Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for Apple Patches Active ...

 Vulnerabilities

Apple has issued emergency updates to fix a critical security flaw that is actively being exploited in iOS and iPadOS. On February 10, the tech giant released out-of-band security patches to address a zero-day vulnerability identified as CVE-2025-24200. This vulnerability has been deemed a serious security risk,   show more ...  

particularly because it could allow attackers to bypass important security protections on locked Apple devices. Apple has confirmed that the flaw has been exploited in the wild, and users are strongly urged to update their devices immediately to avoid falling victim to potential attacks. iOS Zero-Day CVE-2025-24200  The security flaw is tied to a component of Apple’s USB Restricted Mode, which was introduced in iOS 11.4.1 to prevent unauthorized data access via USB connections. When USB Restricted Mode is activated, an iPhone or iPad that has not been unlocked and connected to an accessory in the last hour will block all USB communication. However, the vulnerability described as CVE-2025-24200 has been exploited by attackers to disable this protective feature, which could allow them to access a device’s data through USB connections even if the device is locked.  [caption id="attachment_100863" align="alignnone" width="928"] CVE-2025-24200 vulnerability (Source: Apple)[/caption] The issue has been classified as an "authorization issue," meaning that an attacker could potentially exploit the flaw by gaining unauthorized access to a device’s state management system, disabling USB Restricted Mode. Once the attacker bypasses this security barrier, they could gain unauthorized access to sensitive information stored on the device. This vulnerability is particularly concerning as it requires physical access to the device for exploitation, making it a form of cyber-physical attack.  Apple’s emergency updates aim to address this issue with improved state management in the affected systems. The company has not disclosed the specific nature of the attacks or the extent to which the vulnerability has been exploited, but reports indicate that the flaw may have been used in highly targeted and sophisticated attacks, particularly against specific individuals. Affected Apple Devices The vulnerability impacts a wide range of Apple products, including recent models of iPhones, iPads, and iPad Pro devices. The devices confirmed to be affected by CVE-2025-24200 include iPhone XS and later models, iPad Pro 13-inch (3rd generation and later), iPad Pro 12.9-inch (3rd generation and later), iPad Pro 11-inch (1st generation and later), iPad Air (3rd generation and later), iPad mini (5th generation and later), iPad 7th generation and later, and iPad 6th generation. Apple has strongly recommended that users with these devices update their software immediately to the latest version of iOS or iPadOS. The latest versions, iOS 18.3.1 and iPadOS 18.3.1, were both released on February 10, 2025. These updates specifically address CVE-2025-24200 and patch the security loophole in USB Restricted Mode. For those who have devices affected by this vulnerability, Apple has provided an easy way to update to the latest software version. The updates can be installed by visiting Settings > General > Software Update on affected devices. Additionally, users are encouraged to enable automatic software updates by navigating to Settings > General > Software Updates > Enable Automatic Updates, ensuring that their devices are protected from future threats.  Conclusion The CVE-2025-24200 zero-day vulnerability poses a serious security risk by allowing attackers to bypass USB Restricted Mode and access sensitive data on locked devices. Apple’s swift release of iOS 18.3.1 and iPadOS 18.3.1 addresses the issue, but the rapid exploitation of such vulnerabilities highlights the need for users to stay vigilant and update their devices promptly to protect against unauthorized access and potential attacks. 

image for CISA Places Election ...

 Feed

The staffers were tasked with building relationships on the ground across the country in local election jurisdictions, teaching election officials tactics on mitigating cyber threats, cyber hygiene, combating misinformation and foreign influence, and more.

 Feed

Source: The Nation A coordinated law enforcement operation has taken down the dark web data leak and negotiation sites associated with the 8Base ransomware gang. Visitors to the data leak site are now greeted with a seizure banner that says: "This hidden site and the criminal content have been seized by the Bavarian State Criminal Police Office on behalf of the Office of the Public Prosecutor

 Feed

Apple on Monday released out-of-band security updates to address a security flaw in iOS and iPadOS that it said has been exploited in the wild. Assigned the CVE identifier CVE-2025-24200, the vulnerability has been described as an authorization issue that could make it possible for a malicious actor to disable USB Restricted Mode on a locked device as part of a cyber physical attack. This

 Feed

Imagine you're considering a new car for your family. Before making a purchase, you evaluate its safety ratings, fuel efficiency, and reliability. You might even take it for a test drive to ensure it meets your needs. The same approach should be applied to software and hardware products before integrating them into an organization's environment. Just as you wouldn’t buy a car without knowing its

 Feed

Threat actors have observed the increasingly common ClickFix technique to deliver a remote access trojan named NetSupport RAT since early January 2025. NetSupport RAT, typically propagated via bogus websites and fake browser updates, grants attackers full control over the victim's host, allowing them to monitor the device's screen in real-time, control the keyboard and mouse, upload and download

 Feed

Multi-factor authentication (MFA) has quickly become the standard for securing business accounts. Once a niche security measure, adoption is on the rise across industries. But while it’s undeniably effective at keeping bad actors out, the implementation of MFA solutions can be a tangled mess of competing designs and ideas. For businesses and employees, the reality is that MFA sometimes feels

 Feed

Progress Software has addressed multiple high-severity security flaws in its LoadMaster software that could be exploited by malicious actors to execute arbitrary system commands or download any file from the system. Kemp LoadMaster is a high-performance application delivery controller (ADC) and load balancer that provides availability, scalability, performance, and security for business-critical

 Feed

Gcore’s latest DDoS Radar report analyzes attack data from Q3–Q4 2024, revealing a 56% YoY rise in the total number of DDoS attacks with the largest attack peaking at a record 2 Tbps. The financial services sector saw the most dramatic increase, with a 117% rise in attacks, while gaming remained the most-targeted industry. This period’s findings emphasize the need for robust, adaptive DDoS

 Feed

Google has stepped in to clarify that a newly introduced Android System SafetyCore app does not perform any client-side scanning of content. "Android provides many on-device protections that safeguard users against threats like malware, messaging spam and abuse protections, and phone scam protections, while preserving user privacy and keeping users in control of their data," a spokesperson for

 AI

In episode 37 of "The AI Fix", Google Gemini gets the munchies, the wettest country in the world can’t find any water, an escalator tries to eat Graham, o3-mini can’t rub two sticks together, and OpenAI invents an AI that can do “a single-digit percentage of all economically valuable tasks in the   show more ...  

world” but nobody notices. Graham wonders why his childhood was full of Triffids and quicksand, and discovers a way to trap overstepping AI crawlers in an endless maze, while Mark investigates the appalling state of DeepSeek security. All this and much more is discussed in the latest edition of "The AI Fix" podcast by Graham Cluley and Mark Stockley.

 Threat Lab

OpenText recently surveyed 255 MSPs to uncover key trends shaping the future of Managed Detection and Response (MDR). The findings reveal not only what cybersecurity professionals are prioritizing but also how MSPs can better meet the evolving demands of their small and midsize business (SMB) customers. One key   show more ...  

takeaway from the survey: 81% of respondents rated cloud-based SIEM (security information and event management) as important to include in their MDR solution. Why is cloud-based SIEM such a big deal for an MDR? Because for MSPs delivering MDR services, it’s the backbone that makes scalability, visibility, central and efficient threat management possible. Cloud-based SIEM is an essential MDR backbone The modern attack surface is vast. Business customers are spread across hybrid infrastructures with data flowing through endpoints, networks, applications, and the cloud. Cloud-based SIEM-powered MDR services help MSPs stay on top of this complexity by serving as the single source of truth for detecting and responding to threats. Here’s why it matters: Seamless data ingestionCloud-based SIEMs ingest security telemetry from diverse sources—EDR solutions, applications, cloud infrastructure, network packet data, and more—to deliver a holistic view of a customer’s environment. In-depth correlation and analysisBy correlating data across borderless infrastructures, SIEM provides security analysts with the context they need to identify, prioritize, and address the most impactful threats. Scalability and accessibilityAs businesses grow, so do their security needs. Cloud-based SIEM scales effortlessly, ensuring an MSP’s MDR services can handle large data volumes without compromising performance. Plus, analysts can access SIEM insights anywhere, anytime. In short, a cloud-based SIEM ensures that no corner of the customer’s attack surface is left unseen—from endpoint to cloud. It provides comprehensive visibility, continuously collecting, correlating and analyzing data from every layer of the IT environment. This means the MDR service can detect threats wherever they may arise, whether on-premises, in the cloud, or across hybrid infrastructures, giving MSPs the ability to respond quickly and effectively to any potential risk. How SIEM drives faster MDR outcomes Cyberattacks move fast. MSPs delivering MDR services need tools and processes that can keep pace with today’s threats. A cloud-based SIEM is the essential technology that enables the MDR service to deliver rapid detection, triage and investigation. Here’s how SIEM supports faster outcomes across every stage: Rapid detection: A cloud-based SIEM continuously ingests and correlates syslog data from all sources, reducing the time it takes to identify a threat after it emerges. Time to triage: By consolidating telemetry into a centralized platform, SIEM enables security analysts to quickly assess and prioritize incidents—cutting through the noise to focus on the most critical threats. Accelerated investigation: SIEM by leveraging threat intel provides the context analysts need to understand a threat, pinpoint its origin, and determine its potential impact—all without needing to manually stitch together insights. Expert-led, SIEM-enabled When MSPs choose an MDR partner solution with a cloud-based SIEM at its core, they unlock more than just a sophisticated tool. They gain the advantage of expert-led security teams that can leverage the full potential of the SIEM platform to deliver rapid, precise, and continuous threat detection. The survey results highlight that MSPs see the distinct advantage of running an MDR service with a cloud-based SIEM, which enhances their ability to run a 24/7/365 security operations center (SOC). With SIEM as the central hub, security experts can quickly surface suspicious activity, centrally manage investigations and take swift action. The value of expert-led, SIEM-enabled MDR becomes even clearer when you consider the following benefits: Round-the-clock SOC with seamless investigationsThe ability to monitor and respond to threats 24/7X365 is critical for an MDR service. By consolidating threat data into a centralized cloud SIEM, experts can detect malicious activity at any time of day or night. This continuous monitoring reduces the risk of attackers moving undetected, ensuring that threats are neutralized before they can cause harm. Single, integrated tool for investigationThe MDR survey results highlight the value MSPs place on having a unified toolset for threat detection and investigation. A cloud-based SIEM with threat intel provides this central hub, enabling security teams to efficiently assess the scope of incidents, prioritize based on severity, and track the attack’s progress in real-time. The SIEM can correlate data across multiple environments—whether it’s endpoint data, network logs, or cloud infrastructure—ensuring nothing slips through the cracks. Expert insight into threat contextThe SIEM doesn’t just provide raw data; it enriches that data with valuable context from threat intel , helping the MDR security experts to identify the root cause of a threat, its potential impact, and the fastest path to resolution. As cyber threats become more relentless and attack surfaces continue to expand, MSPs are in a unique position to help SMBs stay secure. OpenText’s MDR survey results highlight what’s clear: a cloud-based SIEM as part of an MSP’s MDR solution is a priority set up. It allows MSPs to deliver consistent, effective threat detection and response. By combining the right technology with the right expertise, MSPs can navigate the complexity of today’s cybersecurity landscape and give their customers the confidence to focus on what matters most: growing their business. The post The rising role of cloud-based SIEM in MDR: What MSPs need to know appeared first on Webroot Blog.

 Cyber Security News

Source: go.theregister.com – Author: Iain Thomson An international police operation spanning the US, Europe, and Asia has shuttered the 8Base ransomware crew’s dark web presence and resulted in the arrest of four European suspects accused of stealing $16 million from more than 1,000 victims worldwide. The   show more ...  

8Base ransomware group has been active since 2022. Bavarian […] La entrada All your 8Base are belong to us: Ransomware crew busted in global sting – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Connor Jones US newspaper publisher Lee Enterprises is one week into tackling a nondescript “cybersecurity event,” saying the related investigation may take “weeks or longer” to complete. The publisher’s CEO, Kevin Mowbray, confirmed the   show more ...  

incident with a statement issued late in the evening of February 7. He said they had notified […] La entrada US news org still struggling to print papers a week after ‘cybersecurity event’ – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 armed

Source: go.theregister.com – Author: Connor Jones The UK’s Ministry of Defence (MoD) is fast-tracking cybersecurity specialists in a bid to fortify its protection against increasing attacks. It’s understood the plans are to fill up to 50 roles by the end of 2025, condensing the usual ten-week basic   show more ...  

training program to just one month before three […] La entrada UK armed forces fast-tracking cyber warriors to defend digital front lines – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Simon Sharwood Trump administration policies that allowed Elon Musk’s Department of Government Efficiency to access systems and data at the Bureau of the Fiscal Service (BFS) have left the org “more vulnerable to hacking” according to federal Judge Paul A.   show more ...  

Engelmayer in New York City. Judge Engelmayer used that phrase in […] La entrada Judge says US Treasury ‘more vulnerable to hacking’ since Trump let the DOGE out – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Simon Sharwood India’s Reserve Bank last week announced a plan to use adopt dedicated second-level domains – bank.in and fin.in – in the hope it improves trust in the financial services sector. The plan was announced in a policy update [PDF] that notes “significant   show more ...  

concern” regarding increased instances of digital payment […] La entrada India’s banking on the bank.in domain cleaning up its financial services sector – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Brooke Seipel. McAfee has been named the top brand in the Antivirus and Security Software category in TIME and Statista’s 2024 World’s Best Brands list, ranking above all major industry competitors. The list, which surveyed over 22,000 U.S. consumers, ranks brands based on   show more ...  

trust, awareness, and customer satisfaction across 66 industries.   […] La entrada McAfee Named #1 Antivirus and Security Software Brand in TIME’s 2024 World’s Best Brands  – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.lastwatchdog.com – Author: bacohido By Byron V. Acohido We’re just getting started down the road to the Internet of Everything (IoE.) Related: IoT growing at a 24% clip To get there – to fully tap the potential of a hyper-interconnected ecosystem where devices, data, AI and humans converge to   show more ...  

benefit humankind – cybersecurity must […] La entrada MY TAKE: Securing the Internet of Everything: why self-healing devices are the next frontier – Source: www.lastwatchdog.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.cyberdefensemagazine.com – Author: News team Cyber inequity is a growing chasm that continues to separate organizations with robust cybersecurity and technology capabilities from those without. This digital divide is a global cybersecurity crisis in the making. The World Economic Forum identifies   show more ...  

cyber inequity as a high-impact issue, defining it as the widening divide between organizations equipped […] La entrada Why the Growing Risk of Cyber Inequity Threatens Critical Infrastructure – Source: www.cyberdefensemagazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 11, 2025 Authorities dismantled the 8Base ransomware gang, shutting down its dark web data leak and negotiation sites. An international law enforcement operation, codenamed Operation Phobos Aetor, dismantled the 8Base   show more ...  

ransomware gang. The police took down the dark web data leak and negotiation sites. The police […] La entrada Operation Phobos Aetor: Police dismantled 8Base ransomware gang – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 10, 2025 Apple released iOS and iPadOS updates to address a zero-day likely exploited in extremely sophisticated attacks targeting specific individuals. Apple released emergency security updates to address a zero-day   show more ...  

vulnerability, tracked as CVE-2025-24200, that the company believes was exploited in “extremely sophisticated” targeted attacks. An […] La entrada Apple fixes iPhone and iPad bug exploited in ‘extremely sophisticated attacks’ – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 APT

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 10, 2025 Hewlett Packard Enterprise (HPE) has begun notifying individuals affected by a December 2023 attack carried out by Russia-linked threat actors. Hewlett Packard Enterprise has started notifying individuals whose   show more ...  

personal information was exposed in a December 2023 cyber attack. In January 2024, Hewlett Packard Enterprise […] La entrada HPE is notifying individuals affected by a December 2023 attack – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 10, 2025 The cybercrime group XE Group exploited a VeraCore zero-day to deploy reverse shells, web shells in recent attacks. A recent investigation by researchers from Intezer and Solis Security shed light on the recent   show more ...  

operations of the XE Group. Active since at least 2013, XE […] La entrada XE Group shifts from credit card skimming to exploiting zero-days – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 10, 2025 UK secretly demands Apple create an iCloud backdoor via a Technical Capability Notice, raising privacy concerns over end-to-end encryption. The UK demands Apple to create a backdoor to access any iCloud backups, the   show more ...  

request raises concerns about user privacy and undermines Apple’s security commitments. […] La entrada UK Gov demands backdoor to access Apple iCloud backups worldwide – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple

Source: www.securityweek.com – Author: Ryan Naraine Apple on Monday released an urgent patch for its flagship iOS and iPadOS platforms alongside a warning that a critical security flaw was actively exploited in the wild.  The security defect, tracked as CVE-2025-24200, allows attackers with physical access to   show more ...  

a locked iPhone or iPad to disable USB Restricted […] La entrada Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack  – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: www.securityweek.com – Author: Associated Press The geopolitics of artificial intelligence will be in focus at a major summit in France where world leaders, executives and experts will hammer out pledges on guiding the development of the rapidly advancing technology. It’s the latest in a series of   show more ...  

global dialogues around AI governance, but one that […] La entrada Trump’s AI Ambition and China’s DeepSeek Overshadow an AI Summit in Paris – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.securityweek.com – Author: Eduard Kovacs A critical vulnerability potentially affecting Orthanc servers can pose a serious risk to medical data and healthcare operations, according to a researcher.  The US cybersecurity agency CISA last week published an ICS medical advisory to inform organizations   show more ...  

about CVE-2025-0896, a critical authentication issue discovered in Orthanc, an open source […] La entrada Orthanc Server Vulnerability Poses Risk to Medical Data, Healthcare Operations – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: www.securityweek.com – Author: Ionut Arghire Microsoft on Friday announced an expansion to its Copilot bug bounty program to include more consumer products and provide researchers with higher incentives. The same as before, bug hunters can earn up to $30,000 for critical-severity vulnerabilities in   show more ...  

multiple Copilot AI products and services, but the payouts for medium-severity […] La entrada Microsoft Expands Copilot Bug Bounty Program, Increases Payouts – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.securityweek.com – Author: Ionut Arghire Hewlett Packard Enterprise has started notifying people that their personal information was likely compromised in a December 2023 hack attributed to a Russian threat actor. The incident was disclosed a year ago, when HPE notified the US Securities and   show more ...  

Exchange Commission that the state-sponsored hacking group known as Midnight […] La entrada HPE Says Personal Information Stolen in 2023 Russian Hack – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Source: HakanGider via Shutterstock A cybercrime group long associated with credit card theft has expanded into targeted information stealing from supply chain organizations in the manufacturing and distribution sectors. In some of these new   show more ...  

attacks the threat actor, whom several vendors track as the XE Group and […] La entrada XE Group Shifts From Card Skimming to Supply Chain Attacks – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: Mint Images Limited via Alamy Stock Photo NEWS BRIEF In Bainbridge, Ga., the small Memorial Hospital and Manor is notifying 120,000 individuals that their personal information was stolen in a ransomware attack. The   show more ...  

ransomware attack was first disclosed in November, but at the time, […] La entrada 120K Victims Compromised in Memorial Hospital Ransomware Attack – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE WASHINGTON – Eric Council, 25, of Athens, Alabama, entered a guilty plea today to one count of conspiracy to commit aggravated identity theft in United States District Court for the District of Columbia. Council was arrested on October 17, 2024, in   show more ...  

connection with his role in a conspiracy to hack into […] La entrada Guilty Plea in Hacking of the SEC’s X Account That Caused Bitcoin Value Spike – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: Radharc Images via Alamy Stock Photo UPDATE NEWS BRIEF Lee Enterprises, one of the largest newspaper groups in the US, with newspapers in 72 markets, on Feb. 7 filed a report with the SEC detailing a cyberattack that   show more ...  

impacted its operations after causing an […] La entrada Newspaper Giant Lee Enterprises Reels From Cyberattack – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: CyberNewswire. Luxembourg, Luxembourg, February 11th, 2025, CyberNewsWire Gcore, the global edge AI, cloud, network, and security solutions provider, today announced the findings of its Q3-Q4 2024 Radar report into DDoS attack trends. DDoS attacks have reached unprecedented scale   show more ...  

and disruption in 2024, and businesses need to act fast to protect themselves […] La entrada Gcore Radar report reveals 56% year-on-year increase in DDoS attacks – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Waqas. International law enforcement agencies have seized the dark web infrastructure of the notorious 8Base ransomware group and arrested four suspected members, including two men and two women. The operation, led by the Bavarian State Criminal Police Office and the Office of the   show more ...  

Public Prosecutor General in Bamberg, targeted the group’s […] La entrada 4 Arrested as Police Dismantle 8Base Ransomware, Seize Dark Web Sites – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Waqas. A hacker claims to have breached OmniGPT, a popular AI-powered chatbot and productivity platform, exposing 30,000 user emails, phone numbers, and more than 34 million (34,270,455) lines of user conversations. The data was published on Breach Forums on Sunday at 10:04 AM by   show more ...  

a hacker using the alias “Gloomer.” The […] La entrada OmniGPT AI Chatbot Alleged Breach: Hacker Leaks User Data, 34M Messages – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Owais Sultan. Monero (XMR) remains the leading privacy cryptocurrency with its unparalleled anonymity and security in a world increasingly financially surveilled. As regulations mature and the need for private transactions grows, Monero’s place in the cryptoverse has never been   show more ...  

clearer. What awaits XMR in 2025? Let’s watch the strongest forces shape […] La entrada Monero (XMR) 2025 Prediction: What Is in Store for the Top Privacy Coin? – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Deeba Ahmed. Cisco has refuted claims of a recent data breach after the Kraken ransomware group published sensitive information, allegedly stolen from the company’s internal network, on its dark web leak site. Cyber Press reported on the ransomware group’s claims, which   show more ...  

included the exposure of credentials linked to Cisco’s Windows Active […] La entrada Cisco Rejects Kraken Ransomware’s Data Breach Claims – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Owais Sultan. Threat analysts have identified a new and emerging threat: a variant of the SystemBC RAT (Remote Access Trojan) that is now actively targeting Linux-based platforms. This development puts corporate networks, cloud infrastructures, and IoT devices at risk. The latest   show more ...  

version of SystemBC RAT is more stealthy and harder to […] La entrada SystemBC RAT Now Targets Linux, Spreading Ransomware and Infostealers – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons A previously unknown gang dubbed Triplestrength poses a triple threat to organizations: It infects victims’ computers with ransomware, then hijacks their cloud accounts to illegally mine for cryptocurrency. Google’s threat intelligence group has   show more ...  

been tracking Triplestrength since 2023, and only recently started talking about this financially motivated criminal crew. […] La entrada Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Blast

Source: go.theregister.com – Author: Connor Jones One of the bulletproof hosting (BPH) providers used by the LockBit ransomware operation has been hit with sanctions in the US, UK, and Australia (AUKUS), along with six of its key allies. Headquartered in Barnaul, Russia, Zservers provided BPH services to a   show more ...  

number of LockBit affiliates, the three nations […] La entrada UK, US, Oz blast holes in LockBit’s bulletproof hosting provider Zservers – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Connor Jones An Alabama man is pleading guilty after being charged with SIM swapping the Securities and Exchange Commission’s (SEC) X account in January last year. Twenty-five-year-old Eric Council Jr was charged with the offense in October and the Justice Department   show more ...  

said at the time he was part of a group […] La entrada Man who SIM-swapped the SEC’s X account pleads guilty – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons Twice, over the past two months, Dawid Moczadło has interviewed purported job seekers only to discover that these “software developers” were scammers using AI-based tools — likely to get hired at a security company also using artificial   show more ...  

intelligence, and then steal source code or other sensitive IP. Moczadło is […] La entrada I’m a security expert, and I almost fell for a North Korea-style deepfake job applicant …Twice – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-02
Aggregator history
Tuesday, February 11
SAT
SUN
MON
TUE
WED
THU
FRI
FebruaryMarchApril