Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for No Ceasefire in the ...

 Cyber Warfare

India and Pakistan may have reached a status quo of ceasefire on ground, air and sea for now, but the two neighbors are still going hard at each other in cyberspace. In the aftermath of the Pahalgam terror attack, Indian cybersecurity agencies detected a significant surge in coordinated cyber offensives targeting the   show more ...  

country’s digital infrastructure. An intelligence report from a state agency attributed these attacks to Pakistan-aligned Advanced Persistent Threat (APT) groups that launched 1.5 million intrusion attempts against Indian websites and systems. These numbers coincide with the findings of private sector cybersecurity firm Cyble, which recorded more than 40 hacktivist groups actively targeting Indian organizations after the Pahalgam terror attack and India's retaliation through "Operation Sindoor." Also read: Post Pahalgam, Over 40 Hacktivist Groups Targeted India: High Noise, Low Impact Only 150 Cyberattacks Successful According to the Maharashtra Cyber Department, the state’s cybersecurity task force, only 150 of the cyberattacks were successful. While the overall damage was limited, the massive volume of attempted breaches reveals an alarming pattern of persistent, state-aligned digital aggression. “These were not random hits. The sheer coordination and volume point to a structured campaign, likely with state backing,” said a senior official, requesting anonymity. The threat actors reportedly used a mix of Distributed Denial of Service (DDoS) attacks, malware payloads, and website defacements to overwhelm systems and spread propaganda. Cyble's report corroborates these findings. It said that more than half of these attacks were DDoS aimed at overwhelming systems while the others were mainly website defacement, which is primarily used for propaganda. [caption id="attachment_102689" align="aligncenter" width="600"] Source: Cyble Research and Innovation Labs (CRIL)[/caption] Hybrid Warfare in the Digital Age The government's findings are detailed in a classified intelligence document titled “Road of Sindoor,” which outlines how these cyber operations are part of a broader hybrid warfare strategy aimed at destabilizing society and sowing discord through online misinformation. The attackers allegedly weaponized digital platforms to circulate fake news, provoke communal tension, and erode trust in national institutions. The authorities explicitly named seven APTs in the report, as per ET India: Pakistan Cyber Force, Team Insane Pakistan, Mysterious Bangladesh, Indo Hacks Sec, Cyber Group HOAX 1337, APT36 and National Cyber Crew. According to Cyble, the majority of these hacktivists like Pakistan Cyber Force and Mysterious Bangladesh operationalized DDoS attacks against government institutions but some like Team Insane Pakistan claimed data breaches related to government databases. These claims, however, could not be verified. [caption id="attachment_102694" align="aligncenter" width="686"] Team Insane Pakistan claims on Telegram linked to data breach of Indian government agencies. (Source: Cyble)[/caption] APT36 was another threat actor that was caught spoofing infrastructure of India's Ministry of Defence. Cybersecurity firm hunt.io, in the initial days after the Pahalgam terror attack, observed delivering cross-platform malware through a ClickFix-style infection chain. The phishing or spoofed website mimicked government press releases, staged payloads through a possibly compromised [.]in domain, and used visual deception to appear credible during execution. [caption id="attachment_102699" align="aligncenter" width="600"] Fake phishing page screenshot showing only March 2025 link. (Source: hunt.io) [/caption] The state cyber agency believes these APTs operate not only out of Pakistan but also leverage networks in Bangladesh, Indonesia, Morocco, and parts of the Middle East to obfuscate origins and bypass geolocation-based defenses. This distributed operational model makes attribution complex and response efforts more resource-intensive. Resilience Over Retaliation The fact that more than 99.99% of the attacks were repelled indicates India’s maturity when it comes to cybersecurity infrastructure. However, cybersecurity experts caution against complacency. The senior official noted, “APT groups play the long game. Even failed intrusions offer them valuable intelligence on network configurations, firewall behavior, and incident response times. Every attempt is a reconnaissance opportunity.” He added that small breaches can still lead to serious consequences. “Compromised websites, even if minor, can become launchpads for phishing campaigns or be used to push disinformation under the guise of legitimate Indian domains.” A Geneva Convention for Cyberspace? Unlike physical aggression, cyberattacks transcend borders with ease, making traditional diplomacy and deterrence frameworks less effective. Another example of this is the ongoing cyberwar between Russia and Ukraine that supports kinetic warfare. The anonymous nature of cyberspace often allows adversaries to operate in gray zones, using civilian infrastructure to conduct hostile operations. This environment complicates both domestic response and international collaboration. Owing to this, “the world needs a Geneva Convention for cyberspace,” the senior official said. Beware of Misinformation Apart from cyberattacks, the state agency also warned of psychological operations (PsyOps) from these hacktivist groups who have not only presented a false narrative or propaganda but also spread misinformation about several non-existent events like the downing of 70% of the electric grid across the nation through a cyberattack, disruption of satellite and telecommunication, and an alleged targeting of a missile storage facility in India. The extent of fake news, including articles, videos and images, has grown so much that the government's Press Information Bureau Fact Check account on platform X posted a cautionary note: "YOUR SOCIAL MEDIA FEEDS ARE UNDER ATTACK. Beware of suspicious videos related to #IndianArmedForces or the ongoing situation. These are key tools of malicious manipulation." [caption id="attachment_102703" align="aligncenter" width="400"] Tweet on X from PIB Fact Check (Source: X)[/caption] The state cyber agency has already removed more than 5,000 posts related to misinformation on the Indo-Pak conflict circulating on several social media platforms and has flagged another four dozen that are in the process of takedown, it added. Also read: At a Time of Indo-Pak Conflict, Why a Digital Blackout Matters—and How to Do It

image for How to implement zer ...

 Business

This year marks the 15th anniversary of the first guide to implementing the zero trust security concept, which, according to a Gartner survey, almost two-thirds of surveyed organizations have adopted to some extent. Admittedly (in the same Gartner survey), for 58% of them this transition is far from complete, with   show more ...  

zero trust covering less than half of infrastructure. Most organizations are still at the stage of piloting solutions and building the necessary infrastructure. To join the vanguard, you need to plan the transition to zero trust with eyes wide open to the obstacles that lie ahead, and to understand how to overcome them. Zero trust best practices Zero trust is a security architecture that views all connections, devices, and applications as untrusted and potentially compromised — even if theyre part of the organizations internal infrastructure. Zero trust solutions deliver continuous adaptive protection by re-verifying every connection and transaction based on a potentially changed security context. This way, companies can mold their information security to the real-world conditions of hybrid cloud infrastructures and remote working. In addition to the oldest and best-known guidelines, such as Forresters first report and Googles BeyondCorp, the components of zero trust are detailed in NIST SP 800-207 (Zero Trust Architecture), while the separate NIST SP 1800-35B offers implementation recommendations. There are also guidelines that map specific infosec measures and tools to the zero trust methodology, such as CIS Controls v8. CISA offers a handy maturity model, though its primarily optimized for government agencies. In practice, zero trust implementation rarely follows the rule book, and many CISOs end up having to mix and match recommendations from these guidance documents with the guidelines of their key IT suppliers (for example, Microsoft), prioritizing and selecting measures based on their specific situation. Whats more, all these guides are less than forthcoming in describing the complexities of implementation. Executive buy-in Zero trust migration isnt purely a technical project, and therefore requires substantial support on the administrative and executive levels. In addition to investing in software, hardware, and user training, it demands significant effort from various departments, including HR. Company leadership needs to understand why the changes are needed and what theyll bring to the business. To get across the value and importance of a project, the incident cost or value at risk needs to be clearly communicated on the one hand, as do the new business opportunities on the other. For example, zero trust protection can enable broader use of SaaS services, employee-owned devices, and cost-effective network organization solutions. Alongside on-topic meetings, this idea should be reinforced through specialized cybersecurity training for executives. Not only does such training instill specific infosec skills, it also allows your company to run through crisis management and other scenarios in a cyberattack situation — often using specially designed business games. Defining priorities To understand where and what zero trust measures to apply in your infrastructure, youll need a detailed analysis of the network, applications, accounts, identities, and workloads. Its also crucial to identify critical IT assets. Typically making up just a tiny part of the overall IT fleet, these crown jewels either contain sensitive and highly valuable information, or support critical business processes. Consolidating information about IT assets and their value will make it easier to decide which components are most in need of zero trust migration, and which infosec measures will facilitate it. This inventory will also unearth outdated segments of the infrastructure for which migration to zero trust would be impractical or technically infeasible. You need to plan in advance for the interaction of diverse infrastructure elements, and the coexistence of different infosec measures to protect them. A typical problem goes as follows: a company has already implemented some zero trust components (for example, MFA and network segmentation), but these operate completely independently, and no processes and technologies are planned to enable these components to work together within a unified security scenario. Phased implementation Although planning for zero trust architecture is done holistically, its practical implementation should begin with small, specific steps. To win managerial support and to test processes and technologies in a controlled environment, start with measures and processes that are easier to implement and monitor. For example, introduce multi-factor authentication and conditional access just for office computers and the office Wi-Fi. Roll out tools starting with specific departments and their unique IT systems, testing both user scenarios and the performance of infosec tools, all while adjusting settings and policies accordingly. Which zero trust architecture components are easier to implement, and what will help you achieve the first quick wins depends on your specific organization. But each of these quick wins should be scalable to new departments and infrastructure segments; and where zero trust has already been implemented, additional elements of the zero trust architecture can be piloted. While a phased implementation may seem to increase the risk of getting stuck at the migration stage and never completing the transition, experience shows that a big bang approach — a simultaneous shift of the entire infrastructure and all processes to zero trust — fails in most cases. It creates too many points of failure in IT processes, snowballs the load on IT, alienates users, and makes it impossible to correct any planning and implementation errors in a timely and minimally disruptive manner. Phased implementation isnt limited to first steps and pilots. Many companies align the transition to zero trust with adopting new IT projects and opening new offices; they divide the migration of infrastructure into stages — essentially implementing zero trust in short sprints while constantly monitoring performance and process complexity. Managing identities and personnel The cornerstone of zero trust is a mature Identity Access Management (IAM) system, which needs to be not only technically sound but also supported administratively at all times. Data on employees, their positions, roles, and resources available to them must be kept constantly up-to-date, requiring significant support from HR, IT, and the leadership of other key departments. Its imperative to involve them in building formal processes around identity management, taking care to ensure that they feel personally responsible for these processes. It must be stressed that this isnt a one-off job — the data needs to be checked and updated frequently to prevent situations such as access creep (when permissions issued to an employee for a one-time project are never revoked). To improve information security and make zero trust implementation a truly team effort, sometimes its even necessary to change the organizational structure and areas of responsibility of employees — breaking down silos that confine people within narrow job descriptions. For example, one large construction company shifted from job titles such as Network Engineer and Server Administrator to the more generic Process Engineer to underscore the interconnectivity of the roles. Training and feedback Zero trust migration doesnt pass unnoticed by employees. They have to adapt to new authentication procedures and MFA tools, learn how to request access to systems that dont grant it by default be aware that they might occasionally need to re-authenticate to a system they logged in to just an hour ago, and that previously unseen tools like ZTNA, MDM, or EDR (often bundled in a single agent, but sometimes separate), may suddenly appear on their computers. All this requires training and practice. For each phase of implementation, its worth forming a focus group of business users. These users will be the first to undergo training and can help refine training materials in terms of language and content, as well as provide feedback on how the new processes and tools are working. Communication with users should be a two-way street: its important to convey the value of the new approach, while actively listening to complaints and recommendations to adjust policies (both technical and administrative), address shortcomings, and improve the user experience.

image for Patch Tuesday, May 2 ...

 Latest Warnings

Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to the sense of urgency with this month’s patch batch from Redmond are fixes for two other weaknesses that now have   show more ...  

public proof-of-concept exploits available. Microsoft and several security firms have disclosed that attackers are exploiting a pair of bugs in the Windows Common Log File System (CLFS) driver that allow attackers to elevate their privileges on a vulnerable device. The Windows CLFS is a critical Windows component responsible for logging services, and is widely used by Windows system services and third-party applications for logging. Tracked as CVE-2025-32701 & CVE-2025-32706, these flaws are present in all supported versions of Windows 10 and 11, as well as their server versions. Kev Breen, senior director of threat research at Immersive Labs, said privilege escalation bugs assume an attacker already has initial access to a compromised host, typically through a phishing attack or by using stolen credentials. But if that access already exists, Breen said, attackers can gain access to the much more powerful Windows SYSTEM account, which can disable security tooling or even gain domain administration level permissions using credential harvesting tools. “The patch notes don’t provide technical details on how this is being exploited, and no Indicators of Compromise (IOCs) are shared, meaning the only mitigation security teams have is to apply these patches immediately,” he said. “The average time from public disclosure to exploitation at scale is less than five days, with threat actors, ransomware groups, and affiliates quick to leverage these vulnerabilities.” Two other zero-days patched by Microsoft today also were elevation of privilege flaws: CVE-2025-32709, which concerns afd.sys, the Windows Ancillary Function Driver that enables Windows applications to connect to the Internet; and CVE-2025-30400, a weakness in the Desktop Window Manager (DWM) library for Windows. As Adam Barnett at Rapid7 notes, tomorrow marks the one-year anniversary of CVE-2024-30051, a previous zero-day elevation of privilege vulnerability in this same DWM component. The fifth zero-day patched today is CVE-2025-30397, a flaw in the Microsoft Scripting Engine, a key component used by Internet Explorer and Internet Explorer mode in Microsoft Edge. Chris Goettl at Ivanti points out that the Windows 11 and Server 2025 updates include some new AI features that carry a lot of baggage and weigh in at around 4 gigabytes. Said baggage includes new artificial intelligence (AI) capabilities, including the controversial Recall feature, which constantly takes screenshots of what users are doing on Windows CoPilot-enabled computers. Microsoft went back to the drawing board on Recall after a fountain of negative feedback from security experts, who warned it would present an attractive target and a potential gold mine for attackers. Microsoft appears to have made some efforts to prevent Recall from scooping up sensitive financial information, but privacy and security concerns still linger. Former Microsoftie Kevin Beaumont has a good teardown on Microsoft’s updates to Recall. In any case, windowslatest.com reports that Windows 11 version 24H2 shows up ready for downloads, even if you don’t want it. “It will now show up for ‘download and install’ automatically if you go to Settings > Windows Update and click Check for updates, but only when your device does not have a compatibility hold,” the publication reported. “Even if you don’t check for updates, Windows 11 24H2 will automatically download at some point.” Apple users likely have their own patching to do. On May 12 Apple released security updates to fix at least 30 vulnerabilities in iOS and iPadOS (the updated version is 18.5). TechCrunch writes that iOS 18.5 also expands emergency satellite capabilities to iPhone 13 owners for the first time (previously it was only available on iPhone 14 or later). Apple also released updates for macOS Sequoia, macOS Sonoma, macOS Ventura, WatchOS, tvOS and visionOS. Apple said there is no indication of active exploitation for any of the vulnerabilities fixed this month. As always, please back up your device and/or important data before attempting any updates. And please feel free to sound off in the comments if you run into any problems applying any of these fixes.

image for AI Agents May Have a ...

 Feed

A new study by researchers at Princeton University and Sentient shows it's surprisingly easy to trigger malicious behavior from AI agents by implanting fake "memories" into the data they rely on for making decisions.

image for Using a Calculator t ...

 Feed

Organizations face the complex challenge of accurately measuring their cyber risk across multiple variables. Resilience's risk calculator tool can help organizations measure their cyber risk based on their own factors so that they can make informed decisions about their security posture.

 Feed

Fortinet has patched a critical security flaw that it said has been exploited as a zero-day in attacks targeting FortiVoice enterprise phone systems. The vulnerability, tracked as CVE-2025-32756, carries a CVSS score of 9.6 out of 10.0. "A stack-based overflow vulnerability [CWE-121] in FortiVoice, FortiMail, FortiNDR, FortiRecorder, and FortiCamera may allow a remote unauthenticated attacker to

 Feed

Ivanti has released security updates to address two security flaws in Endpoint Manager Mobile (EPMM) software that have been chained in attacks to gain remote code execution. The vulnerabilities in question are listed below - CVE-2025-4427 (CVSS score: 5.3) - An authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials

 Feed

Microsoft on Tuesday shipped fixes to address a total of 78 security flaws across its software lineup, including a set of five zero-days that have come under active exploitation in the wild. Of the 78 flaws resolved by the tech giant, 11 are rated Critical, 66 are rated Important, and one is rated Low in severity. Twenty-eight of these vulnerabilities lead to remote code execution, 21 of them

 Feed

A cyber espionage group known as Earth Ammit has been linked to two related but distinct campaigns from 2023 to 2024 targeting various entities in Taiwan and South Korea, including military, satellite, heavy industry, media, technology, software services, and healthcare sectors. Cybersecurity firm Trend Micro said the first wave, codenamed VENOM, mainly targeted software service providers, while

 Feed

Organizations across industries are experiencing significant escalations in cyberattacks, particularly targeting critical infrastructure providers and cloud-based enterprises. Verizon’s recently released 2025 Data Breach Investigations Report found an 18% YoY increase in confirmed breaches, with the exploitation of vulnerabilities as an initial access step growing by 34%.  As attacks rise

 Feed

Cybersecurity researchers have discovered a new phishing campaign that's being used to distribute malware called Horabot targeting Windows users in Latin American countries like Mexico, Guatemala, Colombia, Peru, Chile, and Argentina. The campaign is "using crafted emails that impersonate invoices or financial documents to trick victims into opening malicious attachments and can steal email

 Feed

Samsung has released software updates to address a critical security flaw in MagicINFO 9 Server that has been actively exploited in the wild. The vulnerability, tracked as CVE-2025-4632 (CVSS score: 9.8), has been described as a path traversal flaw. "Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to

 Feed

At least two different cybercrime groups BianLian and RansomExx are said to have exploited a recently disclosed security flaw in SAP NetWeaver, indicating that multiple threat actors are taking advantage of the bug. Cybersecurity firm ReliaQuest, in a new update published today, said it uncovered evidence suggesting involvement from the BianLian data extortion crew and the RansomExx ransomware

 Feed

A Chinese-language, Telegram-based marketplace called Xinbi Guarantee has facilitated no less than $8.4 billion in transactions since 2022, making it the second major black market to be exposed after HuiOne Guarantee. According to a report published by blockchain analytics firm Elliptic, merchants on the marketplace have been found to peddle technology, personal data, and money laundering

 Feed

A new global phishing threat called "Meta Mirage" has been uncovered, targeting businesses using Meta's Business Suite. This campaign specifically aims at hijacking high-value accounts, including those managing advertising and official brand pages. Cybersecurity researchers at CTM360 revealed that attackers behind Meta Mirage impersonate official Meta communications, tricking users into handing

 CSOonline

Source: www.csoonline.com – Author: The new attack method can leak privileged kernel memory on CPUs released in the past six years that have hardware mitigations for speculative execution and branch injection attacks like Spectre. Six years after Intel made architectural changes to its CPUs to mitigate   show more ...  

speculative execution vulnerabilities, researchers have developed a new technique […] La entrada Researchers bypass Intel’s Spectre fixes — six years of CPUs at risk – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: After the CVE’s program’s near-death experience in April, might the Europeans be looking for a more reliable long-term system? From this week, the global technology industry has a new database to check for the latest software security flaws: the European Union   show more ...  

Vulnerability Database (EUVD). Made operational by the European Union Agency […] La entrada New EU vulnerability database will complement CVE program, not compete with it, says ENISA – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Shift to social media and RSS feeds sparks debate over security, accessibility, and federal tech policy. In a move that may redefine how the US government communicates cyber threats to the public and enterprises, the Cybersecurity and Infrastructure Security Agency (CISA) has   show more ...  

announced a significant shift in its alert dissemination strategy. […] La entrada CISA’s alert pivot reflects a new era of decentralized cyber threat communication – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Auf der European Identity and Cloud Conference 2025 in Berlin wurde IAM neu kartografiert: weg von Insellösungen, hin zu unternehmensweiten Architekturen. Die Kernaussage der EIC Conference 2025: IAM ist ein ganzheitlicher Architekturansatz und kein Toolset. Zolak –   show more ...  

shutterstock.com Identity & Access Management (IAM) ist nicht länger eine Frage der Tool-Auswahl, sondern […] La entrada IAM 2025: Diese 10 Trends entscheiden über Ihre Sicherheitsstrategie – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CIO des Jahres

Source: www.csoonline.com – Author: Editor in Chief B2B COMPUTERWOCHE, CIO, CSO in Germany News 13. Mai 20252 Minuten CIO des JahresCSO und CISOIT-Strategie Auch in diesem Jahr zeichnen wir die besten IT-Managerinnen und -Manager im deutschsprachigen Raum aus – auch für ihre IT-Security-Leistungen. Wir   show more ...  

haben die Bewerbungsfrist bis zum 30. Mai 2025 verlängert. So sehen […] La entrada CIO des Jahres 2025 – jetzt mitmachen und bis Ende Mai bewerben – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSO and CISO

Source: www.csoonline.com – Author: CISO at the Merck Group Volker Buß talks about what is important in the event of a cyber attack. Volker Buß joined the German multinational science and technology company Merck Group in 2021. Merck is present in more than 60 countries and employs more than 60,000 people   show more ...  

worldwide. Buß talks about […] La entrada Merck’s CISO Volker Buß on securing global operations – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Artificial Intelligence

Source: www.csoonline.com – Author: Security leaders must develop a multi-layered strategy to defend against deepfake voice and video attacks, which experts expect to increase quickly in volume and effectiveness. An employee in the finance department at a retail company recently got a call from his CFO   show more ...  

directing him to wire $700,000 to a business the […] La entrada Deepfake attacks are inevitable. CISOs can’t prepare soon enough. – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Artificial Intelligence

Source: www.csoonline.com – Author: Threat Intelligence Platforms gibt es viele – doch wer die falsche auswählt, riskiert blinde Flecken statt eines umfassenden Schutzes. Mit STIX und TAXII werden Bedrohungsdaten nicht nur übertragen, sondern strategisch nutzbar gemacht. Gorodenkoff – shutterstock.com   show more ...  

Unternehmen, die der Flut von Sicherheitsverletzungen und Angriffen Einhalt gebieten wollen, schaffen sich in der Regel […] La entrada Top-Tipps für die erfolgreiche Nutzung von Bedrohungsdaten – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Wenn Identitäten zur Angriffsfläche werden, reicht Perimeter-Schutz nicht mehr aus. Der Schlüssel liegt im Zugriff – und in seiner Absicherung. Um sich vor Ransomware-Angriffen zu schützen, sollten Unternehmen ihre Logins absichern. Fit Ztudio – shutterstock.com   show more ...  

Ransomware bleibt eine der größten Gefahren für Unternehmen – trotz wachsender Investitionen in IT-Sicherheit. Die Ursache: […] La entrada So schützen Zugriffskontrollen vor Ransomware – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Fortinet has patched a critical security flaw that it said has been exploited as a zero-day in attacks targeting FortiVoice enterprise phone systems. The vulnerability, tracked as CVE-2025-32756, carries a CVSS score of 9.6 out of 10.0. “A stack-based overflow   show more ...  

vulnerability [CWE-121] in FortiVoice, FortiMail, FortiNDR, FortiRecorder, and FortiCamera may […] La entrada Fortinet Patches CVE-2025-32756 Zero-Day RCE Flaw Exploited in FortiVoice Systems – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Ivanti has released security updates to address two security flaws in Endpoint Manager Mobile (EPMM) software that have been chained in attacks to gain remote code execution. The vulnerabilities in question are listed below – CVE-2025-4427 (CVSS score: 5.3) – An   show more ...  

authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers […] La entrada Ivanti Patches EPMM Vulnerabilities Exploited for Remote Code Execution in Limited Attacks – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 #SophosLife

Source: news.sophos.com – Author: Editor #SophosLife CRN honors Sophos women whose channel expertise and vision are deserving of recognition. For the 14th consecutive year, numerous women from Sophos have been named to CRN’s prestigious Women of the Channel. This year we celebrated 19 recognitions across   show more ...  

regions, with two inclusions on the Power 100 list. This […] La entrada Nineteen Sophos Women Recognized by CRN’s Women of the Channel – Source: news.sophos.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 courts

Source: www.schneier.com – Author: Bruce Schneier HomeBlog Comments Clive Robinson • May 13, 2025 10:03 AM With regards, “I’m sure it’ll be appealed. Everything always is.” Not quite, but yeh it has to do with business indicators. Firstly that $167 million is not “real money” nor is the $444   show more ...  

million. And often delaying paying it […] La entrada Court Rules Against NSO Group – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: grahamcluley.com – Author: Graham Cluley Skip to content In episode 50 of The AI Fix, AI brings a slain man back from the dead so he can appear at his killer’s trial, Mark gets a mysterious phone call, Trump uses AI to become Pope Donald the First, Zuck ponders the nature of friendship, Apple   show more ...  

[…] La entrada The AI Fix #50: AI brings dead man back for killer’s trial, and the judge loves it – Source: grahamcluley.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.bitdefender.com – Author: Graham Cluley What do you do if you’re down on your luck? Maybe you struggled at school through no fault of your own. Perhaps you didn’t manage to get any formal qualifications which would help you in the career you’re interested in pursuing. Maybe your   show more ...  

relationship with your partner – who […] La entrada Two years’ jail for down-on-his-luck man who sold ransomware online – Source: www.bitdefender.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Brooke Seipel. Cory considers himself pretty cautious. But like millions of people juggling packed schedules, one click on a hectic day proved costly.  The message looked legit. It said it was from his phone provider. It claimed someone was trying to access his account and   show more ...  

urged him to verify via a […] La entrada Cory’s Scam Story: A Fake Text Nearly Took His Identity – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Brooke Seipel. Brittany C., a dedicated teacher, had been planning a special night for months. After saving up steadily, she landed four prized tickets to Taylor Swift’s Eras Tour for her and her closest friends.  But days before the show, she logged into her account—and   show more ...  

the tickets were gone.  “I’d been […] La entrada Brittany’s Scam Story: Eras Tour Chaos – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Brooke Seipel. Henry A. had been trying for weeks to score a ticket to see Tyler, the Creator in Dallas. Even without a confirmed seat, he headed to the venue hoping for a miracle. And that’s when the message came in—someone nearby claimed to have extra tickets.  The seller   show more ...  

said he […] La entrada Henry’s Scam Story: The Social Media Con – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Brooke Seipel. Bradley K. was a brand-new dad, sleep-deprived and juggling life with a newborn, when he received a phone call that would change everything. The caller claimed to be from the IRS and said Bradley owed back taxes. If he didn’t pay immediately, they warned, he   show more ...  

could be arrested.  Unfortunately, […] La entrada Bradley’s Scam Story: New Dad vs Fake IRS Call  – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.securityweek.com – Author: Ionut Arghire Ivanti on Tuesday announced patches for three vulnerabilities in its products, including two Endpoint Manager Mobile (EPMM) bugs that have been chained in the wild. The exploited zero-day flaws, tracked as CVE-2025-4427 (CVSS score of 5.3) and CVE-2025-4428   show more ...  

(CVSS score of 7.2), are described as an authentication bypass issue […] La entrada Ivanti Patches Two EPMM Zero-Days Exploited to Hack Customers – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.securityweek.com – Author: Marc Solomon I read a recent Google Intelligence Report which highlighted a case uncovered last year involving a single North Korean worker deploying at least 12 personae across Europe and the US. The IT worker was seeking jobs within the defense industry and government   show more ...  

sectors.  Using this new tactic, bogus IT […] La entrada Sharing Intelligence Beyond CTI Teams, Across Wider Functions and Departments – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.securityweek.com – Author: Ionut Arghire Enterprise software maker SAP on Tuesday released 16 new and two updated security notes as part of its May 2025 Security Patch Day. Two of the notes address critical vulnerabilities in NetWeaver exploited in the wild. The most severe is an update to a note   show more ...  

released on April 24 […] La entrada SAP Patches Another Exploited NetWeaver Vulnerability – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Samsung has released software updates to address a critical security flaw in MagicINFO 9 Server that has been actively exploited in the wild. The vulnerability, tracked as CVE-2025-4632 (CVSS score: 9.8), has been described as a path traversal flaw. “Improper   show more ...  

limitation of a pathname to a restricted directory vulnerability in […] La entrada Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BianLian

Source: thehackernews.com – Author: . At least two different cybercrime groups BianLian and RansomExx are said to have exploited a recently disclosed security flaw in SAP NetWeaver, indicating that multiple threat actors are taking advantage of the bug. Cybersecurity firm ReliaQuest, in a new update published   show more ...  

today, said it uncovered evidence suggesting involvement from the […] La entrada BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: thehackernews.com – Author: . A Chinese-language, Telegram-based marketplace called Xinbi Guarantee has facilitated no less than $8.4 billion in transactions since 2022, making it the second major black market to be exposed after HuiOne Guarantee. According to a report published by blockchain analytics   show more ...  

firm Elliptic, merchants on the marketplace have been found to peddle […] La entrada Xinbi Telegram Market Tied to $8.4B in Crypto Crime, Romance Scams, North Korea Laundering – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . A new global phishing threat called “Meta Mirage” has been uncovered, targeting businesses using Meta’s Business Suite. This campaign specifically aims at hijacking high-value accounts, including those managing advertising and official brand pages.   show more ...  

Cybersecurity researchers at CTM360 revealed that attackers behind Meta Mirage impersonate official Meta communications, tricking users into […] La entrada CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . A cyber espionage group known as Earth Ammit has been linked to two related but distinct campaigns from 2023 to 2024 targeting various entities in Taiwan and South Korea, including military, satellite, heavy industry, media, technology, software services, and healthcare   show more ...  

sectors. Cybersecurity firm Trend Micro said the first wave, codenamed […] La entrada Earth Ammit Breached Drone Supply Chains via ERP in VENOM, TIDRONE Campaigns – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Organizations across industries are experiencing significant escalations in cyberattacks, particularly targeting critical infrastructure providers and cloud-based enterprises. Verizon’s recently released 2025 Data Breach Investigations Report found an 18% YoY increase in   show more ...  

confirmed breaches, with the exploitation of vulnerabilities as an initial access step growing by 34%.  As attacks rise Original […] La entrada Learning How to Hack: Why Offensive Security Training Benefits Your Entire Security Team – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Cybersecurity researchers have discovered a new phishing campaign that’s being used to distribute malware called Horabot targeting Windows users in Latin American countries like Mexico, Guatemala, Colombia, Peru, Chile, and Argentina. The campaign is “using   show more ...  

crafted emails that impersonate invoices or financial documents to trick victims into opening malicious attachments […] La entrada Horabot Malware Targets 6 Latin American Nations Using Invoice-Themed Phishing Emails – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: thehackernews.com – Author: . Microsoft on Tuesday shipped fixes to address a total of 78 security flaws across its software lineup, including a set of five zero-days that have come under active exploitation in the wild. Of the 78 flaws resolved by the tech giant, 11 are rated Critical, 66 are rated   show more ...  

Important, and […] La entrada Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server – Source:thehackernews.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed   show more ...  

triggered the security solution. There are several actions […] La entrada Marks & Spencer Confirms Customer Data Stolen in Cyberattack – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Congress

Source: www.darkreading.com – Author: Greg Guice Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution.   show more ...  

There are several actions that could trigger this […] La entrada Congress Should Tackle Cyber Threats, Not Competition – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-05
Aggregator history
Wednesday, May 14
THU
FRI
SAT
SUN
MON
TUE
WED
MayJuneJuly