunch and learn to introduce the platform, explain the rollout’s goals, and connect the initiative to real work. This is not a marketing event; it’s an operational alignment session. Bring the vendor in to walk through the platform, show what it does, and answer questions.…
The CISO’s guide to rolling out generative AI at scale

Sep 23, 2025 10:16 AM

Tags: access, ai, best-practice, chatgpt, ciso, communications, governance, guide, jobs, lessons-learned, network, privacy, risk, technology, tool, training

Set the stage for success Before launch, host an organization-wide lunch and learn to introduce the platform, explain the rollout’s goals, and connect the initiative to real work. This is not a marketing event; it’s an operational alignment session. Bring the vendor in to walk through the platform, show what it does, and answer questions.…