Daily News - Fevereiro (09/02 - 15/02) - 07 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

15/02

2024: The year ransomware exploded and email threats got sneakier

Android's New Feature Blocks Fraudsters from Sideloading Apps During Calls

Coast Guard hit with data breach, impacting pay for more than 1,100 members

Cyber Attack on Megha Engineering, Rs 5.47 Cr Loss

'Duped by a dot': Firm loses Rs 5.5 crore in phishing attack in Telangana

In phishing attack, scammers pose as ‘Dutch suppliers’ to dupe Hyderabad-based MEIL of Rs 5.47 crore

Is That Breach Alert Real? It May Be Just Another Scam

Megha Engineering And Infrastructure Loses Rs 5.5 Crore In Phishing Scam

Memorial Hospital and Manor notifies 120,085 people of November ransomware attack

Microsoft: Hackers steal emails in device code phishing attacks

Ransomware Hacked & Helpless

Sinister New Phishing Kit Targets Billions Of Gmail And Outlook Users

The foundation of modern software development is under rising cyber attack

The Hidden Cybersecurity Crisis: How GenAI is Fueling the Growth of Unchecked Non-Human Identities

What is an encryption backdoor?

WhatsApp sofre ataque hacker e mais de 20 países são afetados

14/02

2.7 billion IoT records leaked in massive online data breach

12 million hit in Zacks Investment data breach — how to protect yourself now

75 luxury homes, 6 supercars, and 20 years in prison: crypto scammers plead guilty

A record year of shattered hearts and emptied wallets

Advanced stealthy Astaroth phishing kit emerges

AI-Powered Social Engineering: Ancillary Tools and Techniques

AI Vs. Advanced AI: The Battle For Data Integrity In The Age Of Advanced Ransomware

AMD Ryzen DLL Hijacking Vulnerability Let Attackers Execute Arbitrary Code

Apache Fineract SQL Injection Vulnerability Let Inject Malicious Data

Astaroth 2FA Phishing Kit Targets Gmail, Yahoo, Office 365, and Third-Party Logins

Australia Imposes New Cyber Sanctions in Response to Medibank Private Cyberattack

Berry, Dunn, McNeil & Parker Agree to $7.25 Million Data Breach Settlement

Beware of Malicious Browser Updates That Installs SocGholish Malware

Brightline settles lawsuit for $7 million over 2023 data breach involving Clop hacking group

China-Linked Espionage Tools Used in Recent Ransomware Attack

Chinese hackers breach more US telecoms via unpatched Cisco routers

Chinese Hackers Target Cisco Devices in Global Cyber Campaign

CISA Releases 20 ICS Advisories Detailing Vulnerabilities & Exploits

Consultation launched to protect critical national infrastructure from ransomware

Cutbacks bite back as hackers play with Musk's DOGE site

Data of more than 200,000 Chronopost clients in France stolen: what to do if affected

Device Code Phishing Attack Exploits Authentication Flow to Hijack Tokens

Dozens of orgs claimed to be hacked by Cl0p ransomware

Dragos reports evolving ransomware threat landscape with increased operational disruptions as attacks target ICS

Ending the Ransomware Scourge Requires Punishing Its Enablers

Espionage Tools Associated with China Used in Ransomware Attacks

FBI intervenes as crypto scam victims risk homes and life savings

Fillmore County Hospital Announces Data Breach

Fraud Alert: The SVG Image File Scam You Need To Watch Out for

Gmail, Yahoo targeted by a new two-factor authentication phishing kit

Google’s Gemini AI Abused by Multiple State-Sponsored Hackers for Cyber Attacks

Hacker alega invasão ao Governo de SP e possuir dados de 45 milhões de pessoas

Hackers Actively Exploiting New PAN-OS Authentication Bypass Vulnerability

Inconsistent security strategies fuel third-party threats

Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks

Lynx ransomware group claims hack of truck dealership Brown and Hurley

Microsoft: Russian-Linked Hackers Using 'Device Code Phishing' to Hijack Accounts

New Astaroth 2FA Phishing Kit Targeting Gmail, Yahoo, Office 365, and 3rd-Party Logins

New Device Code Phishing Attack Exploit Device Code Authentication To Capture Authentication Tokens

New "whoAMI" Attack Exploits AWS AMI Name Confusion for Remote Code Execution

Nippon Steel claimed by BianLian ransomware group

North Korean Hackers Suspected in DEEP#DRIVE Attacks Against South Korea

NVIDIA Container Toolkit Vulnerability Let Attackers Execute Code

OpenAI at Risk? Hacker Exploits ChatGPT Authentication Flaw

Passwordless: Malaysia’s new weapon against phishing

Pennsylvania utility says MOVEit breach at vendor exposed some customer data

Pig butchering scams are exploding

PirateFi game on Steam caught installing password-stealing malware

PostgreSQL flaw exploited as zero-day in BeyondTrust breach

PostgreSQL Terminal Tool Injection Vulnerability Allows Remote Code Execution

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks

Protecting yourself from ransomware: a comprehensive guide to prevention and mitigation

RA World Ransomware Intrusion Involved Chinese Cyberespionage Tools

Radiology practice SimonMed Imaging suffers apparent ransomware attack

RansomHub Becomes 2024's Top Ransomware Group, Hitting 600+ Organizations Globally

Ransomware attacks on industrial systems an ‘increasingly dynamic ecosystem’

Ransomware Data Extortion Skyrocketing

Ransomware group Sarcoma claims attack on Taiwanese PCB manufacturer Unimicron

RedMike Hackers Exploited 1000+ Cisco Devices to Gain Admin Access

REF7707 Hackers Attacking Windows & Linux Machines Using FINALDRAFT Malware

REMSA Health Experiences Cyberattack, Raising Questions of a Possible Data Breach

Russian Hackers Target Microsoft 365 Accounts with Device Code Phishing

Sault Tribe still working to restore services following ransomware attack

Scammers Exploit JFK Files Release with Malware and Phishing

SonicWall firewall bug leveraged in attacks after PoC exploit release

Texas investigating DeepSeek for violating data privacy law

The changing face of phishing

Third-Party Cyber Risk Management: Taking a Strategic Approach

Threat actors are using legitimate Microsoft feature to compromise M365 accounts

Threat researchers spot ‘device code’ phishing attacks targeting Microsoft accounts

UK's AI Safety Institute Rebrands Amid Government Strategy Shift

Ukraine warns of growing AI use in Russian cyber-espionage operations

Unimicron manufacturer faced a breach from Sarcoma ransomware

USAID staff accuses DOGE of jeopardizing safety, accessing security clearance data

XELERA Ransomware Attacking Job Seekers With Weaponized Word Documents

Zacks Investment hit in data breach - 12 million users potentially at risk

Zservers/XHost servers dismantled by Dutch police

WinZip Vulnerability Let Remote Attackers Execute Arbitrary Code

YouTube Warns Users To Stay Vigilant As It Investigates Account Hijacking Campaign

13/02

24% of vulnerabilities are abused before a patch is available

A Threat Actor Claims to have Leaked Data of Pemerintah Kota Tangerang Selatan

AI and Security - A New Puzzle to Figure Out

Amazon Machine Image Name Confusion Attack Let Attackers Publish Resource

Apple's app tracking tool could be violating rules, German watchdog warns

APT43 Hackers Attacking Academic Institutions With Exposed Credentials

Astaroth Phishing Kit Bypasses 2FA Using Reverse Proxy Techniques

Australian police join global crackdown on cybercriminal infrastructure provider

BadPilot Attacking Network Devices To Expand Russian Seashell Blizzard’s Attacks

Burp AI – Burp Suite Now Integrate AI Powered Extension for Web Pentesting with 10,000 Free AI Credits

Chicago schools join IT giant in Cl0p's attack spree

China-linked APTs’ tool employed in RA World Ransomware attack

Chinese espionage tools deployed in RA World ransomware attack

Chrome use-after-free Vulnerability Let Attackers Execute Code Remotely

CISA and FBI Warn Against Buffer Overflow Vulnerabilities

CISOs and boards see things differently

CrowdStrike Falcon Sensor for Linux TLS Vulnerability Enables MiTM Attack

Dark Strom Team Targeted the Website of Airport La

Dutch Police seizes 127 XHost servers, dismantles bulletproof hoster

EFF Leads Fight Against DOGE and Musk's Access to US Federal Workers' Data

Experiencing Unexpected Reboots/Restarts of Palo Alto Firewall? You’re Not Alone

Fast Deployments, Secure Code: Watch this Learn to Sync Dev and Sec Teams

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux

Hacker leaks account data of 12 million Zacks Investment users

Hackers Exploited Palo Alto’s Firewall Vulnerability to Deploy RA World Ransomware

Hackers Exploiting ThinkPHP & ownCloud Vulnerabilities at Large Scale

Hackers Use CAPTCHA Trick on Webflow CDN PDFs to Bypass Security Scanners

Hackers Using Pyramid Pentesting Tool For Stealthy C2 Communications

Have I Been Pwned Likely to Ban Resellers Subscriptions

KASLR Exploited: Breaking macOS Apple Silicon Kernel Hardening Techniques

Making sense of database complexity

Massive IoT Data Breach Exposes 2.7 Billion Records, Including Wi-Fi Passwords

More DeFi projects run into security issues, negotiations with a hacker begin

More sanctions imposed against Russians over Medibank Private cyber attack

New Malware Exploiting Outlook As a Communication Channel via The Microsoft Graph API

New Phishing Attacks Abuses Webflow CDN & CAPTCHAs To Steal Credit Card Details

New Windows UI 0-Day Vulnerability Actively Exploited in the Wild by Chinese APT Group

North Korea Targets Crypto Devs Through NPM Packages

North Korean APT43 Uses PowerShell and Dropbox in Targeted South Korea Cyberattacks

North Korean hackers spotted using ClickFix tactic to deliver malware

Over 3 million Fortune 500 employee accounts compromised since 2022

Path Confusion in Nginx/Apache Leads to Critical Auth Bypass in PAN-OS

Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software

Palo Alto PAN-OS 0-Day Vulnerability Let Attackers Bypass Web Interface Authentication

PAN-OS authentication bypass hole plugged, PoC is public (CVE-2025-0108)

RA World Ransomware Attack in South Asia Links to Chinese Espionage Toolset

RedNote App Vulnerability Allows Access to User Files on iOS & Android Devices

Researchers get $10K for disclosure of YouTube flaw that exposed billions of user emails

Romance Baiting Losses Surge 40% Annually

Russia deploying cybercriminals to support war in Ukraine

Russia-linked APT Seashell Blizzard is behind the long running global access operation BadPilot campaign

Russian Hackers Leverages Weaponized Microsoft Key Management Service (KMS) To Hack Windows Systems

Russian Seashell Blizzard Enlists Specialist Initial Access Subgroup to Expand Ops

Sandworm APT's initial access subgroup hits organizations accross the globe

Sarcoma ransomware gang claims the theft of sensitive data from PCB maker Unimicron

Security Researchers Now Analyse Any URL With ANY.RUN Safebrowsing Tool Extension for Free

Sextortion kits fuel the great crypto heist

The Rise of Cyber Espionage: UAV and C-UAV Technologies as Targets

The UK’s secret iCloud backdoor request: A dangerous step toward Orwellian mass surveillance

Threat Actors Exploiting DeepSeek’s Popularity To Deploy Malware

Threat Actors In Russia, China, and Iran Targeting Local Communities In The U.S – New Report

Unguarded database spills 440M personal records

zkLend's $9M Ethereum Heist: Can a Bounty Save the Stolen Funds?

What security teams need to know about the coming demise of old Microsoft servers

Windows 11’s New Compression Formats Pose Security Risks with libarchive

Winnti Hackers Attacking Japanese Organizations With New Malware

12/02

10 common dangers VPNs won't protect you from online - and how to avoid them

20 Million ChatGPT Accounts Allegedly Stolen and Sold on Hacker Marketplace

A Hacker Group Within Russia’s Notorious Sandworm Unit Is Breaching Western Networks

Acronis Cyberthreats H2 2024 Report: Ransomware and AI are a dangerous combination

Alberta privacy commissioner responds to PowerSchool data breach affecting students and educators

Alleged Kraken Ransomware Hack Denied by Cisco

Apple Confirms ‘Extremely Sophisticated’ Exploit Threatening iOS Security

Apple Patches Security Flaw That Allowed Access to Locked Devices

Arizona Woman Admits to Running Laptop Farm for North Korean IT Workers, Faces Up to 9 Years in Prison

AWS IAM Username Enumeration Vulnerabilities Let Attackers Detect Valid Users

BadPilot network hacking campaign fuels Russian SandWorm attacks

Beyond the paycheck: What cybersecurity professionals really want

Beyond VPN: How TruGrid Simplifies RDP Deployment, Security, and Compliance

Btmob RAT: A New Evolution of Android Malware Targets Users via Phishing Sites

CEOs must act now to embrace AI or risk falling behind

CHERI Security Hardware Program Essential to UK Security, Says Government

CISA, experts urging users to patch new Windows zero-days: “test and deploy quickly”

Cisco refutes Kraken ransomware group’s data breach claims

Cybercrime is helping fund rogue nations across the world - and it's only going to get worse, Google warns

Cybersecurity firm SailPoint sets sights on $12.6 billion valuation in US IPO

DeepSeek may face further regulatory actions

Does AI get a free pass on ‘fair use’ IP rights?

Don't ignore Microsoft's February Patch Tuesday - it's a big one for all Windows 11 users

DPRK hackers dupe targets into typing PowerShell commands as admin

‘Eu que vazei os dados de clientes do Banco Neon’: uma conversa com um hacker

Feds tackle illegal Super Bowl streaming networks

Fewer than one in three Chrome users have ‘Enhanced Security’ enabled

Fortra's 2025 cybersecurity survey: key risk findings

Google Chrome’s Safe Browsing Now Protect 1 Billion Users With 300,000 Deep Scans

Google Family Link now limits who can contact your child's device

Google fixes flaw that could unmask YouTube users' email addresses

Hacker divulga dados bancários de 30 milhões de clientes do Neon

Hackers Allegedly Claiming Breach OmniGPT, 30,000+ User Accounts Exposed

Hackers clash over Doxbin lost account access

Hackers Exploit Prompt Injection to Tamper with Gemini AI’s Long-Term Memory

Hackers Exploiting Ivanti Connect Secure RCE Vulnerability to Install SPAWNCHIMERA Malware

Hackers Trick You To Run PowerShell As Admin & Paste Their Code to Hack Windows

Heartbreak hackers: Valentine’s day scams on the rise

How crypto scammers are exploiting celebrities to drain your wallet

How to Steer AI Adoption: A CISO Guide

How to Track Advanced Persistent Threats (APT) Using Threat Intelligence Lookup Tool

Huge Christmas data breach - 14 million shipping records leaked, putting shoppers at risk

Intel slams Nvidia and AMD, claims chip giants have huge numbers of security flaws

It’s time to secure the extended digital supply chain

Ivanti Connect Secure Vulnerabilities Let Attackers Execute Code Remotely

Ivanti fixes three critical flaws in Connect Secure & Policy Secure

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure – Update Now

Ivanti reveals major security update, so make sure you're protected

Linux X.509 Certificate-Based User Login Flaws Let Attackers Bypass Authentication

Massive 1.17TB Data Leak Exposes Billions of IoT Grow Light Records

Massive IoT Data Breach Exposes 2.7 Billion Records

Microsoft Fixes Another Two Actively Exploited Zero-Days

Microsoft just patched a host of worrying security issues, so update now

Microsoft Patch Tuesday for February Includes Two Zero Days Under Attack

Microsoft Patch Tuesday security updates for February 2025 fixed 2 actively exploited bugs

Microsoft Secure Boot Security 0-Day Lets Attackers Steal The Admin Credentials

Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ Countries

Microsoft's Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation

Mirai Botnet Exploting Router Vulnerabilities to Gain Complete Device Control

New YouTube Bug Exploited to Leak Users’ Email Addresses

North Korea-linked APT Emerald Sleet is using a new tactic

North Korean Hackers Exploit PowerShell Trick to Hijack Devices in New Cyberattack

North Korean hackers Kimsuky exploiting the oldest critical vulnerability – the user

Online Threats Are Rising -Here’s Why Companies Must Improve Their Cybersecurity

Patch Tuesday: Microsoft Fixes 63 Bugs with 2 Zero-Days

Remote Desktop Manager Vulnerabilities Let Attackers Intercept Encrypted Communications

Researchers Find New Exploit Bypassing Patched NVIDIA Container Toolkit Vulnerability

Researchers Hacked into Software Supply Chain and Earned $50K Bounty

Romance Scams Cost Americans $697.3M Last Year

Russian cybercriminal Alexander Vinnik is being released from U.S. custody in exchange for Marc Fogel

Sarcoma ransomware claims breach at giant PCB maker Unimicron

Security Detection Tech Failing, Say Cyber Leaders in Regulated Industries

Silent breaches are happening right now, most companies have no clue

SonicWall VPN flaw could allow hackers to hijack your sessions, so patch now

Sony removes spam games following devs report on PlayStation “e-slop”

Suposto hacker obtém dados de 30 milhões de clientes de banco e pede recompensa de R$ 2,8 milhões em bitcoin

SysReptor: Open-source penetration testing reporting platform

UK monitoring group to classify cyber incidents on earthquake-like scale

Unpatched SonicWall Firewalls Vulnerability Actively Exploited To Hijack SSL VPN Sessions

U.S. CISA adds Microsoft Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalog

US, UK, and Australia sanction Russia-based Zservers for enabling LockBit ransomware

US, UK and Australia Sanction Russian Bulletproof Hoster Zservers

US, UK crack down on Russian bulletproof hosting service ZServers for LockBit partnership

ZeroLogon Ransomware Exploit Active Directory Vulnerability To Gain Domain Controller Access

zkLend Hacked – $8.5M Stolen, Company offers 10% whitehat Bounty to Attacker

West London Council Faces 20,000 Cyberattack Attempts Every Day Amid Growing Threats

Windows Driver Zero-Day Vulnerability Allow Attackers To Gain System Access Remotely

Windows Storage 0-Day Vulnerability Let Attackers Delete The Target Files Remotely

‘Wormable’ Windows LDAP Vulnerability Allow Attackers Arbitrary Code Remotely

11/02

4 Ways to Keep MFA From Becoming too Much of a Good Thing

8Base ransomware group leaders arrested, leak site seized

8Base Ransomware Site Seized, Phobos Suspects Arrested in Thailand

88% of UK businesses say cyber fraud drove payment fraud

Accendo Insurance Company Affected by Business Associate Data Breach

Akira Ransomware Leads The Number of Ransomware Attacks For January 2025

Alabama Hacker Admits Role in SEC X Account Breach

Alabama Man Pleaded Guilty for Hacking U.S. Securities and Exchange Commission X Account

Another person targeted by Paragon spyware comes forward

Apple fixes zero-day flaw exploited in “extremely sophisticated” attack (CVE-2025-24200)

Apple Mitigates “Extremely Sophisticated” Zero-Day Exploit

Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update

Artificial intelligence (AI) as an Enabler for Enhanced Data Security

Arvest Bank CISO on building a strong cybersecurity culture in banking

Attackers exploit a new zero-day to hijack Fortinet firewalls

Avery Discovers Credit Card Scraper Following Ransomware Attack

Beware of Fake Salesforce Emails Deceiving Businesses and Users

California students take legal action against US Education Department over massive data breach

Canada’s privacy watchdog to investigate PowerSchool student information data breach

Check Point and Wiz Partner to Deliver End-to-End Cloud Security

Cisco dispels Kraken data breach claims, insists stolen data came from old attack

Cisco Rejects Kraken Ransomware’s Data Breach Claims

CloudSEK Uncovers ClickFix Phishing Campaign Targeting Users

Critical Ivanti CSA Vulnerability Let Attackers Execute Arbitrary Code Remotely

Critical OpenSSL Vulnerability Allow Hackers to Launch Man-in-the-Middle Attacks

Crypto exchange platform BestChange in the dark over Russia block

Cyberattacks targeting medical organizations up 32% in 2024

Data Security Breach Forces Kewadin Casinos to Halt Operations in Upper Michigan

DDoS Attack Volume and Magnitude Continues to Soar

Delta Health 'data breach' what you need to know

Discord Unveils New Privacy Feature to Ignore Users Without Knowing Them

EARLYCROW – Detecting APT Malware Command and Control Over HTTPS

FBI, Europol, and NCA Take Down 8Base Ransomware Data Leak and Negotiation Sites

Feds Unmask Russian Duo Behind Ransomware Epidemic Threatening U.S. Cybersecurity!

FinStealer Malware Attacking Leading Indian Bank’s Mobile Users To Steal Login Credentials

Fortinet Addresses Multiple Vulnerabilities in Major Security Update

Fortinet discloses second firewall auth bypass patched in January

FortiOS & FortiProxy Already Patched 0-Day Allows Firewall Hijacks & Super Admin Access

FortiOS Security Fabric Vulnerability Let Attackers Escalate Privileges to Super-admin

Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks

Gcore Radar Report Reveals 56% Year-on-year Increase in DDoS Attacks

Global Phishing Campaign Targets Facebook Accounts

Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification

Hacker confesses to role in SIM swapping attack on SEC X account

Hacker found selling 20 million OpenAI credentials; AI firm claims no breach

Hackers leak cop manuals for departments nationwide after breaching major provider

Hackers Newly Registering Valentine’s Day Themed Domains for Stealthy Cyber Attacks

High School Dropout Sentenced to 20 Years for $38M Retirement Fund Hack

Hospital Sisters Health System (HSHS) notifies nearly 900K patients about a 2023 data breach

How to communicate clearly (and legally) during a cybersecurity crisis

How to detect and disable Apple AirTags that might be tracking you

I found the most private and secure way to browse the web - and it isn't incognito mode

IllusionCAPTCHA – A Security Mechanism To Stop AI-Based Breaking CAPTCHA

International Crackdown: Phobos Ransomware Network Dismantled

iOS 18.3.1 patches an 'extremely sophisticated attack' - and more

Justice Department charges 2 Russians with operating cybercrime group using ransomware

Kewadin Casino among Sault Tribe systems impacted by ransomware attack

LockBit’s woes continue as gangs’ helpers sanctioned

Malicious actors exploiting exposed ASP.NET keys to deploy malware

Microsoft February 2025 Patch Tuesday fixes 4 zero-days, 55 flaws

Microsoft fixes two actively exploited zero-days (CVE-2025-21418, CVE-2025-21391)

Microsoft Patch Tuesday February 2025 – 61 Vulnerabilities Fixed, 3 Zero-Day’s Actively Exploited

Millions exposed as 14M shipping records accidentally leaked

New Chinese Hacking Campaign Targets Manufacturing Firms to Steal IP

New Ransomware Gangs Drive Surge in Attacks

New technology could quash QR code phishing attacks

Number of active dark web ransomware groups up 38 percent in 2024

OmniGPT AI Chatbot Alleged Breach: Hacker Leaks User Data, 34M Messages

OpenAI Was Not Breached, Say Researchers

OpenSSL patched high-severity flaw CVE-2024-12797

Over 120K impacted by Memorial Hospital & Manor ransomware attack

Phishing evolves beyond email to become latest Android app threat

PowerSchool breach exposed special education status, mental health data and parent restraining orders

Progress LoadMaster Security Vulnerability let Attackers Execute Arbitrary System Commands

Progress Software fixed multiple high-severity LoadMaster flaws

Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions

Protecting Your Software Supply Chain: Assessing the Risks Before Deployment

Ransomware attack disrupts gaming, offices, services for Sault Ste. Marie Tribe of Chippewa Indians

Ransomware attack halts Sault Ste. Marie Tribe departments and businesses temporarily

Ransomware Gangs Increasingly Prioritize Speed and Volume in Attacks

Researcher Details Fortinet FortiOS Vulnerabilities Allowing DoS & RCE Attacks

Researchers Unveiled Tactics, Techniques, and Procedures Used by North Korean Hackers

Review: Inside Cyber Warfare, 3rd Edition

Russian bulletproof hosting service Zservers sanctioned by US for LockBit coordination

Russian military hackers deploy malicious Windows activators in Ukraine

SAP Security Update – 19 Vulnerabilities Across Multiple Products Patched

Sault Ste. Marie Tribe of Chippewa Indians Battles Ransomware Attack Impacting Casinos and Health Services

Searchlight Cyber Report Shows 38% YoY Increase in Active Dark Web Ransomware Groups

SonicWall firewall exploit lets hackers hijack VPN sessions, patch now

SouthKorea Spy Agency Says DeepSeek Excessively Collects Personal Data

Students Sue U.S. Department of Education Over Alleged Data Breach Involving Elon Musk and DOGE

Taipei’s Mackay Memorial Hospital faces ransomware attack

TD Bank data breach: Suit seeks $5M after customer info was leaked.

Third-Party Data Breach at ArdyssLife Affects an Unknown Number of Consumers

Threat Actors Exploit ClickFix to Deploy NetSupport RAT in Latest Cyber Attacks

Top 5 ways attackers use generative AI to exploit your systems

Ubuntu Printing Vulnerability Let Attackers Execute Arbitrary Code on Locked Laptops

UK Cracked Down Russian ZSERVERS Network Acts as Launchpad for Cyber Attacks

United States’ OFAC, United Kingdom’s FCDO, and Australia’s DFAT Jointly Sanction Zservers for Facilitating Ransomware Attacks

U.P. tribe hit with ransomware attack, gaming at 5 casinos shut down

US indicts 8Base ransomware operators for Phobos encryption attacks

US sanctions LockBit ransomware's bulletproof hosting provider

USB Army Knife – A Powerful Red Team Tool for Penetration Testers

Weak encryption and privacy risks found in DeepSeek’s Android app

Windows 10 KB5051974 update force installs new Microsoft Outlook app

Windows 11 KB5051987 & KB5051989 cumulative updates released

WTF? Why the cybersecurity sector is overrun with acronyms

10/02

1M+ Malware Samples Analysis Reveal Application Layer Abused for Stealthy C2

2.1TB of Data Allegedly from Israel Police Systems Published on the BreachForums

3 in 5 organizations expect cyber attack this year

4 Arrested as Police Dismantle 8Base Ransomware, Seize Dark Web Sites

8Base Ransomware Dark Web Site Seized, Four Operators Arrested

12K+ KerioControl Firewall Instances Vulnerable to 1-Click RCE Exploit

29% of school systems report a rise in student-to-student security incidents

AI’s Role in Cutting Costs and Cybersecurity Threats in Logistics

Alleged hacker behind fake SEC post could forfeit $50K in plea deal

Beelzebub: Open-source honeypot framework

British military drops basic training to fast track recruitment of ‘cyber warriors’

Catholic Charities of Southern Nevada Reports Data Breach Affecting the Personal Info of 73,822 People

CERT-In Warns of High-Severity Vulnerabilities in Mozilla Firefox and Thunderbird

CISA Flags Critical Trimble Cityworks Vulnerability (CVE-2025-0994) in KEV Catalog

Cisco Hacked – Ransomware Group Allegedly Breach Internal Network & Gained AD Access

CISOs: Stop trying to do the lawyer’s job

Critical Zimbra Vulnerabilities Let Attackers Unauthorized Access to Internal Resources

Cyberattack disrupts Lee newspapers' operations across the US

DeepSeek's R1 reportedly ‘more vulnerable’ to jailbreaking than other AI models

Don't Overlook These 6 Critical Okta Security Configurations

DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects

Econet denies alleged customer data breach

Econet Wireless refutes claims of massive data breach amid customer concerns

Egyptian hacks Israeli TV channel, What's the truth?

Europol Warns Financial Sector of “Imminent” Quantum Threat

Evolving uses of tokenization to protect data

Experts Dismayed at UK’s Apple Decryption Demands

Faulty phishing site blocking disrupts Cloudflare services

February 2025 Patch Tuesday forecast: New directions for AI development

Four cyber security myths that could sink your business in 2025

Gallagher settles lawsuit over major data breach

GhidrAssist Brings AI Features to Ghidra in Reverse Engineering

GitHub Copilot’s New Agent Mode Let Developers Autonomously Complete Coding Tasks

Gmail AI Phishing Attacks Skyrocket: FBI Warns Users to Take Action Now Before It's Too Late

Hackers Exploit Google Tag Manager to Deploy Credit Card Skimmers on Magento Stores

Hackers stole customers' personal data from Rivers Casino's systems

Handala Hackers Claim Massive Data Breach on Israeli Police, Leak 350,000 Files

Hewlett Packard Enterprise (HPE) notifies employees of data theft following Russian state-sponsored cyberattack

How Deepseek's security failures shape the future of cyber defense on AI

How These Decentralized AI Solutions Secure Their Services in a Disruptive Industry

Karnataka Police Investigates Cyber Attack on Kaveri 2.0 Property Registrations

LLM Hijackers Gained Stolen Access to DeepSeek-V3 Model Very Next Day After Release

London council hit by 20,000 cyberattacks every day

Malicious Machine Learning (ML) models found on Hugging Face Hub

Massive Brute Force Attack Targets VPN & Firewall Logins Using 2.8 Million IPs

Media giant Lee Enterprises confirms cyberattack as news outlets report ongoing disruption

Microsoft raises rewards for Copilot AI bug bounty program

Microsoft SharePoint Connector Vulnerability Let Attackers Steal User’s Credentials

Nearly 10% of employee gen AI prompts include sensitive data

NetSupport RAT Grant Attackers Full Access To Victims Systems

New ‘BYOTB’ Attack Exploits Trusted Binaries to Evade Detection, Researchers Reveal

New OG Spoof Toolkit Manipulates Social Media Links for Cybercrime

OpChildSafety: when parents fight back against predators

Out of 6,000 non-IPA requests, Apple provided UK with iCloud data only four times since 2020

Over 2 million IPs bombard edge network devices in ongoing brute force login attack

Penetration Testers Arrested by Police During Authorized Physical Penetration Testing

Phishing to QR code scam: Key steps to avoid some common UPI-related frauds

PoC Exploit Released for AnyDesk Vulnerability Exploited to Gain Admin Access Via Wallpapers

Political campaigns struggle to balance AI personalization and voter privacy

Predictive and Generative AI Solutions in Cybersecurity Automation

Quishing via QR Codes Emerging As a Top Attack Vector Used by Hackers

Ransomware extortion rose by 46% in Q4 2024

Ransomware Payments Dropped By 35%, As Victims Refusing To Pay

Reducing ransomware recovery costs in education

Russia disappearing from the internet: cloaking digital presence brings strategic cyberwarfare advantage

SAML Bypass Authentication on GitHub Enterprise Servers To Login as Other User Account

San Francisco-Marin Food Bank says hackers stole 60,000 customers' personal details

Scammers Use Fake Facebook Copyright Notices to Hijack Accounts

Security validation: The new standard for cyber resilience

Seven Years Old Linux Kernel Vulnerability Let Attackers Execute Remote Code

TeamViewer's CISO on Thriving After Russian Cyber-Attack

The city of Tarrant's fends off ransomware attack on city computers, police say

Tor Browser 14.0.6 Released, What’s New!

UK Gov demands backdoor to access Apple iCloud backups worldwide

UK Military Fast-Tracks Cybersecurity Recruitment

UK's secret Apple iCloud backdoor order is a global emergency, say critics

Unpatched Marvel Game RCE Exploit Could Let Hackers Take Over PCs & PS5s

Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities

XE Group shifts from credit card skimming to exploiting zero-days

XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells

World’s Longest and Strongest WiFi Passwords From 31 Million Passwords List

09/02

10 Best UTM (Unified Threat Management) Firewalls – 2025

AI Tools Used in Cyberattacks: Global Concerns Rise

Brave now lets you inject custom JavaScript to tweak websites

CyTwist Launches Advanced Security Solution to identify AI-Driven Cyber Threats in minutes

Hackers Compromising IIS Servers to Deploy BadIIS Malware

How To Prevent Gmail AI Phishing Attacks? FBI Issues Warning

Ransomware Attacks Climbed in 2024—but Some Companies Are Just Refusing to Pay Hackers

Sophisticated Gmail Phishing Attacks Are Exploding – FBI’s Latest Warning

South African Weather Service (SAWS) fights to restore systems after crippling cyber attack

The rising threat of financial fraud: Reconsider your approach to email security - opinion

UAE authorities warn residents against fresh phishing tactics

Daily News - Fevereiro (02/02 - 08/02) - 06 Semana de 2025