Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history

 Feed

ASUS has disclosed a critical security flaw impacting routers with AiCloud enabled that could permit remote attackers to perform unauthorized execution of functions on susceptible devices. The vulnerability, tracked as CVE-2025-2492, has a CVSS score of 9.2 out of a maximum of 10.0. "An improper authentication control vulnerability exists in certain ASUS router firmware series,"

 Feed

Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities. The packages in question are listed below - node-telegram-utils (132 downloads) node-telegram-bots-api (82 downloads) node-telegram-util (73 downloads) According to supply chain

 1 - Cyber Security News Post

Source: hackread.com – Author: Waqas. Check out the top OSINT tools of 2025, an updated list featuring the best free and paid open-source intelligence tools for cybersecurity and investigations. At HackRead.com, we have a long-standing tradition of publishing comprehensive lists of the best OSINT tools to help   show more ...  

cybersecurity professionals and enthusiasts stay ahead in the […] La entrada 2025’s Top OSINT Tools: A Fresh Take on Open-Source Intel – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Brandon Vigliarolo A group of 48 House Democrats is concerned that Elon Musk’s cost-trimmers at DOGE are being careless in their use of AI to help figure out where to slash, creating security risks and giving the oligarch’s artificial intelligence lab an inside   show more ...  

track to train its models on government info. […] La entrada Dems fret over DOGE feeding sensitive data into random AI – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Iain Thomson CISA – the US government’s Cybersecurity and Infrastructure Security Agency – has issued an alert for those who missed Oracle grudgingly admitting some customer data was stolen from the database giant’s public cloud infrastructure. On Wednesday,   show more ...  

the cyber-agency advised Oracle users to make sure, in light of that theft, […] La entrada Oracle hopes talk of cloud data theft dies off. CISA just resurrected it for Easter – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons Comment The splintering of the global system for identifying and tracking security bugs in technology products has begun. Earlier this week, the widely used Common Vulnerabilities and Exposures (CVE) program faced doom as the US government discontinued funding   show more ...  

for MITRE, the non-profit that operates the program. Uncle Sam U-turned […] La entrada CVE fallout: The splintering of the standard vulnerability tracking system has begun – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Midnight

Source: www.infosecurity-magazine.com – Author: Notorious Russian nation-state actor Midnight Blizzard is targeting European diplomats with a phishing lure inviting them to wine tasting events. The campaign has targeted multiple European countries with a specific focus on Ministries of Foreign Affairs as well   show more ...  

as embassies. Check Point researchers said that the attackers use these emails to […] La entrada Midnight Blizzard Targets European Diplomats with Wine Tasting Phishing Lure – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Could

Source: www.darkreading.com – Author: Arielle Waldman Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security   show more ...  

solution. There are several actions that could trigger this […] La entrada Could Ransomware Survive Without Cryptocurrency? – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: www.darkreading.com – Author: Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are   show more ...  

several actions that could trigger this block including […] La entrada AWWA Supports Introduction of Collaborative Cybersecurity Legislation – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are   show more ...  

several actions that could trigger this block including […] La entrada Organizations Fix Less Than Half of All Exploitable Vulnerabilities, With Just 21% of GenAI App Flaws Resolved – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Attackers

Source: www.darkreading.com – Author: Robert Lemos, Contributing Writer Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered   show more ...  

the security solution. There are several actions that could […] La entrada Attackers and Defenders Lean on AI in Identity Fraud Battle – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Chinese

Source: www.darkreading.com – Author: Nate Nelson, Contributing Writer Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the   show more ...  

security solution. There are several actions that could […] La entrada Chinese APT Mustang Panda Debuts 4 New Attack Tools – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed   show more ...  

triggered the security solution. There are several actions […] La entrada CISA Weighs In on Alleged Oracle Cloud Breach – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Boards

Source: www.darkreading.com – Author: Warren O’Driscoll Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security   show more ...  

solution. There are several actions that could trigger this […] La entrada If Boards Don’t Fix OT Security, Regulators Will – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple

Source: www.darkreading.com – Author: Rob Wright Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution.   show more ...  

There are several actions that could trigger this […] La entrada Apple Zero-Days Under ‘Sophisticated Attack,’ but Details Lacking – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BSides Las Vegas 2024

Source: securityboulevard.com – Author: Marc Handelman Home » Security Bloggers Network » BSidesLV24 – Common Ground – One Port to Serve Them All – Google GCP Cloud Shell Abuse Author/Presenter: Hubert Lin Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite   show more ...  

Security BSidesLV24 content. Originating from the conference’s events located at the […] La entrada BSidesLV24 – Common Ground – One Port to Serve Them All – Google GCP Cloud Shell Abuse – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Max Aulakh Here at Ignyte, we talk a lot about various overarching information security frameworks, like FedRAMP, CMMC, and ISO 27001. Within these overall frameworks exist a range of smaller and narrower standards, including COMSEC. If you’ve seen COMSEC as a term, you   show more ...  

may be passingly familiar with what it is, […] La entrada What is COMSEC? Training, Updates, Audits & More – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Lavanya Jawaharlal, Ph.D., reflects on the microaggressions and workplace culture considerations affecting women in tech — as well as the reasons to be optimistic about the future. Source Views: 0 La entrada Beyond the 29%: The Ongoing Fight for Equality in STEM and How We Win se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

In accordance with the Society of Women Engineers Bylaws, Article XIII – AMENDMENT, this proposed bylaws amendment is being presented to the membership. The SWE Board of Directors will vote on these changes following the 45-day notice period. The amendment proposal contains the rationale and pro/con considerations.   show more ...  

B2540: Amend SWE Bylaws – Move Nominating Committee… […] La entrada Important Member Notice for Bylaws Amendment: Move Nominating Committee Procedural Items to Election Manual se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

In accordance with the Society of Women Engineers Bylaws, Article XIII – AMENDMENT, this proposed bylaws amendment is being presented to the membership. The SWE Board of Directors will vote on these changes following the 45-day notice period. The amendment proposal contains the rationale and pro/con considerations.   show more ...  

B2538: Amend SWE Bylaws – Restructure Standing Committees… […] La entrada Important Member Notice for Bylaws Amendment: Restructure Standing Committees se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 cyber

Source: www.cyberdefensemagazine.com – Author: News team As artificial intelligence (AI) continues to revolutionize the business landscape, midsized organizations find themselves at a crossroads, balancing the transformative potential of AI against the heightened risks it introduces. While forward-thinking   show more ...  

companies leverage generative and agentic AI to enhance operational efficiency, they must remain vigilant against the growing sophistication […] La entrada Cyber Risks Associated with Adoption of Generative AI Tools – Source: www.cyberdefensemagazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Learn about the exciting engineering challenges these three women are solving in their internships with Winnebago Industries. Source Views: 0 La entrada Pipeline of Engineering Talent for the Future se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

In this podcast episode, FY23 SWE President Dayna Johnson passes the torch to FY24 SWE President Alexis McKittrick. Listen as they share memories and achievements from the past year as well as goals for the upcoming year. Source Views: 0 La entrada SWE Diverse Podcast Episode 219: Passing the Torch ― Insights from   show more ...  

the Outgoing & Incoming SWE Presidents se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

What is generative AI, and how can engineers use it to optimize their processes? Read on to learn how to leverage AI technology in STEM. Source Views: 0 La entrada Embracing Generative AI: An Engineer’s Perspective se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Iain Thomson Video Crosswalk buttons in various US cities were hijacked over the past week or so to – rather than robotically tell people it’s safe to walk or wait – instead emit the AI-spoofed voices of Jeff Bezos, Elon Musk, and Mark Zuckerberg. And it’s   show more ...  

likely all thanks to a […] La entrada Hacking US crosswalks to talk like Zuck is as easy as 1234 – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities. The packages in question are listed below – node-telegram-utils (132   show more ...  

downloads) node-telegram-bots-api (82 downloads) node-telegram-util (73 downloads) According to supply chain Original Post […] La entrada Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Confirms

Source: thehackernews.com – Author: . ASUS has disclosed a critical security flaw impacting routers with AiCloud enabled that could permit remote attackers to perform unauthorized execution of functions on susceptible devices. The vulnerability, tracked as CVE-2025-2492, has a CVSS score of 9.2 out of a maximum   show more ...  

of 10.0. “An improper authentication control vulnerability exists in […] La entrada ASUS Confirms Critical Flaw in AiCloud Routers; Users Urged to Update Firmware – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.securityweek.com – Author: Ionut Arghire The exploitation of a Windows NTLM vulnerability started roughly a week after patches were released last month, Check Point warns. Tracked as CVE-2025-24054 (CVSS score of 6.5) and resolved on March 2025 Patch Tuesday, the medium-severity flaw could allow   show more ...  

NTLM hash disclosure, enabling attackers to perform spoofing attacks over […] La entrada Fresh Windows NTLM Vulnerability Exploited in Attacks – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 China

Source: www.securityweek.com – Author: Ionut Arghire A Maryland man admitted in court to obtaining remote IT work at US companies on behalf of individuals located in China. As part of the scheme, the man, Minh Phuong Ngoc Vong, 40, of Bowie, defrauded 13 US companies that hired him as a remote software   show more ...  

developer, by allowing […] La entrada Man Helped Individuals in China Get Jobs Involving Sensitive US Government Projects – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.schneier.com – Author: Bruce Schneier Clive Robinson • April 18, 2025 8:55 PM @ ALL, It tries to reason more but just hallucinates more at OpenAI. The link says nearly all you need to know, https://techcrunch.com/2025/04/18/openais-new-reasoning-ai-models-hallucinate-more/ And gets amplified in   show more ...  

the first paragraph with, “OpenAI’s recently launched o3 and o4-mini AI models are state-of-the-art […] La entrada Friday Squid Blogging: Live Colossal Squid Filmed – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-04
Aggregator history
Saturday, April 19
TUE
WED
THU
FRI
SAT
SUN
MON
AprilMayJune