⚠️ VULNERABILITY DISCLOSURE 4[−]
20 FebTwo Vulnerabilities Compromised OpenSSH Safety: Cyber Security Today for February 20, 2025Cyber Security Today: OpenSSH Vulnerabilities and Black Stash's Stolen Cards In this episode, host Jim Love discusses two significant OpenSSH vulnerabilities that risk man-in-the-middle and denial-of-service attacks. The hacker group Black Stash has released 4 million stolen cred…CYBERSECURITYTODAY.LIBSYN.COM
20 FebUpdated Shadowpad Malware Leads to Ransomware DeploymentIn this blog, we discuss about how Shadowpad is being used to deploy a new undetected ransomware family. They deploy the malware exploiting weak passwords and bypassing multi-factor authenticationTRENDMICRO.COM
20 FebSpyic - 875,999 breached accountsIn February 2025, the spyware service Spyic suffered a data breach along with sibling spyware service, Cocospy . The Spyic breach alone exposed almost 876k customer email addresses which were provided to HIBP, and reportedly also enabled unauthorised access to captured messages, …HAVEIBEENPWNED.COM
20 FebCocospy - 1,798,059 breached accountsIn February 2025, the spyware service Cocospy suffered a data breach along with sibling spyware service, Spyic . The Cocospy breach alone exposed almost 1.8M customer email addresses which were provided to HIBP, and reportedly also enabled unauthorised access to captured messages…HAVEIBEENPWNED.COM
🕵️ THREAT INTELLIGENCE 1[−]
20 FebFake job offers target software developers with infostealersA North Korea-aligned activity cluster tracked by ESET as DeceptiveDevelopment drains victims' crypto wallets and steals their login details from web browsers and password managersWELIVESECURITY.COM
🌐 CYBER THREAT LANDSCAPE 1[−]
20 FebDeceptiveDevelopment targets freelance developersESET researchers analyzed a campaign delivering malware bundled with job interview challengesWELIVESECURITY.COM