Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for US Charges Alleged R ...

 Cyber News

The U.S. Department of Justice has unsealed charges against Ukrainian national for administering the LockerGoga, MegaCortex, and Nefilim ransomware operations, while the Europol has placed him on the "Most Wanted" fugitives list. According to the DOJ, Volodymyr Viktorovich Tymoshchuk—known by aliases   show more ...  

including deadforz, Boba, msfv, and farnetwork—allegedly orchestrated ransomware campaigns between December 2018 and October 2021. His operations are accused of targeting more than 250 companies in the U.S. and hundreds more globally, including France, Germany, the Netherlands, Norway, and Switzerland. His ransomware operations caused severe business disruption, extensive data encryption and significant financial losses, the court filings noted. The DOJ says that Tymoshchuk and his associates tailored their ransomware payloads individually for each victim, enabling only unique decryption keys. Prosecutors further allege that when victims obtained decryptors for older ransomware versions, Tymoshchuk responded by deploying new variants. Authorities have also revealed that Artem Aleksandrovych Stryzhak, another Ukrainian associated with the Nefilim campaign, was likely a co-conspirator who was extradited from Spain earlier in May 2025. Read: Ukrainian Extradited to U.S. Over Global Ransomware Scheme Using Nefilim Strain Among the charges, Tymoshchuk faces conspiracy to commit fraud, intentional damage to protected computers, unauthorized computer access and transmitting threats to disclose confidential information. Europol Adds Tymoshchuk to Europe’s 'Most Wanted' In parallel, Europol has added Tymoshchuk to its Most Wanted fugitives list, offering up to $10 million for credible information about his whereabouts. The individual, a Ukrainian national, is believed to be a leading figure in an organised crime network responsible for the 2019 ransomware attack against a major Norwegian aluminium company, as well as a series of other global cyber-attacks," Europol said. Europol's reference was the March 18 attack, that year, on the Norwegian aluminium producer Norsk Hydro. "The fugitive is wanted by several countries and is considered a top priority target for international law enforcement." - Europol Law enforcement in Ukraine has already arrested part of the group, Europol said. Their probe shed light on the hierarchy, uncovering everyone’s role—those writing the malicious code, those executing the intrusions, and those washing the profits. "Those responsible for breaking into networks did so through techniques including brute force attacks, SQL injections and sending phishing emails with malicious attachments in order to steal usernames and passwords," Europol said, at the time. Once inside the networks, the attackers remained undetected and gained additional access using tools including TrickBot malware, Cobalt Strike and PowerShell Empire, in order to compromise as many systems as possible before triggering ransomware attacks. The U.S. State Department’s Transnational Organized Crime Rewards Program is separately offering up to $11 million for information that leads to Tymoshchuk’s location, arrest, or conviction.

image for Apple Introduces Mem ...

 Cyber News

Apple has introduced Memory Integrity Enforcement (MIE), a system-wide security feature designed to crush one of the most persistent threats to iPhone users—that of Spyware. The company describes MIE as “the most significant upgrade to memory safety in the history of consumer operating systems.” Built on years   show more ...  

of hardware and software co-design, it combines enhanced silicon protections in the A19 chip family with new allocator designs and language-level safeguards. The result is what it calls a first-of-its-kind, always-on defense intended to disrupt the exploit chains mercenary spyware vendors rely on. Closing the Memory Safety Gap Memory corruption remains a core technique in high-end attacks, be it supply chain or spyware. Exploits such as buffer overflows and use-after-free bugs allow attackers to hijack execution flow, inject malicious payloads and bypass sandboxing. While iPhones have not faced malware outbreaks, Apple has acknowledged time and again that sophisticated spyware continues to target high-value users, often through these vulnerabilities. Central to MIE’s innovation is Enhanced Memory Tagging Extension (EMTE). This is Apple’s refined version of ARM’s Memory Tagging Extension specification. In EMTE, each small block of memory is assigned a random “allocation tag,” and every pointer referencing that memory carries a corresponding “pointer tag.” On every load or store, the CPU checks the two. If they don’t match, the process crashes immediately. This transforms many subtle memory corruption bugs into outright failures, breaking exploit reliability. Unlike ARM’s original implementation, Apple’s EMTE enforces synchronous, always-on checking. That means a mismatch is caught the instant it occurs, closing race conditions where asynchronous checks could be bypassed. Software-Hardware Co-Design MIE goes beyond tagging. Apple in it its blogpost said it integrated MIE with type-aware allocators—kalloc_type for kernel memory and xzone malloc for userland—that compartmentalize objects by type. This reduces the chance that a dangling pointer from one object type will validly reference another. Together with Apple’s memory-safe language Swift, these changes raise the baseline of memory safety across the platform. A novel addition is Tag Confidentiality Enforcement, a mechanism that prevents tags from leaking through side channels or speculative execution attacks. This matters because allocation tags are low entropy—commonly four bits—and without confidentiality, attackers could probe or brute-force their way into bypassing protections. Apple tested MIE against real-world spyware exploit chains observed over the past several years. According to the company, the system consistently blocked primitive bugs, forcing exploit developers to rethink entire chains instead of swapping in new memory vulnerabilities. A persistent challenge in memory tagging is balancing security with performance. Apple claims the A19 and A19 Pro chips were architected to support EMTE at scale, allowing synchronous checks to run with negligible performance cost. Early reports suggest that user-facing impact is minimal, though independent benchmarks will provide a clearer picture. Apple's MIE vs Android’s MTE Apple is not the first to deploy memory tagging. Google introduced MTE support with the Pixel 8 in 2023, and the security-focused GrapheneOS project deployed it in production about a month after the Pixel 8 launch. According to GrapheneOS developers, MTE has been running in the kernel and nearly the entire base OS, with support extending to some third-party apps. Users can also opt-in to system-wide enforcement. Android supports both synchronous and asynchronous modes, with many devices opting for asynchronous checks to reduce performance overhead. That choice, while practical, introduces race conditions that attackers can exploit. MTE on Android has also largely been per-app or developer opt-in, leading to fragmented adoption across the ecosystem, Apple argues. Some Pixel devices expose stronger “Advanced Protection” options, but system-wide enforcement remains inconsistent. While Apple frames MIE as a step-change innovation, GrapheneOS notes ARM’s baseline MTE was already considered a “game changer” in memory safety by the Android ecosystem. The technology has also gone through several revisions, with FEAT_MTE4 marking the fourth generation of improvements. These revisions aim to address known side-channel leakage issues, which have been a research focus for ARM engineers. However, in contrast, Apple’s MIE is system-wide by default. It protects the kernel and more than 70 userland processes, regardless of whether developers explicitly enable it. Combined with type-aware allocators and tag confidentiality, it closes gaps researchers have identified in baseline MTE deployments, such as tag reuse and side-channel leakage. GrapheneOS developers argue that Apple’s criticism of MTE’s early side-channel limitations overlooks Apple’s own track record. Apple’s chips, they note, have suffered from more severe side-channel vulnerabilities than ARM’s Cortex cores, often leaking user data directly. In their view, downplaying those issues while pointing to MTE’s side-channel concerns amounts to selective framing. Raising the Cost of Exploitation Apple’s move shows shifting tides. A move away from patching individual bugs to systemic resilience. With MIE, many classes of memory corruption bugs become dead ends rather than viable exploit primitives. That doesn’t eliminate memory safety issues outright—tags are still low entropy and creative attackers may find ways to bypass confidentiality—but it dramatically increases the cost of exploitation. For organizations tracking mercenary spyware or nation-state threats, MIE and MTE signals a harder environment for adversaries to weaponize iOS and Android vulnerabilities. As Apple rolls MIE into every new device running on the A19 family, which are now going to be seen in the latest iPhone 17 devices and beyond, spyware developers may not be out of work, but their job just got much harder. Also read: Apple Patches Flaw Exploited in Zero-click Paragon Spyware Attacks

image for Adobe Issues Urgent ...

 Firewall Daily

Adobe has issued an urgent security advisory, specifically for CVE-2025-54236, also known as SessionReaper, affecting Adobe Commerce and Magento Open-Source platforms. This flaw has been assigned a CVSS score of 9.1 out of 10, indicating a severe security risk that could lead to unauthorized access and full compromise   show more ...  

of customer accounts via the Commerce REST API.  What is CVE-2025-54236?  CVE-2025-54236 is classified as an improper input validation vulnerability. According to Adobe’s official advisory, a malicious actor could exploit this bug by interacting with the Commerce REST API, potentially taking full control of customer accounts. Although no active exploitation has been detected in the wild, Adobe has emphasized the critical nature of the vulnerability and urged users to apply the necessary security patches immediately.  “A potential attacker could take over customer accounts in Adobe Commerce through the Commerce REST API,” Adobe stated in its advisory (APSB25-88).  Affected Products and Versions  The vulnerability impacts several versions of Adobe Commerce, Adobe Commerce B2B, and Magento Open Source, including but not limited to:  Adobe Commerce: Versions 2.4.9-alpha2 and earlier  Magento Open Source: Versions 2.4.9-alpha2 and earlier  Adobe Commerce B2B: Versions 1.5.3-alpha2 and earlier  Custom Attributes Serializable module: Versions 0.1.0 to 0.4.0  A detailed list of affected patch levels is included in Adobe’s security bulletin.  The Patch: VULN-32437-2-4-X  To address the vulnerability, Adobe has released a hotfix identified as VULN-32437-2-4-X-patch, which directly mitigates CVE-2025-54236. Users are strongly advised to implement this fix without delay. Failure to do so may leave systems exposed, and Adobe has noted that its ability to provide remediation support will be limited if the patch is not applied.  For those using the Custom Attributes Serializable module (versions 0.1.0 - 0.3.0), an update to version 0.4.0 or later is required. This can be done using the following Composer command:  composer require magento/out-of-process-custom-attributes=0.4.0 --with-dependencies  Protection for Cloud and Managed Services Users  For users hosted on Adobe Commerce Cloud infrastructure, Adobe has deployed Web Application Firewall (WAF) rules to block potential exploitation attempts. Additionally, those on Managed Services can seek guidance from their Customer Success Engineer for help in applying the fix.  However, it is important to note that the presence of WAF rules does not eliminate the need to apply the patch. These rules are meant as a temporary mitigation layer, not a permanent solution.  Verifying the Patch  Adobe recommends using the Quality Patches Tool to verify whether the patch has been successfully applied. For example, to check if a given patch, such as VULN-27015-2.4.7_COMPOSER.patch has been installed, users can run the following command:  vendor/bin/magento-patches -n status | grep "27015|Status"  This will return an "Applied" status if the patch is active, offering peace of mind for administrators who need to confirm the remediation.  The vulnerability was reported to Adobe by an independent security researcher named blaklis. While there is no evidence that SessionReaper (CVE-2025-54236) has been weaponized yet, its potential impact on e-commerce businesses is considerable.  Urgent Call to Action  Given the widespread use of Adobe Commerce and Magento Open Source platforms in the e-commerce ecosystem, the discovery of SessionReaper should not be taken lightly. Organizations using any of the affected versions must:  Apply the VULN-32437-2-4-X-patch immediately.  Update the Custom Attributes Serializable module to 0.4.0 or higher.  Confirm patch application using Adobe’s recommended tools.  Consult Adobe support or Customer Success Engineers for guidance if needed.  Adobe has made the latest security updates available through its official security bulletin, where users can find detailed patch instructions and support resources. 

 Government

FlexiSPY, which is commercially available, can be more easily detected than far more expensive mercenary spyware available to nation states but has similar capabilities once installed, said John Scott-Railton, a forensic researcher at The Citizen Lab who helped confirm the infection.

 Cybercrime

The role American investors are playing in propping up spyware vendors is notable given the aggressive actions the U.S. government has taken to rein in the sector, including through sanctions, entity listings and visa restrictions.

 Feed

Adobe has warned of a critical security flaw in its Commerce and Magento Open Source platforms that, if successfully exploited, could allow attackers to take control of customer accounts. The vulnerability, tracked as CVE-2025-54236 (aka SessionReaper), carries a CVSS score of 9.1 out of a maximum of 10.0. It has been described as an improper input validation flaw. Adobe said it's not aware of

 Feed

SAP on Tuesday released security updates to address multiple security flaws, including three critical vulnerabilities in SAP Netweaver that could result in code execution and the upload arbitrary files. The vulnerabilities are listed below - CVE-2025-42944 (CVSS score: 10.0) - A deserialization vulnerability in SAP NetWeaver that could allow an unauthenticated attacker to submit a malicious

 Feed

The House Select Committee on China has formally issued an advisory warning of an "ongoing" series of highly targeted cyber espionage campaigns linked to the People's Republic of China (PRC) amid contentious U.S.–China trade talks. "These campaigns seek to compromise organizations and individuals involved in U.S.-China trade policy and diplomacy, including U.S. government agencies, U.S. business

 Feed

Introduction Managed service providers (MSPs) and managed security service providers (MSSPs) are under increasing pressure to deliver strong cybersecurity outcomes in a landscape marked by rising threats and evolving compliance requirements. At the same time, clients want better protection without managing cybersecurity themselves. Service providers must balance these growing demands with the

 Feed

Phishing-as-a-Service (PhaaS) platforms keep evolving, giving attackers faster and cheaper ways to break into corporate accounts. Now, researchers at ANY.RUN has uncovered a new entrant: Salty2FA, a phishing kit designed to bypass multiple two-factor authentication methods and slip past traditional defenses.  Already spotted in campaigns across the US and EU, Salty2FA puts enterprises at

 Feed

Microsoft on Tuesday addressed a set of 80 security flaws in its software, including one vulnerability that has been disclosed as publicly known at the time of release. Of the 80 vulnerabilities, eight are rated Critical and 72 are rated Important in severity. None of the shortcomings has been exploited in the wild as a zero-day. Like last month, 38 of the disclosed flaws are related to

 Feed

Apple on Tuesday revealed a new security feature called Memory Integrity Enforcement (MIE) that's built into its newly introduced iPhone models, including iPhone 17 and iPhone Air. MIE, per the tech giant, offers "always-on memory safety protection" across critical attack surfaces such as the kernel and over 70 userland processes without sacrificing device performance by designing its A19 and

 Feed

An advanced persistent threat (APT) group from China has been attributed to the compromise of a Philippines-based military company using a previously undocumented fileless malware framework called EggStreme. "This multi-stage toolset achieves persistent, low-profile espionage by injecting malicious code directly into memory and leveraging DLL sideloading to execute payloads," Bitdefender

 Feed

Cybersecurity researchers have discovered two new malware families, including a modular Apple macOS backdoor called CHILLYHELL and a Go-based remote access trojan (RAT) named ZynorRAT that can target both Windows and Linux systems. According to an analysis from Jamf Threat Labs, ChillyHell is written in C++ and is developed for Intel architectures. CHILLYHELL is the name assigned to a malware

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons During the two-hour window on Monday in which hijacked npm versions were available for download, malware-laced packages reached one in 10 cloud environments, according to Wiz researchers. But crypto-craving crims did little more than annoy defenders. As of   show more ...  

Tuesday, the supply-chain attack remains active, and its scope extends beyond […] La entrada More packages poisoned in npm attack, but would-be crypto thieves left pocket change – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Brandon Vigliarolo It’s about to get a lot harder for private companies that are lax on cybersecurity to get a contract with the Pentagon, as the Defense Department has finalized a rule requiring contractor compliance with its Cybersecurity Maturity Model Certification   show more ...  

(CMMC) program. The final rule, which was released as a […] La entrada New cybersecurity rules land for Defense Department contractors – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons The US Department of Defense, up until this week, routinely left its social media accounts wide open to hijackers via stream keys – unique, confidential identifiers generated by streaming platforms for broadcasting content. If exposed, these keys can   show more ...  

allow attackers to output anything they want from someone else’s channel. […] La entrada Defense Dept didn’t protect social media accounts, left stream keys out in public – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons Exclusive Sensitive info from hundreds of thousands of gym customers and staff – including names, financial details, and potentially biometric data in the form of audio recordings – was left sitting in an unencrypted, non-password protected database,   show more ...  

according to a security researcher who shut it down. Leaky database hunter […] La entrada No gains, just pains as 1.6M fitness phone call recordings exposed online – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Connor Jones Streaming platform Plex is warning some users to reset their passwords after suffering yet another breach. The popular media server provider, which people definitely use only for legitimately downloaded content, said in an email to customers, seen by The   show more ...  

Register, that emails, usernames, and securely-hashed passwords were potentially stolen. […] La entrada What the Plex? Streaming service suffers yet another password spill – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Dan Robinson Finnish phone maker HMD Global is launching a business unit called HMD Secure to target governments and other security-critical customers, and has its first device ready to go. Feature phones all the rage as parents try to shield kids from harm READ MORE HMD, or   show more ...  

Human Mobile Devices, is […] La entrada Nokia successor HMD spawns secure device biz with Euro-made smartphone – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Anthropic's

Source: go.theregister.com – Author: Tim Anderson App security outfit Checkmarx says automated reviews in Anthropic’s Claude Code can catch some bugs but miss others – and sometimes create new risks by executing code while testing it. Anthropic introduced automated security reviews in Claude Code last   show more ...  

month, promising to ensure that “no code reaches production without […] La entrada Anthropic’s Claude Code runs code to test if it is safe – which might be a big mistake – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Lindsay Clark Tech companies will be legally required to prevent content involving self-harm from appearing on their platforms – rather than responding and removing it – in a planned amendment to the UK’s controversial Online Safety Act. The UK Online Safety Act is   show more ...  

about censorship, not safety READ MORE The move […] La entrada UK toughens Online Safety Act with ban on self-harm content – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Iain Thomson Encrypted messaging app Signal is rolling out a free storage system for its users, with extra space if folks are willing to pay for it. The company will gift all users 100MB of free storage for images, video, GIFs and other media from the prior 45 days of use.   show more ...  

[…] La entrada Forget disappearing messages – now Signal will store 100MB of them for you for free – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: www.cyberdefensemagazine.com – Author: Gary Identity’s New Frontier: How CISOs Can Navigate the Complex Landscape of Modern Access Management The cybersecurity battlefield has shifted. No longer are perimeter defenses and traditional identity management sufficient to protect complex digital ecosystems.   show more ...  

Today’s CISOs face an unprecedented challenge: managing identity across hybrid environments, emerging technologies, and increasingly sophisticated […] La entrada Innovator Spotlight: Oleria – Source: www.cyberdefensemagazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Adobe

Source: www.securityweek.com – Author: Eduard Kovacs Adobe has patched nearly two dozen vulnerabilities across nine of its products with its September 2025 Patch Tuesday updates, including critical flaws in ColdFusion and Commerce. The critical ColdFusion vulnerability, tracked as CVE-2025-54261 with a CVSS   show more ...  

score of 9.0, has been described as a path traversal issue that can […] La entrada Adobe Patches Critical ColdFusion and Commerce Vulnerabilities – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 botnet

Source: www.securityweek.com – Author: Ionut Arghire Threat actors are exploiting exposed Docker APIs to deploy malware and cryptocurrency miners and potentially create a new botnet, Akamai’s security researchers warn. Initially detailed by Trend Micro in June, the attacks start with a request to the exposed   show more ...  

API to retrieve a list of containers, followed by the […] La entrada Exposed Docker APIs Likely Exploited to Build Botnet – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Acquisition

Source: www.securityweek.com – Author: Eduard Kovacs Industrial and technology giant Mitsubishi Electric has signed a definitive agreement to acquire OT and IoT cybersecurity company Nozomi Networks in a deal that values the industrial cybersecurity firm at nearly $1 billion. Mitsubishi Electric will acquire   show more ...  

the Nozomi Networks shares it does not already own for $883 million […] La entrada Mitsubishi Electric to Acquire Nozomi Networks for Nearly $1 Billion – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Robert Lemos, Contributing Writer Firms cooperating with cybercrime syndicates in Burma and Cambodia face sanctions by the US government and enforcement actions by China, but the scams continue to grow. Original Post URL: https://www.darkreading.   show more ...  

com/cyber-risk/southeast-asian-scam-centers-financial-sanctions Category & Tags: – Views: 0 La entrada Southeast Asian Scam Centers Face More Financial Sanctions – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Nearly half the CVEs Microsoft disclosed in its September security update, including one publicly known bug, enable escalation of privileges. Original Post URL: https://www.darkreading.   show more ...  

com/application-security/eop-flaws-again-lead-microsoft-patch-day Category & Tags: – Views: 0 La entrada EoP Flaws Again Lead Microsoft Patch Day – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 browser

Source: www.darkreading.com – Author: Arielle Waldman While the jury is still out, it’s clear that use has skyrocketed and security needs to align. Original Post URL: https://www.darkreading.com/endpoint-security/browser-becoming-new-endpoint Category & Tags: – Views: 0 La entrada Is the   show more ...  

Browser Becoming the New Endpoint? – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek The data breach, which occurred earlier this year, saw threat actors compromise a third-party platform to obtain Qantas customers’ personal information. Original Post URL: https://www.darkreading.   show more ...  

com/cyberattacks-data-breaches/qantas-reduces-executive-pay-cyberattack Category & Tags: – Views: 0 La entrada Qantas Reduces Executive Pay Following Cyberattack – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Alexander Culafi Threat actors phished Qix’s NPM account, then used their access to publish poisoned versions of 18 popular open source packages accounting for more than 2 billion weekly downloads. Original Post URL: https://www.darkreading.   show more ...  

com/application-security/huge-npm-supply-chain-attack-whimper Category & Tags: – Views: 0 La entrada Huge NPM Supply Chain Attack Goes Out With Whimper – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Cybercriminal operations use the same strategy and planning as legitimate organizations as they arm adversarial phishing kits with advanced features. Original Post URL: https://www.darkreading.   show more ...  

com/cyberattacks-data-breaches/salty2fa-phishing-kits-enterprise-level Category & Tags: – Views: 0 La entrada Salty2FA Takes Phishing Kits to Enterprise Level – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 ADR

Source: securityboulevard.com – Author: Naomi Buckwalter Contrast customers get certainty in moments when everyone else is guessing. When a code dependency supply-chain attack hits, they do not waste hours asking if they might be exposed. They know immediately whether their applications are running compromised   show more ...  

code, and they can act with confidence. The post How ADR […] La entrada How ADR Secures Against NPM Supply Chain Attacks | Application Detection and Response | Contrast Security – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: levelblue.com – Author: hello@alienvault.com. Fileless malware continues to evade modern defenses due to its stealthy nature and reliance on legitimate system tools for execution. This approach bypasses traditional disk-based detection by operating in memory, making these threats harder to detect,   show more ...  

analyze, and eradicate. A recent incident culminated in the deployment of AsyncRAT, a powerful […] La entrada AsyncRAT in Action: Fileless Malware Techniques and Analysis of a Remote Access Trojan – Source:levelblue.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Blog

Source: socprime.com – Author: Daryna Olyniychuk Phishing is widely recognized as a prevalent method of executing social engineering attacks. Defenders have recently identified a highly targeted phishing campaign that delivers the MostereRAT to infiltrate Windows devices. Adversaries take advantage of advanced   show more ...  

detection evasion techniques and social engineering, as well as abuse legitimate remote access software, […] La entrada MostereRAT Detection: Attackers Abuse AnyDesk and TightVNC for Persistent Access on Windows Systems – Source: socprime.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini September 10, 2025 Pixel 10 adds C2PA to camera and Photos, helping users verify authenticity and spot AI-generated or altered images. Pixel 10 integrates C2PA Content Credentials into the camera and Photos, allowing users to verify   show more ...  

whether images are real or AI-generated, or edited. The company announced […] La entrada Google Pixel 10 adds C2PA to camera and Photos to spot AI-generated or edited images – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Brazil

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini September 10, 2025 KillSec Ransomware claimed responsibility for a cyberattack on MedicSolution, a software solutions provider for the healthcare industry in Brazil. The KillSec Ransomware group has threatened to leak sensitive data   show more ...  

unless negotiations are initiated promptly. According to threat intelligence reporting by Resecurity, the root cause […] La entrada KillSec Ransomware is Attacking Healthcare Institutions in Brazil – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini September 10, 2025 Microsoft Patch Tuesday security updates for September 2025 fixed 80 vulnerabilities, including two publicly disclosed zero-day flaws. Microsoft Patch Tuesday security updates for September 2025 addressed 80   show more ...  

vulnerabilities in Windows and Windows Components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, Hyper-V, SQL Server, […] La entrada Microsoft Patch Tuesday security updates for September 2025 fixed two zero-day flaws – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini September 09, 2025 SAP issues 21 new and 4 updated security notes, fixing critical NetWeaver flaws enabling RCE and privilege escalation. SAP this week issued 21 new and four updated security notes as part of the company’s September   show more ...  

Patch Day, including four notes that address critical vulnerabilities […] La entrada SAP September 2025 Patch Day fixed 4 critical flaws – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.techrepublic.com – Author: J.R. Johnivan We may earn from vendors via affiliate links or sponsorships. This might affect product placement on our site, but not the content of our reviews. See our Terms of Use for details. An attack targeting the Node.js ecosystem was just identified — but not   show more ...  

before it compromised 18 npm […] La entrada Malware Injected Into Code Packages That Get 2 Billion+ Downloads Each Week – Source: www.techrepublic.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple

Source: go.theregister.com – Author: Jessica Lyons ChillyHell, a modular macOS backdoor believed to be long dormant, has likely been infecting computers for years while flying under the radar, according to security researchers who spotted a malware sample uploaded to VirusTotal in May. The malware, written in   show more ...  

C++ and developed for Intel architectures, was originally reported […] La entrada Apple slips up on ChillyHell macOS malware, lets it past security . . . for 4 years – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Paul Kunert Jaguar Land Rover (JLR) says “some data” was affected after the luxury car maker suffered a digital break-in early last week. Cybercrooks ripped the wheels off at Jaguar Land Rover. Here’s how not to get taken for a ride READ MORE The Tata-owned   show more ...  

automaker said on September 2 it […] La entrada Jaguar Land Rover U-turns to confirm ‘some data’ affected after cyber prang – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Connor Jones A Ukrainian national faces serious federal charges and an $11 million bounty after allegedly orchestrating ransomware operations that caused an estimated $18 billion in damages across hundreds of organizations worldwide. Authorities have accused Volodymyr   show more ...  

Tymoshchuk, 28, of masterminding three major ransomware operations — LockerGoga, MegaCortex, and Nefilim —that terrorized […] La entrada Uncle Sam indicts alleged ransomware kingpin tied to $18B in damages – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-09
Aggregator history
Wednesday, September 10
MON
TUE
WED
THU
FRI
SAT
SUN
September