Collecting Cyber-News from over 60 sources

Tag: tool

Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools

May 29, 2025 6:55 PM

Tags: ai, chatgpt, cisco, cybercrime, intelligence, malware, openai, powershell, ransomware, threat, tool

Fake installers for popular artificial intelligence (AI) tools like OpenAI ChatGPT and InVideo AI are being used as lures to propagate various threats, such as the CyberLock and Lucky_Gh0$t ransomware families, and a new malware dubbed Numero.”CyberLock ransomware, developed using PowerShell, primarily focuses on encrypting specific files on the victim’s system,” Cisco Talos researcher Chetan…
Getting Ahead of AI Risk: What Comes Next for Tenable

May 29, 2025 6:55 PM

Tags: ai, attack, cloud, control, risk, technology, threat, tool

The acquisition of Apex Security adds a powerful new layer of visibility, context and control to the Tenable One Exposure Management Platform to govern usage, enforce policy and control exposure across both the AI that organizations use and the AI they build. Over the past 25 years, we’ve seen the attack surface shift dramatically, from…
ConnectWise Confirms Hack, “Very Small Number” of Customers Affected

May 29, 2025 5:55 PM

Tags: monitoring, tool

The firm’s remote monitoring management tool, ScreenConnect, has reportedly been patched First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/connectwise-confirms-hack/
Cybercriminals exploit AI hype to spread ransomware, malware

May 29, 2025 4:55 PM

Tags: ai, cybercrime, exploit, malicious, malware, ransomware, threat, tool

Threat actors linked to lesser-known ransomware and malware projects now use AI tools as lures to infect unsuspecting victims with malicious payloads. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cybercriminals-exploit-ai-hype-to-spread-ransomware-malware/
Unmasking ECH: Why DNSthe-Root-of-Trust Holds the Key to Secure Connectivity

May 29, 2025 3:55 PM

Tags: cisa, data, detection, dns, encryption, endpoint, Internet, network, phishing, privacy, risk, strategy, tool, vulnerability

Encrypted Client Hello (ECH) has been in the news a lot lately. For some background and relevant and recent content, see: IETF Proposed Standard Cloudflare Blog from 2023 announcing ECH support RSA 2025 talk: ECH: Hello to Enhanced Privacy or Goodbye to Visibility? Corrata White Paper “Living with ECH” Security Now podcast coverage of the…
Critical Argo CD Flaw Exposes Kubernetes Clusters to Full Resource Manipulation

May 29, 2025 2:55 PM

Tags: cve, cyber, exploit, flaw, kubernetes, open-source, tool, vulnerability

A critical cross-site scripting (XSS) vulnerability, officially tracked as CVE-2025-47933 and GHSA-2hj5-g64g-fp6p, has been identified in Argo CD, a widely used open-source GitOps tool for Kubernetes. This flaw affects the repository URL handling mechanism in the Argo CD user interface, specifically due to improper validation of URL protocols in the ui/src/app/shared/components/urls.ts file. Attackers can exploit…
Hackers Exploit Cloudflare Tunnels to Launch Stealthy Cyberattacks

May 29, 2025 2:55 PM

Tags: cyber, cyberattack, cybersecurity, data, endpoint, exploit, group, hacker, international, malicious, network, ransomware, tool

The cybersecurity landscape, malicious actors, including notorious ransomware groups like BlackSuit, Royal, Akira, Scattered Spider, Medusa, and Hunters International, have been exploiting Cloudflared, a legitimate tunneling tool by Cloudflare, to orchestrate stealthy cyberattacks. Originally known as “Argo,” Cloudflared is designed to enable secure communication between remote endpoints over untrusted networks by encapsulating data in proprietary…
Microsoft unveils >>centralized<< software update tool for Windows

May 29, 2025 1:55 PM

Tags: microsoft, software, tool, update, windows

Microsoft is looking to streamline the software updating process for IT admins and users by providing a Windows-native update orchestration platform, and to help organizations … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/29/microsoft-unveils-centralized-software-update-tool-for-windows/
DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints

May 29, 2025 1:55 PM

Tags: access, cve, data, endpoint, exploit, flaw, monitoring, ransomware, service, threat, tool

The threat actors behind the DragonForce ransomware gained access to an unnamed Managed Service Provider’s (MSP) SimpleHelp remote monitoring and management (RMM) tool, and then leveraged it to exfiltrate data and drop the locker on multiple endpoints.It’s believed that the attackers exploited a trio of security flaws in SimpleHelp (CVE-2024-57727, CVE-2024-57728, and CVE-2024-57726) that were…
Cybercriminals camouflaging threats as AI tool installers

May 29, 2025 12:55 PM

Tags: ai, cisco, cybercrime, malware, ransomware, threat, tool

Cisco Talos has uncovered new threats, including ransomware like CyberLock and Lucky_Gh0$t, and a destructive malware called Numero, all disguised as legitimate AI tool installers to target victims. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/fake-ai-tool-installers/
‘Haozi’ Gang Sells Turnkey Phishing Tools to Amateurs

May 29, 2025 12:55 PM

Tags: group, infrastructure, phishing, service, tool

The phishing operation is using Telegram groups to sell a phishing-as-a-service kit with customer service, a mascot, and infrastructure that requires little technical knowledge to install. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/haozi-gang-sells-turnkey-phishing-tools-amateurs
Woodpecker: Red Teaming Tool Targets AI, Kubernetes, and API Vulnerabilities

May 29, 2025 10:55 AM

Tags: ai, api, cyber, cyberattack, hacker, kubernetes, open-source, RedTeam, tool, vulnerability

Operant AI has announced the release of Woodpecker, an open-source automated red teaming engine designed to make advanced security testing accessible to organizations of all sizes. Traditionally, red teaming”, simulated cyberattacks conducted by ethical hackers to uncover vulnerabilities”, has been a privilege reserved for large enterprises with significant security budgets. With Woodpecker, Operant AI aims…
Massive Botnet Targets ASUS Routers by Injecting Malicious SSH Keys

May 29, 2025 10:55 AM

Tags: access, ai, attack, authentication, botnet, cyber, cyberattack, data-breach, injection, Internet, malicious, router, tool, unauthorized, vulnerability

GreyNoise Research has publicly disclosed a sophisticated cyberattack campaign that has compromised over 9,000 ASUS routers worldwide. First detected by GreyNoise’s proprietary AI-powered analysis tool, Sift, on March 18, 2025, the campaign leverages a combination of brute-force attacks, authentication bypasses, and a known command injection vulnerability (CVE-2023-39780) to gain and maintain unauthorized access to internet-exposed…
Malicious WordPress Plugin Disguised as Java Update Infects Site Visitors

May 29, 2025 10:55 AM

Tags: cyber, malicious, threat, tool, update, wordpress

A troubling new cyber threat has emerged targeting WordPress websites, where a malicious plugin masquerading as a legitimate tool tricks visitors into downloading harmful software. Disguised as “Yoast SEO” with convincing metadata, this plugin was recently uncovered in the /wp-content/plugins/contact-form/ directory of an infected site. Rather than providing SEO functionality, it injects a deceptive JavaScript…
New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.

May 29, 2025 9:55 AM

Tags: ai, botnet, network, router, tool

GreyNoise researchers warn of a new AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor. GreyNoise discovered the AyySSHush botnet has hacked over 9,000 ASUS routers, adding a persistent SSH backdoor. >>Using an AI powered network traffic analysis tool we built called SIFT, GreyNoise has caught multiple anomalous network payloads with zero-effort that…
6 rising malware trends every security pro should know

May 29, 2025 8:55 AM

Tags: adobe, ai, antivirus, apple, attack, awareness, backdoor, business, captcha, cloud, corporate, cybercrime, data, defense, detection, encryption, endpoint, exploit, extortion, framework, group, hacking, incident response, infrastructure, intelligence, Internet, law, leak, macOS, malicious, malware, network, password, phishing, powershell, programming, pypi, ransom, ransomware, service, social-engineering, software, supply-chain, tactics, theft, threat, tool, update, vulnerability, worm

Malicious packages targeting developer environments: Threat actors are systematically compromising the software supply chain by embedding malicious code within legitimate development tools, libraries, and frameworks that organizations use to build applications.”These supply chain attacks exploit the trust between developers and package repositories,” Immersive’s McCarthy tells CSO. “Malicious packages often mimic legitimate ones while running harmful…
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin

May 29, 2025 8:55 AM

Tags: cvss, cybersecurity, exploit, flaw, risk, tool, vulnerability, wordpress

Cybersecurity researchers have disclosed a critical unpatched security flaw impacting TI WooCommerce Wishlist plugin for WordPress that could be exploited by unauthenticated attackers to upload arbitrary files.TI WooCommerce Wishlist, which has over 100,000 active installations, is a tool to allow e-commerce site customers to save their favorite products for later and share the lists on…
Security startup Horizon3.ai is raising $100M in new round

May 28, 2025 11:55 PM

Tags: cybersecurity, penetration-testing, startup, tool

Horizon3.ai, a cybersecurity startup that provides tools like autonomous penetration testing, is seeking to raise $100 million in a new funding round and has locked down at least $73 million, the company revealed in an SEC filing this week. NEA led the round, according to two people familiar with the deal. One person said that…
New Silent Push Chrome tool delivers real-time cyber intel

May 28, 2025 10:55 PM

Tags: browser, chrome, cyber, tool

First seen on scworld.com Jump to article: www.scworld.com/brief/new-silent-push-chrome-tool-delivers-real-time-cyber-intel
Infostealer Attackers Deploy AI-Generated Videos on TikTok

May 28, 2025 9:55 PM

Tags: ai, attack, intelligence, malware, social-engineering, tool

Social Engineering Attacks Trick Victims Running Malware-Installation Scripts. Attackers are tapping TikTok to distribute videos, apparently generated using artificial intelligence tools, to trick victims into running scripts that install information-stealing malware, researchers warn. The campaign is the latest in a long line of schemes designed to distribute infostealers. First seen on govinfosecurity.com Jump to article:…
Fake AI Video Tool Ads on Facebook, LinkedIn Spread Infostealers

May 28, 2025 7:55 PM

Tags: ai, defense, group, linkedin, malicious, mandiant, threat, tool

Mandiant Threat Defense uncovers a campaign where Vietnam-based group UNC6032 tricks users with malicious social media ads for… First seen on hackread.com Jump to article: hackread.com/fake-ai-video-tool-ads-facebook-linkedin-infostealers/
DragonForce Ransomware Actors Exploits RMM Tools to Gain Access to Organizations

May 28, 2025 6:54 PM

Tags: access, attack, cyber, detection, endpoint, exploit, monitoring, ransomware, service, sophos, threat, tool, unauthorized

Sophos Managed Detection and Response (MDR) successfully responded to a sophisticated targeted attack orchestrated by threat actors leveraging DragonForce ransomware. The attackers gained unauthorized access to a Managed Service Provider’s (MSP) remote monitoring and management (RMM) tool, SimpleHelp, using it as a conduit to deploy ransomware across multiple endpoints and exfiltrate sensitive data. This double…
XenServer Windows VM Tools Flaw Enables Attackers to Run Arbitrary Code

May 28, 2025 5:55 PM

Tags: citrix, cve, cyber, flaw, tool, vulnerability, windows

Citrix has issued a high-severity security bulletin addressing multiple vulnerabilities”, CVE-2025-27462, CVE-2025-27463, and CVE-2025-27464″, affecting XenServer VM Tools for Windows. These vulnerabilities allow attackers with the ability to execute arbitrary unprivileged code within a guest Windows VM to escalate privileges and compromise that VM. The affected platforms include Windows VMs running on XenServer 8.4 and…
Fake Bitdefender Site Spreads Trio of Malware Tools

May 28, 2025 5:55 PM

Tags: malicious, malware, tool

A spoofed Bitdefender site has been used in a malicious campaign distributing VenomRAT and other malware, according to DomainTools First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fake-bitdefender-site-spreads/
The hidden risk lurking in your infrastructure: mismanaged certificates

May 28, 2025 3:55 PM

Tags: automation, compliance, cyber, infrastructure, risk, tool

Mismanaged certificates in hybrid environments pose a critical but often invisible risk to enterprise operations. Expired internal PKI certificates can lead to costly outages, compliance failures, and long-term damage especially in regulated industries. As digital transformation accelerates certificate use, fragmented tools fail to keep pace. Automation and centralized internal PKI systems reduce risk, ensure operational…
If you use OneDrive to upload files to ChatGPT or Zoom, don’t

May 28, 2025 3:55 PM

Tags: access, api, chatgpt, compliance, corporate, cybersecurity, data, google, governance, least-privilege, microsoft, mitigation, risk, saas, security-incident, service, strategy, threat, tool

Web app vendors aren’t off the hook: This could be bad news for security teams, according to Eric Schwake, director of cybersecurity strategy at Salt Security. “Sensitive secrets required for this access are often stored in an insecure manner by default,” Schwake said. “This situation presents a key API security challenge for security teams, and…
Google warns of Vietnam-based hackers using bogus AI video generators to spread malware

May 28, 2025 3:55 PM

Tags: ai, google, hacker, malware, mandiant, tool

Hackers likely based in Vietnam advertised websites offering AI-powered video generation tools, according to Google’s Mandiant unit, and then used the sites to spread infostealers and other malware. First seen on therecord.media Jump to article: therecord.media/malvertising-vietnam-hackers-fake-ai-video-generators
Microsoft introduces new Windows backup tool for businesses

May 28, 2025 3:55 PM

Tags: backup, microsoft, tool, windows

Microsoft has introduced Windows Backup for Organizations, a new backup tool for enterprises that simplifies backups and makes the transition to Windows 11 easier. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-introduces-new-windows-backup-tool-for-businesses/
VenomRAT Malware Introduces New Tools for Password Theft and Stealthy Access

May 28, 2025 3:55 PM

Tags: access, antivirus, cyber, malicious, malware, password, theft, threat, tool, windows

A malicious cyber campaign leveraging VenomRAT, a potent Remote Access Trojan (RAT), has been uncovered, posing a significant threat to unsuspecting users through a deceptive website mimicking Bitdefender’s Antivirus for Windows download page. The fraudulent domain, “bitdefender-download[.]com,” lures victims with a spoofed interface titled “DOWNLOAD FOR WINDOWS,” closely resembling the legitimate site but with subtle…
Choosing a secrets manager for multi-cloud: Doppler vs. cloud-native tools

May 28, 2025 2:55 PM

Tags: cloud, compliance, tool

Doppler helps teams manage secrets across clouds with one source of truth. Learn how it simplifies security, scaling, and compliance in multi-cloud environments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/choosing-a-secrets-manager-for-multi-cloud-doppler-vs-cloud-native-tools/