Source: www.infosecurity-magazine.com – Author: A new malware strain, ELF/Sshdinjector.A!tr, has been linked to the DaggerFly espionage group and used in the Lunar Peek campaign to target Linux-based network appliances....
Day: February 4, 2025
Threefold Increase in Malware Targeting Credential Stores – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Infostealers continued to grow in popularity on the cybercrime underground last year, with credentials from password stores appearing in 29% of malware...
Sophisticated Phishing Attack Bypasses Microsoft ADFS MFA – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Written by A new phishing campaign has been observed targeting organizations using Microsoft Active Directory Federation Services (ADFS), leveraging spoofed login pages...
Surge in Infostealer Attacks Threatens EMEA Organizations’ Data Security – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Organizations in Europe, the Middle East and Africa (EMEA) are facing a dramatic increase in infostealer attacks, according to Check Point. In...
Texas to Establish Cyber Command Amid “Dramatic” Rise in Attacks – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Written by Texas Governor Greg Abbott has announced plans to create a Texas Cyber Command, designed to combat a “dramatic” rise in...
Casio and Others Hit by Magento Web Skimmer Campaign – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Visitors to at least 17 e-commerce sites including Casio UK may have had their credit card details stolen by web skimmer malware,...
It pays to know how your cybersecurity stacks up – Source: www.csoonline.com
Source: www.csoonline.com – Author: Real-time performance benchmarking can give CISOs the confidence that their security efforts are creating business value and reducing risk—especially in tough times....
7 Tipps zur Verbesserung des ROI für Cybersicherheit – Source: www.csoonline.com
Source: www.csoonline.com – Author: Von szenariobasierten Risikobewertungen bis hin zur Nutzung von KI: Mit diesen Tipps können Sie mehr aus Ihren aktuellen Cybersicherheits-Investitionen herausholen. Lesen Sie,...
Hackers impersonate DeepSeek to distribute malware – Source: www.csoonline.com
Source: www.csoonline.com – Author: Hackers impersonated DeepSeek to push malicious packages through the popular PyPI python repository. To make things worse than they already are for...
Musk’s DOGE effort could spread malware, expose US systems to threat actors – Source: www.csoonline.com
Source: www.csoonline.com – Author: Given free rein by President Trump to plumb the depths of US government networks and databases, Elon Musk’s DOGE is putting the...
7 tips for improving cybersecurity ROI – Source: www.csoonline.com
Source: www.csoonline.com – Author: From scenario-based risk assessments to leveraging AI, security leaders share advice on squeezing more value out of your current cybersecurity investments. When...
AMD patches microcode security holes after accidental early disclosure – Source: www.networkworld.com
Source: www.networkworld.com – Author: When AMD finally issued patches for its critical microcode security hole on Monday, it said that the glitch ‘could lead to the...
Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’? – Source: krebsonsecurity.com
Source: krebsonsecurity.com – Author: BrianKrebs The FBI joined authorities across Europe last week in seizing domain names for Cracked and Nulled, English-language cybercrime forums with millions...
Managing Software Risk in a World of Exploding Vulnerabilities – Source: www.darkreading.com
Source: www.darkreading.com – Author: Kirsten Newcomer Kirsten Newcomer, Director, Cloud and DevSecOps Strategy, Red Hat February 4, 2025 4 Min Read Source: RTimages via Alamy Stock...
Microsoft Will Remove the Free VPN That Comes With Windows Defender Soon – Source: www.techrepublic.com
Source: www.techrepublic.com – Author: Megan Crouse Published February 3, 2025 The feature will no longer be available starting Feb. 28. Microsoft wants to focus on “new...
AMD Patches CPU Vulnerability Found by Google – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire AMD on Monday announced patches for a microprocessor vulnerability that could lead to loss of Secure Encrypted Virtualization (SEV) protection,...
Personal Information Compromised in GrubHub Data Breach – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Food delivery firm GrubHub on Monday disclosed a data breach that resulted in customer and driver information getting compromised. According...
Cyber Insights 2025: The CISO Outlook – Source: www.securityweek.com
Source: www.securityweek.com – Author: Kevin Townsend SecurityWeek’s Cyber Insights 2025 examines expert opinions on the expected evolution of more than a dozen areas of cybersecurity interest...
Developers Targeted With Malware Disguised as DeepSeek Package – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Threat researchers have come across two malicious Python packages offered as resources for integrating the Chinese AI model DeepSeek into...
Contec Patient Monitors Not Malicious, but Still Pose Big Risk to Healthcare – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire The recently flagged backdoor functionality in Contec CMS8000 patient monitors is actually the result of an insecure design that creates...
Vulnerability Patched in Android Possibly Exploited by Forensic Tools – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire Google on Monday announced patches for 46 vulnerabilities as part of Android’s February 2025 security update, including fixes for a...
DeepSeek Compared to ChatGPT, Gemini in AI Jailbreak Test – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Researchers at Cisco and Robust Intelligence, the AI security firm acquired by the tech giant last year, have conducted testing...
XE Group Cybercrime Gang Moves from Credit Card Skimming to Zero-Day Exploits – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ryan Naraine Malware hunters have caught a known Vietnamese cybercrime gang called XE Group shifting tactics beyond credit card-skimming to exploiting at...
CVE-2025-21293 Detection: PoC Exploit Released for a Privilege Escalation Vulnerability in Active Directory Domain Services – Source: socprime.com
Source: socprime.com – Author: Daryna Olyniychuk Shortly after the critical zero-click OLE vulnerability in Microsoft Outlook (CVE-2025-21298), yet another dangerous security threat has come to light. A...
Cyberattack on NHS causes hospitals to miss cancer care targets – Source: go.theregister.com
Source: go.theregister.com – Author: Connor Jones NHS execs admit that last year’s cyberattack on hospitals in Wirral, northwest England, continues to “significantly” impact waiting times for...
Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look ‘insignificant’ – Source: go.theregister.com
Source: go.theregister.com – Author: Jessica Lyons Abandoned AWS S3 buckets could be reused to hijack the global software supply chain in an attack that would make...
UK govt must learn fast and let failing projects die young – Source: go.theregister.com
Source: go.theregister.com – Author: Lindsay Clark The UK’s government spending watchdog has called on the current administration to make better use of technology to kickstart the...
Google patches odd Android kernel security bug amid signs of targeted exploitation – Source: go.theregister.com
Source: go.theregister.com – Author: Iain Thomson Google has released its February Android security updates, including a fix for a high-severity kernel-level vulnerability, which is suspected to...
Why digital resilience is critical to banks – Source: go.theregister.com
Source: go.theregister.com – Author: Mohan Veloo, Field CTO, APCJ, F5 Partner Content In today’s highly connected and technology-driven world, digital resilience is not just a competitive...
TSA’s airport facial-recog tech faces audit probe – Source: go.theregister.com
Source: go.theregister.com – Author: Brandon Vigliarolo The Department of Homeland Security’s Inspector General has launched an audit of the Transportation Security Administration’s use of facial recognition...