Daily News - Fevereiro (02/02 - 08/02) - 06 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

08/02

CISA Warns of Trimble Cityworks RCE Vulnerability Exploited to Hack IIS Servers

Fota Wildlife Park cyber-attack - 'very convincing' scammers calling people across Cork

Hewlett Packard Enterprise (HPE) Alerts Employees of Data Breach After Russian Cyberattack on Office 365

Huge healthcare data breach exposes over 1 million Americans' sensitive information

Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection

Massive brute force attack uses 2.8 million IPs to target VPN devices

Most Sophisticated Gmail Attacks Ever—FBI Says: Do Not Click Anything

Phantom Wallet Users Targeted by Phishing Scam Amid Rising Popularity

Police warn of terrifying one-step scam that allows a hacker into your phone within seconds

Teen Hacker “Natohub” Caught for NATO, UN, and US Army Breaches

07/02

59% insurance sector breaches caused by third parties

3,000 exposed ASP.NET keys could perform code injection attacks

7,000 Exposed Ollama APIs Leave DeepSeek AI Models Wide Open to Attack

A Threat Actor Claims to be Selling Data of an Unidentified Italian Retail Company

A Threat Actor Claims to be Selling Iran Citizens Data

A Threat Actor Claims to be Selling U.S. Credit Card Data

AI-Powered Social Engineering: Reinvented Threats

Amazon shares drop as cloud growth, sales forecast lag

Anonymous KSA Targeted the Website of Lebanese Ministry of Agriculture

Arikos is Allegedly Selling Lantiqx IT Services Data

Attackers compromise IIS servers by leveraging exposed ASP.NET machine keys

Attackers used a public ASP.NET machine to conduct ViewState code injection attacks

Bank Central Asia (BCA) denies allegations of customer data breach following cyberattack claims

Best Practices for Preparing and Automating Security Questionnaires

BianLian ransomware group claims hack of Sydney-based Hall Chadwick

‘Big Game’ Ransomware Tactics Drives Spike in Attacks

ChatGPT users warned 20M OpenAI account logins up for sale on hacker forum

CIOs and CISOs grapple with DORA: Key challenges, compliance complexities

CISA Warns of Active Exploits Targeting Trimble Cityworks Vulnerability

Cloudflare outage caused by botched blocking of phishing URL

CVE-2024-39713: Rocket.Chat SSRF PoC

Cyb3r Drag0nz Targeted the Website of Gubad Talabani

Cybercriminals Weaponize Graphics Files in Phishing Attacks

DeepSeek AI app should be banned from US government devices, lawmakers say

DeepSeek App Transmits Sensitive User and Device Data Without Encryption

DeepSeek iOS App Sending Data Unencrypted to ByteDance Controlled Server

Dell Update Manager Plugin Vulnerability Let Hackers Access Sensitive Data

Developers Beware! Malicious ML Models Detected on Hugging Face Platform

DXPLOIT Defaced the Website of Global Bonds

Erro humano derrubou ontem serviços da Cloudflare

Ex-Google Engineer Charged for Stealing AI Secrets to China

Facebook copyright infringement scam reinvents itself

Full Exposure: A Practical Approach to Handling Sensitive Data Leaks

Ghidra 11.3 released: New features, performance improvements, bug fixes

Google is ramping up Android security protection with new Android app safety tools

Hackers Attacking Web Login Pages of Popular Firewalls for Brute-Force Attacks

Hackers exploit Cityworks RCE bug to breach Microsoft IIS servers

Hackers Exploited 3,000+ ASP.NET Keys To Execute Code on IIS Server Remotely

Hackers Exploiting DeepSeek & Qwen AI Models To Develop Malware

Hackers Exploiting SimpleHelp RMM Flaws for Persistent Access and Ransomware

Hackers Exploiting SimpleHelp Vulnerabilities to Deploy Malware on Systems

Hackers Leveraging Image & Video Attachments to Deliver Malware

Hewlett Packard Enterprise (HPE) notifies employees of data breach after Russian Office 365 hack

Hospital Sisters Health System impacted 882,782 individuals

How to use Tor to privately browse the web - it's easier than you think

HPE Aruba Networking ClearPass Policy Manager Vulnerabilities Allow Arbitrary Code Execution

IMI confirms hack, becomes latest engineering giant to face cyberattack

India's RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud

Infosec pros struggle under growing compliance

Instagram, Netflix, PayPal users think this privacy feature is stupid, do you agree?

Logsign Vulnerability Remote Attackers to Bypass Authentication

Malicious AI models infiltrating Hugging Face via ‘bad Pickles’

Malicious AI Models on Hugging Face Exploit Novel Attack Technique

Meta leeched 82 terabytes of pirated books to train its Llama AI, documents reveal

Meta Trained Its Llama AI Models Using 81.7 TB of Books Stolen From Torrent Shadow Libraries

Microsoft Edge update adds AI-powered Scareware Blocker

Microsoft Edge Vulnerabilities Let Attackers Execute Remote Code – Update Now!

Microsoft has finally fixed Date & Time bug in Windows 11

Microsoft Identifies 3,000 Leaked ASP.NET Keys Enabling Code Injection Attacks

Microsoft shares workaround for Windows security update issues

Most UK GDPR Enforcement Actions Targeted Public Sector in 2024

New Attack Technique Uncovered Abusing Kerberos Delegation in Active Directory Networks

New Facebook Fake Copyright Notices Phishing Steals Your FB Credentials

New Scareware Attack Targeting Mobile Users to Deploy Malicious Antivirus Apps

Overconfident execs are making their companies vulnerable to fraud

Paris prosecutors probing Musk's X over alleged algorithmic distortions - Franceinfo

Privacy and security flaws found in DeepSeek iOS mobile app

Self-sovereign identity could transform fraud prevention, but…

SkyWave is Allegedly Selling Bank Central Asia (BCA) Account Access and Database

Sorb is Allegedly Selling the Data of Vision IAS

Spanish authorities arrest prolific hacker

Spanish authorities arrest suspected cybercriminal linked to government and military data breaches

Splunk Unveils a New AI Based Honeypot “DECEIVE” to Log Attacker Activities

SVG files are offering cybercriminals an easy way in with new phishing attacks

Taiwan’s DeepSeek Ban Reflects Global Concerns Over AI Security

The industry speaks: Aussie government DeepSeek ban

Third-Party Risk Management Failures Expose UK Finance Sector

Treasury Limits DOGE Staff Access to Payment Systems Amid Controversy

UK Govt Orders Apple to Create Backdoor Access for Encrypted iCloud Backups

US government warns users to patch this critical Microsoft Outlook bug

US health system notifies 882,000 patients of August 2023 breach

Western Sydney-based Heart Centre falls victim to alleged ransomware attack

Why US companies need to take NIS2 seriously

06/02

3 Best Ways to Speed Up Alert Triage for SOC Team – Use Cases

21% of CISOs pressured to not report compliance issues

Anthropic offers $20,000 to whoever can jailbreak its new AI safety system

Arab Civil Aviation Organization hit by cyberattack, sensitive data stolen in latest aviation sector breach

Ataques cibernéticos à área da saúde crescem; hackers podem alterar até resultados de exames

Authorities Arrested Hacker Who Compromised 40+ Organizations

Best ransomware protection of 2025

Beware of Lazarus LinkedIn Recruiting Scam Targeting Org's To Deliver Malware

Beware of Nova Stealer Malware Sold for $50 on Hacking Forums

Brasileiro desenvolve ferramenta de IA que detecta e previne ataque hacker

British engineering firm IMI discloses breach, shares no details

Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc

Cisco patches critical security issues, so update now

Critical Cisco ISE bug can let attackers run commands as root

Critical Cisco ISE Vulnerabilities Allow Arbitrary Command Execution Remotely

Critical RCE bug in Microsoft Outlook now exploited in attacks

DDoS attacks reportedly behind DayZ and Arma network outages

DeepSeek-R1 LLM Fails Over Half of Jailbreak Attacks in Security Analysis

DeepSeek's Exposes Full System Prompt in New Jailbreak Method

Deloitte to pay $5 million to Rhode Island following ransomware attack

Enterprises invest heavily in AI-powered solutions

Europol Cracks Down on Global Child Abuse Network “The Com”

F5 BIG-IP SNMP Vulnerability Let Attackers Trigger DoS Attack on System

Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking

Flesh Stealer Malware Targets Chrome, Firefox, and Edge to Steal Passwords

Grubhub breach exposed customer data. Should you be worried?

Hacker russo vende senhas de 20 milhões de usuários do ChatGPT

Hackers exploit SimpleHelp RMM flaws to deploy Sliver malware

Hackers Exploiting ScreenConnect RMM Tool to Establish Persistence

Hail and Rapper Botnet is the Mastermind Behind the DeepSeek Cyberattack

How to customize Safari for private browsing on iOS

Lazarus Group Targets Bitdefender Researcher with LinkedIn Recruiting Scam

Let’s Encrypt halts expiration alerts - but it's for a good reason

Meet the Top 100 Cybersecurity Leaders in Australia & New Zealand

Microsoft authentication system spoofed via phishing attack

MobSF Framework Zero-day Vulnerability Let Attackers Trigger Dos in Scans Results

Multiple Vulnerabilities in Cisco SNMP for IOS Software Let Attackers Trigger DoS Attack

NCSC Issues Guidance to Protect UK Research and Innovation

New Malware Attacking Users of Indian Banks To Steal Aadhar, PAN, ATM & Credit Card PINs

New UK Cyber Monitoring Centre Introduces 'Richter Scale' for Cyber-Attacks

North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials

North Korean Hackers Use Custom-Made RDP Wrapper To Activate Remote Desktop on Hacked Machines

OpenAI Data Breach: Threat Actor Allegedly Claims 20 Million Logins for Sale

Over 5 billion accounts breached in 2024, China emerges as top target

Paragon spyware cancels contract with Italian government after targeting journalists and citizens across Europe

Password Stealing Malware Attacking macOS Users Increasing Rapidly

Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023

Ransomware payments plummet as more victims refuse to pay

Russia's Sberbank plans joint AI research with China as DeepSeek leaps forward

SmokeLoader Malware Exploits 7-Zip Flaw to Target Ukrainian Industries

Spanish Police Arrest Suspected NATO and US Army Hacker

SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images

Stop treating core security features like SSO as premium luxuries

Suspected NATO, UN, US Army hacker arrested in Spain

The cloud is not your only option: on-prem security still alive and well in Windows Server 2025

The Evolving Role of PAM in Cybersecurity Leadership Agendas for 2025

The future of cybersecurity: Innovation, leadership and emerging threats

The Impact of Cybersecurity on Game Development

The overlooked risks of poor data hygiene in AI-driven organizations

Threat Actors Offer You Free Google Play, Amazon Gift Card From 100s of Malicious Domains to Steal Data

Top 3 Ransomware Threats Active in 2025

Trump Hotels allegedly breached by a little-known BreachForums user

Ukraine’s largest bank PrivatBank Targeted with SmokeLoader malware

Veeam backup software has a serious security flaw - here's how to stay safe

XE Hacker Group Exploiting Veracode 0-Days To Deploy Malware & Steal Credit Card Details

Zyxel says it won’t patch security flaws in its old routers

Weaponized SVG Files With Google Drive Links Attacking Gmail, Outlook & Dropbox Users

Weaponizing Windows Background Images to Gain Admin Access Using AnyDesk Vulnerability

WhatsApp Zero-Click Paragon Spyware Terminates Contract with Italy

Why rebooting your phone daily is your best defense against zero-click hackers

WordPress ASE Plugin Vulnerability Threatens Site Security

Your Netgear Wi-Fi router could be wide open to hackers - install the fix now

05/02

0-Day Vulnerabilities in Microsoft Sysinternals Tools Allow Attackers To Launch DLL Injection Attacks on Windows

5 great Chrome-like browsers that put your privacy first

A Threat Actor Claims to be Selling 7,687,248 Records from Waze

A Threat Actor Claims to be Selling Access to an Unidentified Commercial and Residential Construction Organization in Taiwan

A Threat Actor Claims to be Selling Alteka Consulting Ltd

AMD fixes bug that lets hackers load malicious microcode patches

AMD SEV Vulnerability Allows Malicious CPU Microcode Injection as Admin

Apple’s macOS Kernel Vulnerability Let Attackers Escalate Privileges – PoC Released

AsyncRAT Campaign Uses Python Payloads and TryCloudflare Tunnels for Stealth Attacks

Chinese Hackers Attacking Linux Devices With New SSH Backdoor

Chrome Use-After-Free Vulnerabilities Let Attackers Execute Remote Code – Update Now

CISA Adds Actively Exploited Linux Kernel Vulnerability to Known Exploited Vuln Catalog

CISA Adds Apache, Microsoft Vulnerabilities to Its Database that Are Actively Exploited in the Wild

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25

CISA Releases Guidance to Protect Firewalls, Routers, & Internet-Facing Servers

CISA Releases Nine Advisories Detailing Vulnerabilities and Exploits Surrounding ICS

CISA tags Microsoft .NET and Apache OFBiz bugs as exploited in attacks

CISA Updates KEV Catalog with High-Severity Vulnerabilities—Patch Now!

Critical Netgear Vulnerabilities Let Attackers Execute Remote Code

Critical Veeam Backup Vulnerability Let Attackers Execute Arbitrary Code to Gain Root Access

Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign

Crypto-stealing iOS, Android malware found on App Store, Google Play

Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968)

Cybercriminals Eye DeepSeek, Alibaba LLMs for Malware Development

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts

Deepseek in hot seat as nations gather at Paris AI Summit

Destructive Attacks on Financial Institutions Surge

Ex-Google engineer accused of stealing AI secrets for Chinese companies

Five Eyes Launch Guidance to Improve Edge Device Security

Google just changed the rules on AI ethics – guess what’s back in play?

GrubHub third-party breach exposes partial payment info

Hackers Exploit GPU Vulnerabilities to Take Complete Control of Your Device

Hackers Exploiting A Six-Year-Old IIS Vulnerability To Gain Remote Access

Hackers Exploits ADFS to Bypass MFA & Gain Access to Critical Systems

Hackers spoof Microsoft ADFS login pages to steal credentials

Hackers Using AI Agents To Validate Stolen Credit Cards

Hackers Using Fake Microsoft ADFS Login Pages to Steal Credentials

How attackers abuse S3 Bucket Namesquatting — And How to Stop Them

How to turn on Private DNS Mode on Android - and why it's a must for security

International Civil Aviation Organization (ICAO) and ACAO Breached: Cyberespionage Groups Targeting Aviation Safety Specialists

Lulzsec Arabs Defaced Multiple Websites

MacOS infostealers rising sharply: stolen data putting enterprises at risk

Major data leak at Valley News Live exposes 1.8 million records of job applicants

Mobile Malware Targeting Indian Banks Exposes 50,000 Users

More destructive cyberattacks target financial institutions

Multiple IBM Cloud Pak Vulnerabilities Let Attackers Execute Remote Code

Navigating the Future: Key IT Vulnerability Management Trends

New Veeam Flaw Allows Arbitrary Code Execution via Man-in-the-Middle Attack

NorthBay Health reports data breach impacting over 569,000 individuals

Online food ordering and delivery platform GrubHub discloses a data breach

OpenNHP: Cryptography-driven zero trust protocol

Python packages posing as DeepSeek contain nasty surprise

Ransomware Payments Decline 35% as Victims Resist Demands

Red Wolf Cyber Team Targeted the Website of UMANG - Unified Mobile Application for New Age Governance

Silent Lynx Using PowerShell, Golang, and C++ Loaders in Multi-Stage Cyberattacks

Sophisticated Phishing Campaign Targets Ukraine’s Largest Bank

Sophos Acquires Secureworks for $859 Million

Spain arrests suspected hacker of US and Spanish military agencies

SparkCat campaign target crypto wallets using OCR to steal recovery phrases

Swap EOL Zyxel routers, upgrade Netgear ones!

The API security crisis and why businesses are at risk

Threat Actors Exploiting DeepSeek’s Rise To Fuel Cyber Attacks

Threat Actors Leveraging Free Email Services To Attack Govt & Education Entities

TinyZero – Researchers Replicated DeepSeek’s R1-Zero Model for Just $30

U.S. CISA adds Microsoft .NET Framework, Apache OFBiz, and Paessler PRTG Network Monitor flaws to its Known Exploited Vulnerabilities catalog

Use payment tech and still not ready for PCI DSS 4.0? You could face stiff penalties

XRP Ledger goes offline but speculators don't seem to care

Weaponized Go Package Module Let Attackers Gain Remote Access To Infected Systems

Why honeypots deserve a spot in your cybersecurity arsenal

04/02

3 SOC Challenges Solved by Threat Intelligence

7-Zip MotW bypass exploited in zero-day attacks against Ukraine

8 steps to secure GenAI integration in financial services

A new phishing campaign is exploiting Microsoft’s legacy ADFS identity solution to steal credentials and bypass MFA

Abandoned AWS S3 Buckets Can be Reused to Hijack Global Software Supply Chain

AI-Powered Cyber Warfare, Ransomware Evolution, and Cloud Threats Shape 2025 Cyber Landscape

Aim for crypto-agility, prepare for the long haul

AMD SEV-SNP Vulnerability Allows Malicious Microcode Injection with Admin Access

Apache Cassandra Vulnerability Let Attackers Gain Access to the Data Centers Remotely

Apple Service Ticket Portal Vulnerability Exposes Millions of Users Data

AsyncRAT Abusing Python and TryCloudflare For Stealthy Malware Delivery

Beware of Fake DeepSeek PyPI Packages That Delivers Malware

Bitcoin scammers sending MMS with 3GP videos: old format surprisingly effective

California man steals $50 million using fake investment sites, gets 7 years

Canadian Charged for Stealing $65 Million in Crypto from KyberSwap and Indexed Finance

Canadian National Charged for Stealing $65 Million in Crypto

Casio and Others Hit by Magento Web Skimmer Campaign

Casio UK site compromised, equipped with web skimmer

Casio UK Web Store Hacked to Inject Customer Credit Card Stealing Scripts

Coinbase faces heavy fire as users duped for millions in social engineering scams

Community Health Center reports data breach affecting over 1 million patients

Critical Microsoft Accounts Authentication Bypass Vulnerability Let Attackers Gain Remote Access

Critical Windows OLE Zero-Click Vulnerability Let Attacker to Execute Arbitrary Code

Crypto phishing losses dropped 56% to $10.2m: ScamSniffer

Cybercriminals are using AI to target macOS in 2025

DaggerFly-Linked Linux Malware Targets Network Appliances

Dangerous Google AI phishing attack threatens 2.5 billion Gmail users

Data Breach Shakes Schools Using PowerSchool Software

FlexibleFerret Malware Attacking macOS Users, Evading XProtect Detections

Google Ads Phishing Campaign Targets Microsoft Advertisers with Sophisticated Techniques

Google Patched Linux Kernel RCE Vulnerability In Android Allow Attackers Gain Read/Write Access

Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104

GrubHub Data Breach – Customers Phone Numbers Exposed

GrubHub data breach impacts customers, drivers, and merchants

Hacker attack on Alltours: A security incident and its impact on customers and companies

Hackers Exploiting 7-Zip Zero-Day Vulnerability to Deploy SmokeLoader Malware

Hackers Hide Malware in Fake DeepSeek PyPI Packages

Hackers Using HTTP Client Tools To Takeover Microsoft 365 Accounts

How threat actors use Command and Control (C2) and data exfiltration as part of double extortion

Kenya data breach: fingers point to Moldovan firm, B2Bhint

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access

Man charged with stealing $65 million by exploting DeFI protocols vulnerabilities

Microsoft Azure AI Face Service Elevation of Privilege Vulnerability Let Attackers Gain Network Access

Microsoft Patches Critical Azure AI Face Service Vulnerability with CVSS 9.9 Score

Microsoft SharePoint Connector Flaw Could've Enabled Credential Theft Across Power Platform

Multiple Dell PowerProtect Vulnerabilities Let Attackers Compromise System

Navigating public sector cyber risk amidst new legislation

New Attack Technique to Bypassing EDR as Low Privileged Standard User

New Tiny FUD Attacking macOS Users Bypassing Antivirus and Security Tools

North Korean ‘FlexibleFerret’ Malware Hits macOS with Fake Zoom, Job Scams

North Korean Hackers Deploy FERRET Malware via Fake Job Interviews on macOS

Online lottery service warns users of fraud and phishing scams

Over 1M profiles accessed in Middletown-based Community Health Center data breach

Phishing alert: how to protect your accounts against cyber attacks in Monaco

PoC Exploit Released for Active Directory Domain Services Privilege Escalation Vulnerability

Powerschool data breach impacts millions globally

Ransomware attack locks energy contractor out of financial systems for six weeks

Ransomware attack targets the New York Blood Center

Researchers Uncovers New Methods To Defend AI Models Against Universal Jailbreaks

Researchers unearth more North Korean malware variants attacking macOS

Roundcube XSS Vulnerability Let Attackers Inject Malicious Files

Russian cybercrooks exploiting 7-Zip zero-day vulnerability (CVE-2025-0411)

Scammers break hearts, leaving lonely online daters penniless

Sophisticated Phishing Attack Bypasses Microsoft ADFS MFA

SpyCloud Pioneers the Shift to Holistic Identity Threat Protection

Surge in Infostealer Attacks Threatens EMEA Organizations' Data Security

Taiwan Bans DeepSeek AI Over National Security Concerns, Citing Data Leakage Risks

Tata Technologies reports ransomware incident; client services unaffected

TD Bank reports data breach involving unauthorized access to sensitive customer information

Texas to Establish Cyber Command Amid “Dramatic” Rise in Attacks

Threefold Increase in Malware Targeting Credential Stores

ValleyRAT Attacking Org's Accounting Department With New Delivery Techniques

What is a Ransomware scam and how you can protect yourself?

What you can do to prevent workforce fraud

Why logs aren’t enough: Enhancing SIEM with AI-driven NDR

03/02

5 Best Infrastructure as Code (IaC) Vulnerability Scanning Tools in 2025

10 Best Web Application Firewall (WAF) – 2025

39% of IT leaders fear major incident due to excessive workloads

768 CVEs Exploited in 2024, Reflecting a 20% Increase from 639 in 2023

768 CVEs Exploited in the Wild in 2024

768 Vulnerabilities Exploited in the Wild in 2024: A 20% Year-Over-Year Surge

Alibaba Cloud Storage Service Vulnerability Allows Unauthorized Data Uploads

APT37 Hackers Abusing Group Chats To Attack Via Malicious LNK File

Arm Mali GPU Kernel Driver 0-Day Vulnerability Actively Exploited in the Wild

Aussie government targets Terrorgram online network with sanctions

BadDNS: Open-source tool checks for subdomain takeovers

BeyondTrust Zero-Day Breach – 17 SaaS Customers API Key Compromised

Booking.com's CISO on Strengthening Security as Cyber-Attacks Target Travel Sector

British PM scrapped ‘dangerously obvious’ email after Russian hacking

British Prime Minister Keir Starmer's Personal Email Allegedly Hacked by Russian Operatives

ChatGPT Announces Deep Research That Handles Complex Tasks Faster Than Humans

CISA Warns of Backdoor Vulnerability in Contec Patient Monitors

Cisco Finds DeepSeek R1 Highly Vulnerable to Harmful Prompts

Coyote Malware Expands Reach: Now Targets 1,030 Sites and 73 Financial Institutions

Crazy Evil gang runs over 10 highly specialized social media scams

Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware

DeepSeek: A fleeting challenger? Or a looming threat?

DeepSeek AI tools impersonated by infostealer malware on PyPI

DeepSeek exposes 2 databases containing 1m records

DeepSeek ‘incredibly vulnerable’ to attacks, research claims

DeepSeek’s popularity exploited to push malicious packages via PyPI

Devil-Traff – New Malicious Bulk SMS Portal That Fuels Phishing Attacks

DOJ, Dutch police take down group selling phishing tools to cybercriminals

Elon Musk ’s DOGE team granted ‘full access’ to sensitive Treasury systems. What are the risks?

European Police: Data Volumes and Deletion Hindering Investigations

FBI and Global Task Force Dismantle Cracked and Nulled, Seizing Millions in Stolen Dat

Globe Life data breach may have affected 850,000 more patients than previously thought

Globe Life Ransomware Attack – 850,000+ Users Personal & Health Data Exposed

Hackers Abusing AWS & Microsoft Azure To Launch Large-Scale Cyber Attacks

Hallucinating AI vs intuitive AI – which will win?

Help! We're drowning in email spam, it's about to get worse and there's nothing we can do to stop it

High-profile X Accounts Targeted in Phishing Campaign

How AI can revolutionize vulnerability research

How Builder.ai is Democratizing AI for the Next Billion Users

How to use iCloud Private Relay for enhanced privacy

Inside the North Korean Lazarus Group’s global data exfiltration operation

IntelBroker claims third data leak of Hewlett Packard Enterprise

Justice Department Disrupts Cybercrime Network Selling Hacking Tools to Organized Crime Groups

Law enforcement seized the domains of HeartSender cybercrime marketplaces

Linux 6.14 Released – 500,000 Lines of Code Modified

MediaTek Chipsets WLAN Vulnerabilities Exposes Million of Devices to Remote Attacks

Microsoft Advertisers Account Hacked Using Malicious Google Ads

Microsoft Announces AI Avatar for Teams Meeting

Microsoft Defender ditches privacy protection feature, leaving users without VPN

Microsoft kills off Defender 'Privacy Protection' VPN feature

Mizuno USA says hackers were able to breach networks, steal data for months

New Malware Campaign Mimic Tax Agencies Attacking Financial Organizations

New Phishing Attack Hijacking High-Profile X Accounts To Promote Phishing Sites

New Process Hollowing Attack Vectors Uncovered in Windows 11 (24H2)

New Windows 11 (x64) Modern Kernel Race Conditions Uncovered – PoC Released

NVIDIA GPU Display Driver Vulnerability Lets Attackers Steal Files Remotely – Update Now

Online gaming safety for kids: learn how to protect your children

Only 3% of organizations have a dedicated budget for SaaS security

Over a million patients potentially hit after another US healthcare provider hit by cyberattack

Paragon spyware campaign targeting journalists disrupted by WhatsApp

Parrot 6.3 Released With Improved Security & New Hacking Tools

Patient monitors may have some worrying security flaws

PyPI Introduces Archival Status to Alert Users About Unmaintained Python Packages

Taiwan bans government departments from using DeepSeek AI

Tata Technologies confirms ransomware attack, says investigation still ongoing

Texas is the first state to ban DeepSeek on government devices

The CISO's role in advancing innovation in cybersecurity

The Expert View: Combatting Cyber-Threats at Scale

The hidden dangers of a toxic cybersecurity workplace

The total cost of DeepSeek’s AI models exceeded $1.5 billion, report estimates

UK Announces “World-First” AI Security Standard

U.S Community Health Center Hacked – 1 Million Patients Data Stolen

Warning: Email scammers impersonating the Australian Cyber Security Centre

What Cybersecurity Can Teach Us About the Human Body

What Is Attack Surface Management?

WhatsApp users targeted by alleged zero-click attack by spyware-maker Paragon

When you ask an app “not to track” it tracks you anyway, and the data is sold

02/02

Marriott And Otelier Face Major Data Breach Settlements

Massive Healthcare Data Breach Affects 190 Million Americans

Medical Records Stolen As 1 Million Patients Hit By Healthcare Hack

PyPI adds project archiving system to stop malicious updates

Ransomware attack hit Indian multinational Tata Technologies

Ransomware Targets Tata Technologies Amid Rising Cyber Threats in India

Two PSNI officers arrested in fraud probe into data breach security payments

US seizes 39 domains tied to cybercrime group in Pakistan

Using Quick-Text Replies Can Expose You to Smishing Scams—Here's How

Daily News - Janeiro (26/01 - 01/02) - 05 Semana de 2025