#cybersecurity

#cybersecurity

Ransomware threats continue to evolve, with Codefinger now targeting AWS users through sophisticated encryption strategies.

Ransomware attacks surge during the holiday season, representing the top corporate security threat and prompting organizations to reevaluate incident response strategies.

A threat actor utilized a Python backdoor and RansomHub ransomware to exploit vulnerabilities from the SocGholish malware in a cybersecurity attack.

The UK government is consulting on banning public bodies from paying ransomware demands to enhance cybersecurity and national security.

Hackers exploited AWS encryption to conduct novel ransomware attacks, locking victims' data and using stolen credentials, without vulnerabilities in the AWS platform.

The Independent emphasizes the necessity of on-ground journalism to report on critical issues like reproductive rights and cybersecurity.

Chinese cyberspies infiltrated US networks and telecommunication systems, posing a major threat to national security.

China-backed hacking group Salt Typhoon was identified through federal networks, signaling a major cybersecurity breach affecting U.S. telecommunications.

Cybercriminals exploit Google ads for phishing, redirecting victims to fake login pages that steal credentials.

New malvertising campaign is targeting Google Ads users to steal credentials via fraudulent ads.

Alert issued for individuals and businesses about phishing targeting through fake Google Ads.

Solara Medical Supplies agreed to a settlement following a phishing attack that compromised patient data, highlighting the risks in health information security.

Cybercriminals manipulate iMessage's security features by instructing users to reply to receive enabled links.

A new phishing campaign targets developers using fake CrowdStrike job offers to install crypto-mining malware.

Scammers are exploiting Apple iMessage's security by tricking users into enabling dangerous links through replies to phishing texts.

The vulnerability in Aviatrix Controller poses critical risks, leading to remote code execution and privilege escalation, with active exploits already observed.

A critical flaw in Aviatrix Controller is under active exploitation for backdoors and cryptocurrency mining.

Sweet Security launches a LLM-powered cloud detection engine that reduces detection noise to 0.04%, enhancing threat identification significantly.

NHIcon 2025 emphasizes the need for advanced security models for non-human identities in modern infrastructures.

Quantum computing may threaten Bitcoin's security by breaking SHA-256 cryptography, impacting its value significantly.

Quantum computing presents a significant security risk for financial institutions, necessitating advancements in post-quantum authentication technology.

HuiOne Guarantee has emerged as the largest known online illicit marketplace, accumulating $24 billion in cryptocurrency since its inception.

North Korean hackers stole $659 million in cryptocurrency in 2024, targeting major exchanges with sophisticated attacks.

North Korean threat actors are aggressively targeting the cryptocurrency industry, stealing millions through sophisticated cyber attacks.

Operation 99 by the Lazarus Group targets software developers through fake job offers to deliver malware via cloned GitLab repositories.

AI will significantly impact the volume and sophistication of cyberattacks by 2025, targeting organizations widely across various sectors.

North Korean threat actors have connections to earlier scams involving fraudulent IT worker schemes that continue to generate income for the country.

Two in three employees prefer hybrid working; 74% of employers are adopting remote work models, but cyber threats have surged by 238%.

SASE is the future of secure access, surpassing VPNs in effectiveness for remote work and data security.

Nurturing online safety and cyber security awareness is essential for empowering future generations.

Using a VPN on your router secures all devices connected to the Wi-Fi, simplifying online privacy measures.

A major cyberattack on PowerSchool compromised historical data of students and teachers across multiple school districts.

Google's OAuth login is vulnerable to attacks via former employee email accounts tied to defunct domains.

The investigation into a data breach affecting UK healthcare workers highlights significant cybersecurity concerns amidst reliance on migrant labor.

Equifax's 2017 data breach exposed personal info, leading to a $425 million settlement and significant security investments.

North Korean hackers are responsible for stealing $659 million in cryptocurrency in 2024, with significant impact on blockchain exchanges.

North Korean blockchain thefts surged in 2024, totaling over $659 million across five incidents, highlighting significant cybersecurity vulnerabilities in crypto exchanges.

Microsoft's January Patch Tuesday update is unusually large, addressing 161 vulnerabilities, highlighting potential security concerns for 2025.

Microsoft patched significant privilege escalation vulnerabilities in Hyper-V on the first Patch Tuesday of 2025.

Microsoft's first Patch Tuesday of 2025 addresses critical vulnerabilities in Hyper-V hypervisor allowing privilege escalation and other severe remote code execution issues.

Microsoft is facing layoffs in key areas despite security being a top priority for 2024.

Adobe released five bulletins addressing 14 CVEs, with critical vulnerability patches mostly targeting Photoshop and Substance 3D applications.

Microsoft's January security updates include 159 new CVEs, focusing on critical vulnerabilities across several core components like Windows and Office.

The U.S. is updating HIPAA with new cybersecurity measures to better protect patient information from evolving cyber threats.

HHS proposes HIPAA updates to strengthen cybersecurity and eliminate distinction between required and addressable rules.

Russia allegedly uses aging tankers to attack undersea cables, highlighting a vulnerability in Western infrastructure.

The incidents suggest a campaign to sabotage critical communications and power lines.

NATO established a new mission called Baltic Sentry to enhance surveillance and deterrence against threats in the Baltic Sea, linked to Russia.

Unauthorized access to Fortinet firewalls has compromised configurations and credentials, likely due to exploitation of a zero-day vulnerability affecting exposed management interfaces.

Hackers are exploiting a critical vulnerability in Fortinet firewalls, indicating serious security risks for corporate networks.

Fortinet warns of a significant zero-day vulnerability in firewalls, urging immediate action to secure corporate networks against active exploitation.

Fortinet firewalls are under a widespread exploitation campaign likely using an unpatched zero-day vulnerability.

The FBI successfully removed Chinese malware from over 4,200 US computers using a self-delete command.

The FBI successfully removed a significant Chinese malware from over 4,200 U.S. computers.

A new stealthy credit card skimmer campaign targets WordPress e-commerce sites by injecting malicious JavaScript into checkout pages, stealing payment information.

The DOJ and FBI's operation eliminated Chinese malware from thousands of US computers through a court-approved counter-hack.

The FBI successfully deleted PlugX malware from over 4,250 computers, highlighting a major law enforcement achievement against cybercrime.

Russia-linked threat actors are conducting cyber espionage in Kazakhstan to gather intelligence as part of broader geopolitical strategies.

CVE-2024-12686 is a newly identified vulnerability in BeyondTrust products that pose security risks due to active exploitation.

Multiple security flaws in SimpleHelp software pose risks of information disclosure, privilege escalation, and remote code execution, necessitating immediate patch implementation.

The FBI successfully hacked 4,200 US computers to remove the PlugX malware linked to Chinese state-backed hackers.

FBI and French police collaborated to eradicate the PlugX malware used by Mustang Panda, a group linked to Chinese government hacking.

Microsoft is taking legal action against cybercriminals for exploiting its AI tools to generate harmful content.

The lawsuit indicates significant vulnerabilities in API security related to Microsoft's Azure service.

Microsoft aims to disrupt ongoing illegal operations and gather evidence through the seizure of relevant web domains.

AI offers economic prosperity, innovation, and scientific support, but understanding and mitigating risks is essential for individuals and companies.

The Biden administration's new data center guidance aims to enhance cybersecurity, resiliency, and efficiency in federal data center operations.

Growth stocks, especially in AI, can yield returns far exceeding traditional indexes like the S&P 500 over the long term.

A former Disney employee hacked into menu software, altering critical food allergy information, jeopardizing customer safety.

Chinese state-sponsored hacking group Twill Typhoon disrupted by U.S. operation, targeting millions of computers globally to steal sensitive data.

Nominet is probing a network intrusion related to Ivanti zero-day vulnerabilities.

CISOs must find cost-effective firewall solutions that expand with organizational growth and secure a diverse network.