⚠️ VULNERABILITY DISCLOSURE 4[−]
14 AprFortinet Exploits, Windows INET Folder, and AI Code Risks: Cyber Security Today for April 14In this episode of Cybersecurity Today, host David Shipley discusses several pressing concerns in the cybersecurity landscape. Attackers have been exploiting Fortinet VPN devices to maintain access even after patches were applied; administrators are urged to upgrade and follow re…CYBERSECURITYTODAY.LIBSYN.COM
14 Apr⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and MoreAttackers aren’t waiting for patches anymore — they are breaking in before defenses are ready. Trusted security tools are being hijacked to deliver malware. Even after a breach is detected and patched, some attackers stay hidden. This week’s events show a hard truth: it’s not eno…THEHACKERNEWS.COM
14 AprCybersecurity in the AI Era: Evolve Faster Than the Threats or Get Left BehindAI is changing cybersecurity faster than many defenders realize. Attackers are already using AI to automate reconnaissance, generate sophisticated phishing lures, and exploit vulnerabilities before security teams can react. Meanwhile, defenders are overwhelmed by massive amounts …THEHACKERNEWS.COM
14 AprModernizing Federal Security with Prisma AccessPrisma Access: Cloud-native SASE platform for U.S. Government modernization, cybersecurity, efficiency. Simplifies security ops, ensures policy enforcement. The post Modernizing Federal Security with Prisma Access appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
📢 SECURITY ADVISORIES 1[−]
14 AprPakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RATA threat actor with ties to Pakistan has been observed targeting various sectors in India with various remote access trojans like Xeno RAT, Spark RAT, and a previously undocumented malware family called CurlBack RAT. The activity, detected by SEQRITE in December 2024, targeted In…THEHACKERNEWS.COM
🔥 INCIDENT REPORTING 5[−]
14 AprChina Sort of Admits to Being Behind Volt TyphoonThe Wall Street Journal has the story : Chinese officials acknowledged in a secret December meeting that Beijing was behind a widespread series of alarming cyberattacks on U.S. infrastructure, according to people familiar with the matter, underscoring how hostilities between the …SCHNEIER.COM
14 AprHertz says customers’ personal data and driver’s licenses stolen in data breachThe car rental giant attributed the breach to Cleo, whose customers had data stolen by a ransomware gang in 2024.TECHCRUNCH.COM
14 AprSilicon Valley crosswalk buttons hacked to imitate Musk, Zuckerberg’s voicesThe crosswalk buttons, which include audio alerts, were hacked over the weekend.TECHCRUNCH.COM
14 AprMedusa ransomware gang claims to have hacked NASCARThe Medusa ransomware-as-a-service (RaaS) claims to have compromised the computer systems of NASCAR, the United States' National Association for Stock Car Auto Racing, and made off with more than 1TB of data. Read more in my article on the Hot for Security blog.BITDEFENDER.COM
14 AprBPFDoor’s Hidden Controller Used Against Asia, Middle East TargetsA controller linked to BPF backdoor can open a reverse shell, enabling deeper infiltration into compromised networks. Recent attacks have been observed targeting the telecommunications, finance, and retail sectors across South Korea, Hong Kong, Myanmar, Malaysia, and Egypt.TRENDMICRO.COM
🕵️ THREAT INTELLIGENCE 9[−]
14 AprUpcoming Speaking EngagementsThis is a current list of where and when I am scheduled to speak: I’m giving an online talk on AI and trust for the Weizenbaum Institute on April 24, 2025 at 2:00 PM CEST (8:00 AM ET). The list is maintained on this page . SCHNEIER.COM
14 AprResolverRAT Campaign Targets Healthcare, Pharma via Phishing and DLL Side-LoadingCybersecurity researchers have discovered a new, sophisticated remote access trojan called ResolverRAT that has been observed in attacks targeting healthcare and pharmaceutical sectors. "The threat actor leverages fear-based lures delivered via phishing emails, designed to pressu…THEHACKERNEWS.COM
14 Aprxorsearch.py: Searching With Regexes, (Mon, Apr 14th)As promised in diary entry " XORsearch: Searching With Regexes ", I will outline another method to search with xorsearch and regexes.
ISC.SANS.EDU
14 AprISC Stormcast For Monday, April 14th, 2025 https://isc.sans.edu/podcastdetail/9406, (Mon, Apr 14th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
14 AprExplore how to secure AI by attending our Learn Live SeriesRegister to attend one or all our Learn Live sessions to learn how to secure your environment for AI adoption. The post Explore how to secure AI by attending our Learn Live Series appeared first on Microsoft Security Blog .TECHCOMMUNITY.MICROSOFT.COM
14 AprHidden Threats in Our Power Grid: The Chinese Transformer Backdoor ScandalAmerica's critical infrastructure faces an unprecedented threat, and it's already installed in hundreds of locations across the nation.KNOWBE4.COM
14 AprNews alert: AcceleTrex unveils referral exchange that turns trusted conversations into scalable growthMiami, FL, Apr. 14, 2025 — Today, AcceleTrex Corporation officially emerged from stealth, unveiling a first-of-its-kind platform that transforms expert referrals into a powerful growth engine for innovators. Grounded in the belief that genuine relationships drive meaningful resul…LASTWATCHDOG.COM
14 AprMentorship Monday - Discussions for career and learning!submitted by shellsharks to cybersecurity 5 points | 0 comments Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? …INFOSEC.PUB
14 AprIn Secret Meeting, China Acknowledged Role in U.S. Infrastructure Hackssubmitted by PhilipTheBucket to cybersecurity 21 points | 0 comments https://www.wsj.com/politics/national-security/in-secret-meeting-china-acknowledged-role-in-u-s-infrastructure-hacks-c5ab37cbINFOSEC.PUB
🌐 CYBER THREAT LANDSCAPE 1[−]
14 AprAttacks on the education sector are surging: How can cyber-defenders respond?Academic institutions have a unique set of characteristics that makes them attractive to bad actors. What's the right antidote to cyber-risk?WELIVESECURITY.COM
📡 INFOSEC NEWS 2[−]
14 AprIndustry Moves for the week of April 14, 2025 - SecurityWeekExplore industry moves and significant changes in the industry for the week of April 14, 2025. Stay updated with the latest industry trends and shifts.SECURITYWEEK.COM
14 AprPhishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential TheftCybersecurity researchers are calling attention to a new type of credential phishing scheme that ensures that the stolen information is associated with valid online accounts. The technique has been codenamed precision-validating phishing by Cofense, which it said employs real-tim…THEHACKERNEWS.COM