104Articles
8Categories
2025-05-28Date
🚨
Vulnerabilities in CISA KEV Are Not Equally Critical: ReportNew report says organizations should always consider environmental context when assessing the impact of vulnerabilities in CISA KEV catalog. The post Vulnerabilities in CISA KEV Are Not Equally Critical: Report appeared first on SecurityWeek .
KEV
🐛
Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware
🐛
XenServer Windows VM Tools Flaw Enables Attackers to Run Arbitrary Code
🐛
Evertz SDN Vulnerabilities Enable Unauthenticated Arbitrary Command Execution
⚠️
Die wertvollsten Security-Zertifizierungen
⚠️
Dutch intelligence report says Russian hacker group stole data on 63,000 police officers, targeted NATO government systems
⚠️
Dutch intelligence report says Russian hacker group stole data on 63,000 police officers, targeted NATO government systems
⚠️
Will AI agent-fueled attacks force CISOs to fast-track passwordless projects?
⚠️
Phishing Scams, DNS Hijacking, and Cybersecurity Leadership Shakeup
⚠️
Apple Blocks $9 Billion in Fraud Over 5 Years Amid Rising App Store Threats
⚠️
‘Secure email’: A losing battle CISOs must give up
⚠️
CISA Publishes ICS Advisories Highlighting New Vulnerabilities and Exploits
⚠️
MATLAB, Serving Over 5 Million Users, Hit by Ransomware Attack
⚠️
$223 Million Stolen in Cetus Protocol Hack
⚠️
Quantum Readiness & Zero Trust: Strategies to Strengthen Digital Resilience - BSW #397
⚠️
251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch
⚠️
CISA Releases Executive Guide on SIEM and SOAR Platforms for Rapid Threat Detection
⚠️
Location Tracking App for Foreigners in Moscow
⚠️
Emerging FormBook Malware Threatens Windows Users with Complete System Takeover
⚠️
New PumaBot Botnet Targets Linux IoT Devices to Steal SSH Credentials and Mine Crypto
⚠️
Hacker stehlen Coca-Cola-Daten
⚠️
If you use OneDrive to upload files to ChatGPT or Zoom, don’t
⚠️
251 Malicious IPs Target Cloud-Based Device Exploiting 75 Exposure Points
⚠️
Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access — Even When Uploading Just One File
⚠️
Earth Lamia Hackers Exploits Vulnerabilities in Web Applications to Attack Multiple Industries
⚠️
OneDrive File Picker Flaw Provides ChatGPT and Other Web Apps Full Read Access to Users’ Entire OneDrive
⚠️
DragonForce Ransomware Actors Exploits RMM Tools to Gain Access to Organizations
⚠️
Worldwide Operation Shuts Down Hundreds of Ransomware Servers and Domains, Ending Key Attack Infrastructure
⚠️
DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers – Sophos News
⚠️
Cybercriminals Are Turning Ordinary Citizens Into Money Mules in a New ‘Rent-a-Bank-Account’ Scam
⚠️
Vulnerabilities found in NASA's open source software - Help Net Security
⚠️
New PumaBot botnet brute forces SSH credentials to breach devices
⚠️
Separating hype from reality: How cybercriminals are actually using AI
⚠️
Risky Business #793 -- Scattered Spider is hijacking MX records
📢
UK Envoy Urges Transatlantic Tech Alliance, Cites China Threat
📢
UK Envoy Urges Transatlantic Tech Alliance, Cites China Threat
📢
Czechia blames China for Ministry of Foreign Affairs cyberattack
📢
Craft CMS security advisory (AV25-300)
📢
Czech Republic Blames China-Linked APT31 Hackers for 2022 Cyberattack
📢
Sem título
📢
Invest in Security or Watch It All Burn 🔥 #digitaldefense
🔥
Robinhood Ransomware Operator Arrested for Attacks on Government and Private Networks
🔥
Data broker giant LexisNexis says breach exposed personal information of over 364,000 people
🔥
Botnet hacks 9,000+ ASUS routers to add persistent SSH backdoor
🔥
364,000 Impacted by Data Breach at LexisNexis Risk Solutions
🔥
MATLAB dev confirms ransomware attack behind service outage
🔥
Iranian Hacker Pleads Guilty in $19 Million Robbinhood Ransomware Attack on Baltimore
🔥
Interlock ransomware gang deploys new NodeSnake RAT on universities
🔥
Interlock ransomware gang deploys new NodeSnake RAT on universities
🔥
This Camera Just Took Down an Entire Network 🎥💥
🔥
MATLAB Maker MathWorks Recovering From Ransomware Attack
🔥
Victoria’s Secret hit by outages as it battles security incident
🔥
Cybersecurity’s Hidden Weapon: Interpretive Thinking
🕵️
Don't click on that Facebook ad for a text-to-AI-video tool
🕵️
ISC Stormcast For Wednesday, May 28th, 2025 https://isc.sans.edu/podcastdetail/9468, (Wed, May 28th)
🕵️
Zero-Interaction libvpx Flaw in Firefox Allows Attackers to Run Arbitrary Code
🕵️
Chrome Security Patch Addresses High-Severity Vulnerabilities Enabling Code Execution
🕵️
Text-to-Malware: How Cybercriminals Weaponize Fake AI-Themed Websites
🕵️
INE Security And RedTeam Hacker Academy Announce Partnership To Advance Cybersecurity Skills In The Middle East
🕵️
RSAC Fireside Chat: ‘Purple’ teams dismantle the reactive trap — and can help restore cyber readiness
🕵️
The Root of AI Hallucinations: Physics Theory Digs Into the ‘Attention’ Flaw
🕵️
Hackers Circulate Over 93 Billion Stolen User Cookies on the Dark Web
🕵️
Chrome 137, Firefox 139 Patch High-Severity Vulnerabilities
🕵️
OneDrive Gives Web Apps Full Read Access to All Files
🕵️
SilentWerewolf Attack Combines Legitimate Tools with Code Obfuscation for Stealthy Infiltration
🕵️
VenomRAT Malware Introduces New Tools for Password Theft and Stealthy Access
🕵️
CyberheistNews Vol 15 #21 I Got This Coinbase-Related Scam in My Personal Inbox Last Week
🕵️
Threat Actors Weaponizing DCOM to Harvest Credentials on Windows Systems
🕵️
Cerby Raises $40 Million for Identity Automation Platform
🕵️
Vietnamese Hackers Distribute Malware via Fake AI-Themed Websites
🕵️
Threat Actors Weaponize Fake AI-Themed Websites to Deliver Python-based infostealers
🕵️
Zscaler to Acquire Red Canary, Enhancing AI-Powered Security Operations
🕵️
Evolution of Zanubis, a banking Trojan for Android
🕵️
Russian APT28 Hackers Attacking NATO-aligned Organizations to Steal Sensitive Data
🕵️
You’re Paying for AI… Even If It Says FREE 🧠
🕵️
Czech Government Condemns Chinese Hack on Critical Infrastructure
🕵️
94 billion browser cookies sold on Telegram​ | Cybernews
🕵️
Apple Blocked 2 million Malicious App & $9 Billion in Fraudulent Transactions
🕵️
Governments Urge Organizations to Prioritize SIEM/SOAR Adoption - Infosecurity Magazine
🕵️
Dark Partners cybercrime gang fuels large-scale crypto heists
🕵️
Cortex XDR Named 2025 Gartner Customers’ Choice for Endpoint Security
🕵️
Zanubis Android Malware Harvests Banking Credentials and Executes Remote Commands
🕵️
New Russia-affiliated actor Void Blizzard targets critical sectors for espionage | Microsoft Security Blog
🕵️
GitHub becomes go-to platform for malware delivery across Europe - Help Net Security
🕵️
Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access — Even When Uploading Just One File
🕵️
This Cybersecurity Pioneer Just Pulled Up at BSides 👨‍💻
🕵️
Botnet hacks 9,000+ ASUS routers to add persistent SSH backdoor
🕵️
Why CVSS Scores Might Be Useless in 2025
🕵️
Texas Cyber Command will mean ‘expanding’ cybersecurity help, state official says
🕵️
APT41 malware abuses Google Calendar for stealthy C2 communication
🌐
From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign
🌐
Beware of the fake KeePass | Kaspersky official blog
🌐
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
🌐
Smashing Security podcast #419: Star Wars, the CIA, and a WhatsApp malware mirage
📡
How 'Browser-in-the-Middle' Attacks Steal Sessions in Seconds
📡
Apple blocked over $9 billion in App Store fraud in five years
📡
Microsoft wants Windows to update all software on your PC
📡
Microsoft introduces new Windows backup tool for businesses
📡
[Guest Diary] Exploring a Use Case of Artificial Intelligence Assistance with Understanding an Attack, (Wed, May 28th)
📡
The CISO Who Chose Family Over Fortune
📡
When Your Cloud IDE Goes Down… You’re Stuck!
📡
Security startup Horizon3.ai is raising $100M in new round
📡
Windows 11 KB5058499 update rolls out new Share and Click to Do features
📡
Windows 10 KB5058481 update brings seconds back to calendar flyout