Daily News - Fevereiro (23/02 - 01/03) - 09 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

01/03

Android Phone’s Unlocked Using Cellebrite’s Linux USB Zero-day Exploit

Angel One Data Breach: 8 Million Users Personal Records at Risk

AT&T Hacker Tried to Sell Stolen Data to Foreign Government

Hackers Abused Google & PayPal’s Infrastructure to Steal Users Personal Data

Houston Symphony allegedy hacked by Qilin ransomware group

Microsoft disrupted a global cybercrime ring abusing Azure OpenAI Service

Microsoft Listed Hackers Abusing Azure OpenAI Service to Generate Malicious Content

Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language

North Korean Hackers Behind Largest Ever Financial Theft

Ransomware gangs exploit a Paragon Partition Manager BioNTdrv.sys driver zero-day

Ransomware gangs exploit Paragon Partition Manager bug in BYOVD attacks

28/02

7 Tools to Prevent Breaches in E-Wallets and Crypto Wallets

18 Best Web Filtering Solutions – 2025

260 Domains Hosting 5,000 Weaponized PDF Files Attacking Users to Steal Credit Card Data

5,000 Phishing PDFs on 260 Domains Distribute Lumma Stealer via Fake CAPTCHAs

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training

1.6 Million Android TVs Worldwide Hacked by Vo1d Botnet

Alleged Data Breach Exposes Sensitive Information from Jakarta Health Department

Alleged Data Breach: Threat Actor Claims to Sell 25 Million Truecaller Contacts from the USA

Amnesty Finds Cellebrite's Zero-Day Used to Unlock Serbian Activist's Android Phone

Belgium investigating alleged cyberattack on intelligence agency by China-linked hackers

Bybit hacker launders $605M ETH, over 50% of stolen funds

Cafe Zupas Data Breach Exposes Social Security Numbers

China-linked threat actors stole 10% of Belgian State Security Service (VSSE)’s staff emails

Chinese Hackers Exploiting Check Point’s VPN Zero-Day Flaw to Attack Orgs Worldwide

Cisco fixed command injection and DoS flaws in Nexus switches

Cleveland Municipal Court Remains Closed Due to Ongoing Cybersecurity Incident

Cracking down on AI-generated child abuse: 25 arrests in major operation

Cybercrime report reveals 58% surge in APT activity

Cybersecurity M&A Roundup: SolarWinds Acquired for $4.4bn

Cybersecurity recommendations for the Trump administration

DeepSeek Data Leak – 12,000 Hardcoded Live API keys and Passwords Exposed

DISA Global Solutions Faces Major Data Breach Impacting Millions

Duolingo post mortem: scammers use Duo’s death to swindle victims

Enhanced capabilities sustain the rapid growth of Vo1d botnet

France's 'backdoor for the good guys' could put your data at risk

Hackers can turn any Bluetooth device into an AirTag and track its location

Hackers seeking ways to infiltrate the military, experts warn

Lynx Ransomware Attacking Organizations to Exfiltrate Sensitive Data

Man Jailed 24 Years for Running Dark Web CSAM Sites from Coffee Shop

Man who used coffee shop Wi-Fi to advertise child abuse material jailed for life

Microsoft confirms it's killing off Skype in May, after 14 years

Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme

MITRE Caldera Hit by Critical RCE Flaw (CVE-2025-27364) – Here’s What You Need to Know

MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364)

Nakivo Backup & Replication Tool Vulnerability Allows Attackers to Read Arbitrary Files – PoC Released

New GitHub Scam With Thousand of “mods” & “cracks” Steal Your Data

New Pass-the-Cookie Attack Bypass Microsoft 365 & YouTube MFA Logins

Njrat Attacking Users Abusing Microsoft Dev Tunnels for C2 Communications

Old Vulnerabilities Among the Most Widely Exploited

OSPS Baseline: Practical security best practices for open source software projects

OT/ICS cyber threats escalate as geopolitical conflicts intensify

PingAM Java Agent Vulnerability Let Attackers Gain Unauthorized Access

Poco RAT Malware Exploits PDF Files to Infiltrate Systems and Steal Data

Police arrests suspects tied to AI-generated CSAM distribution ring

Prolific Data Extortion Actor Arrested in Thailand

Qilin ransomware claims attack at Lee Enterprises, leaks stolen data

Ransomware attacks reach record levels in January 2025

Ransomware incidents reached record levels in 2024

RDP: a Double-Edged Sword for IT Teams – Essential Yet Exploitable

Remove These Extensions Now! Hackers Hijack Google Chrome Add-ons for Fraud

Serbian police used Cellebrite zero-day hack to unlock Android phones

Sticky Werewolf Uses Undocumented Implant to Deploy Lumma Stealer in Russia and Belarus

Telegram as 1 Messenger Used by Cybercriminals for Communications

The art of balancing data security with business goals

The CSO guide to top security conferences

Third-Party Attacks Drive Major Financial Losses in 2024

Understanding the AI Act and its compliance challenges

Wallbleed Exposes Memory Vulnerability in China’s Great Firewall DNS System

What is zero trust? The security model for a distributed and risky era

27/02

10 Best Network Security Solutions for Enterprise – 2025

23 Vulnerabilities in Black Basta's Chat Logs Exploited in the Wild, Including PAN-OS, Cisco IOS, & Exchange

39% of vulnerabilities could cause both a loss of view and control

89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals

2024 phishing trends tell us what to expect in 2025

AI-generated code is serving up serious security risks, say researchers

Angry Likho APT Resurfaces with Lumma Stealer Attacks Against Russia

Authorities Arrested Hackers Behind 90 Data Leaks Worldwide

Belgium probes if Chinese hackers breached its intelligence service

Beware of Fake Job Interview Challenges Attacking Developers To Deliver Malware

Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers

Cellebrite Cuts Serbia Off Over Alleged Phone-Cracking Abuses

Central New York Cardiology Experiences Data Breach Affecting Patients’ SSNS and Medical Info

Chinese Cyber Espionage Jumps 150%, CrowdStrike Finds

Cisco Nexus Switches Vulnerability Lets Attackers Trigger DoS Condition

Cisco Nexus Vulnerability Let Attackers Inject Malicious Commands

Cyber resilience redefined: holding the C-suite accountable to cybersecurity breaches

Cyberattack on Australia’s Genea: Stolen Patient Data Hits the Dark Web

Cybercriminals prefer remote tools over malware, says CrowdStrike

Debunking 5 myths about network automation

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations

DragonForce Ransomware Hits Saudi Firm, 6TB Data Stolen

Exposing And Defending Against The 2025 Threat Landscape

FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist

FBI Confirms North Korea’s Lazarus Group as Bybit Crypto Hackers

FBI says North Korea was responsible for $1.5 billion ByBit hack

GHOSTR Hacker Linked to 90+ Data Breaches Arrested

GitLab Vulnerabilities Let Attackers Bypass Security Controls & Execute Arbitrary Code

Google's SafetyCore App Secretly Scans All Your Photos on Android Phones

Hackers Exploit RDP Tools to Breach Ukraine’s Notarial Offices, CERT-UA Reports

Hackers Exploited XSS Vulnerability in Popular Framework to Hijack 350+ Websites

Hackers Impersonate Taiwan’s Tax Authority to Deploy Winos 4.0 Malware

Hackers stole this engineer's 1Password database. Could it happen to you?

Hottest cybersecurity open-source tools of the month: February 2025

IRS Data Breach Exposes 400,000+ Taxpayer Records – How Did This Happen?

Is Agentic AI too smart for your own good?

Israel ranks second in list of countries targeted by cyberattacks in 2024 — report

LARVA-208 Hackers Compromise 618 Organizations Stealing Logins and Deploying Ransomware

Leaked ransomware chat logs reveal Black Basta’s targeted CVEs

LibreOffice Vulnerabilities Let Attackers Execute Malicious Files on Windows Systems

Lotus Blossom Hacker Group Uses Dropbox, Twitter, and Zimbra for C2 Communications

Medusa ransom gang claims City of Aurora, Colorado - uhm, we meant Nebraska

Microsoft Defender Leverages Machine Learning to Block Malicious Command Executions

Microsoft names cybercriminals behind AI deepfake network

Modernizing federal hiring: Cutting bureaucracy, enhancing transparency, and strengthening the workforce

New Anubis Ransomware Targets Windows, Linux, NAS, and ESXi x64/x32 Environments

New Backdoor Auto-color Linux Targets Systems in US and Asia

New “nRootTag” Attack Turns 1.5 Billion iPhones as Free Tracking Agents for Attacker

New Phishing Attack Targeting Amazon Prime Users To Steal Login Credentials

New TgToxic Banking Trojan Variant Evolves with Anti-Analysis Upgrades

New Wi-Fi Jamming Attack Disables Targeted Wi-Fi Devices Using RIS Technology

OpenSSF Publishes Security Framework for Open Source Software

OpenSSF Released Security Baseline for Linux Projects

Orange Group confirms data breach, hacker claims he stole over 12,000 files

Over 49,000 misconfigured building access systems exposed online

Philippine army confirms attack on its networks

PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices

Pump.fun X account hacked to promote cryptocurrency scam

Ransomware threats against operational tech surged in 2024

RestorixHealth Sends Data Breach Letters Following Unauthorized Access to an Employee’s Email Account

RustDoor and Koi Stealer Malware Attack macOS to Steal Login Credentials

Security leaders discuss botnet attack against Microsoft 365 accounts

Siemens Teamcenter vulnerability could allow account takeover (CVE-2025-23363)

Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations

Smart bed Eight Sleep tracks sleepers and has a secret backdoor allowing for remote connections

Software Vulnerabilities Take Almost Nine Months to Patch

Southern Water faces scrutiny over alleged ransom payment to hackers

Space Pirates Targets Russian IT Firms With New LuckyStrike Agent Malware

Squidoor: Multi-Vector Malware Exploiting Outlook API, DNS & ICMP Tunneling for C2

St. Clair Orthopaedics and Sports Medicine Announces Data Breach

Swinging into trouble – leak exposes personal data of 60,000 golfers

The US needs a strong CISA more than ever today

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details

Unpatched Vulnerabilities Attract Cybercriminals as EDR Visibility Remains Limited

VS Code Extension with 9 Million Installs Attacks Developers with Malicious Code

Windows CE OS flaws pose risk to industrial systems, medical settings

Winos 4.0 Malware Targets Taiwan With Email Impersonation

WordPress Admins Warned of Fake Plugins Injecting Malicious Links into Websites

Yodobashi Camera Users Under Attack from a New Wave of Phishing Attack

26/02

3.3 Million People Impacted by DISA Data Breach

10 cyber security insights from ex hacker and FBI agent who arrested him

96 Percent of Ransomware Cases Included Data Theft as Cybercriminals Double Down on Extortion

2024 broke records for ransomware attacks

Aboriginal and Torres Strait Islander healthcare provider confirms cyber incident

AFP: No data breach in Army, Navy ‘intrusion’

AI is helping hackers get access to systems quicker than ever before

Alleged classified FBI data stolen by LockBit

APRA doubles down on cyber resilience warning – so, what now?

Arctic Wolf Threat Report: Ransomware As A Service On the Rise

Asia-Pacific subjected to FatalRAT phishing campaign

August Data Breach Impacts Some City Of Roseburg Residents

Aussie adult site confirms tens of thousands emails compromised in data leak

Australian IVF giant Genea breached by Termite ransomware gang

Belgian prosecutor probes alleged Chinese hacking of intelligence service

Binance to introduce new security feature to combat crypto SMS phishing scams

Black Basta Chat Logs Reveal Ransomware Group’s TTPs, IoCs

BlackFog's 2024 State of Ransomware Report Reveals Record-Breaking Year for Attacks

Bybit opens hunting season for North Korea's Lazarus hackers

CERT-UA Warns of UAC-0173 Attacks Deploying DCRat to Compromise Ukrainian Notaries

Charleston Area Medical Center (CAMC) sued after data breach may have impacted more than 67,000 people

Chinese car manufacturers flock to DeepSeek, sparking security concerns

CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation

Cyberattack Disrupts Siberian Dairy Giant with LockBit Ransomware

Data breach potentially puts information of 15,000 Mainers at risk

Data breaches compromising more than 1m Australians surged in recent years

Data Theft Drove 94% of Global Cyberattacks in 2024 & Ransomware Defenses are “Increasingly Complex”

Dating site’s DMs, user details stolen and leaked, hackers claim

DeepSeek fame hijacked to empty wallets

Delaware Division of Motor Vehicles (DMV) warns of ongoing E-ZPass phishing scam

Detroit PBS confirms cyberattack as Qilin ransomware claims responsibility for data breach

DISA Global Solutions Confirms Data Breach Affecting 3.3M People

Drug screening firm discloses data breach affecting over 3.3 million individuals

EncryptHub breaches 618 orgs to deploy infostealers, ransomware

Everything You Need to Know about Cyber Extortion in 2025

Firefox keeps supporting powerful privacy extensions while Chrome deprecates them

Four Steps to Farm Cyber Security

Geopolitical Tension Fuels APT and Hacktivism Surge

Gone in a Flash: Amazon, PayPal, and Small Players Suffer from Phishing

Grand Forks Schools Recovered Half of Loss to Phishing Scam

GRUB2 Vulnerabilities Exposes Millions of Linux Systems to Cyber Attack

Hackers publish alleged patient data and CCTV footage following medical centre cyber incident

Hackers publish sensitive patient data allegedly stolen from Australian IVF provider Genea

Have I Been Pwned Adds ALIEN TXTBASE Data 280M Emails & Passwords

HaveIBeenPwned Adds 244 Million Passwords Stolen By Infostealers

How to tell if your USB cable is hiding malicious hacker hardware

Hundreds of GitHub repos served up malware for years

I Got a Suspicious Link in a Text Message: Here’s How I Checked It Safely

Is your email or password among the 240+ million compromised by infostealers?

KELA Releases State of Cybercrime 2024: The Alarming Rise of Infostealers and Ransomware & Predictions for 2025

Lawsuit filed against CAMC alleges phishing attack exposed data of 67,000 people

LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager

Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal Conflicts

LockBit ransomware gang sends ‘friendly advice’ to new FBI Director Kash Patel

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

Massive Password Spray Attack Campaign Targets Microsoft 365 Accounts

More Prevalent, Intrusive Ransomware Attacks Hit OT/OCS

NCC Group tracks alarming ransomware surge in January

New Linux Malware 'Auto-Color' Grants Hackers Full Remote Access to Compromised Systems

No password, no protection – Movistar security lapse leaves customers at risk

Orange Communication Breached – Hackers Allegedly Claim 380,000 Email Records Exposed

Orange Communication Breached – Hackers Allegedly Claim Leak of 380,000 Emails

Pakistan witnesses 18% increase in phishing attempts in 2024 compared to 2023, Kaspersky Reveals

Phishing Accounts for Nearly 70% of Fraud in Germany, Consumers Lose Over €200 Billion

Pittman’s Cyber Attack Update Lacks Key Details, Offers Little New Information

Ransomware attack on Southern Water cost £4.5 million

Ransomware Gang Publishes Stolen Genea IVF Patient Data

Ransomware Group Data-Leak Sites Increasing as Six New Groups Emerge

Rising cybercrime groups pose greater threat than state-sponsored attackers

Sault Tribe Hackers Demand Answer as Cyberattack Aftermath Unfolds

Signal May Exit Sweden If Government Imposes Encryption Backdoor

Signal Threatens to Exit Sweden Over Government’s Backdoor Proposal

SunPass scam alert: Floridians urged to remain vigilant as fake toll messages resurface

Termite Ransomware Gang Breaches Australian IVF Giant Genea

The compliance illusion: Why your company might be at risk despite passing audits

Threat Actor Allegedly Selling VMware ESXi 0-Day Exploit on Hacker Forum

Three Password Cracking Techniques and How to Defend Against Them

University of North Texas Police Warn of New Phishing Scam Impersonating TxTag Toll System

“Up yours Amazon!” Kindle users hurry to transfer their e-books due to new download policy

US Background Check Firm Data Breach Exposes 3.3M Records

VectraRx Mail Pharmacy Services discloses major data breach affecting over 109,000 individuals

25/02

3 ransomware trends to watch for in 2025

5 Active Malware Campaigns in Q1 2025

10 Best Event Monitoring Tools – 2025

16 Malicious Chrome Extensions Infected Over 3.2 Million Users

61% of Hackers Use New Exploit Code Within 48 Hours of Attack

100+ Malicious IPs Actively Exploiting Vulnerabilities in Cisco Devices

200 Malicious GitHub Repos Attacking Developers to Deliver Malware

2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT

A new Android feature is scanning your photos for 'sensitive content' - how to stop it

Akira claims ransomware attack on Australian engineering firm

Alleged Data Breach Targets IT Company

Australia bans Kaspersky antivirus software on all government systems

Avoiding vendor lock-in when using managed cloud security services

Background check and drug testing provider DISA Global Solutions reports data breach

Background check, drug testing provider DISA suffers data breach

Be careful! That legit PayPal email might be a phishing scam

Belarus-Linked Ghostwriter Uses Macropack-Obfuscated Excel Macros to Deploy Malware

Boys and Girls Clubs of the Tennessee Valley experiences data breach

Bybit hacker launders $250M in ETH—Still holds more than Vitalik

China-based Silver Fox spoofs healthcare app to deliver malware

Chinese-Backed Silver Fox Plants Backdoors in Healthcare Networks

Chinese Botnet Bypasses MFA in Microsoft 365 Attacks

CISA Warns of Actively Exploited Adobe ColdFusion and Oracle Agile PLM Vulnerabilities

CISA Warns of Oracle Agile Vulnerability Exploited in the Wild

Critical MITRE Caldera Vulnerability Let Attackers Execute Remote Code – PoC Released

Crypto and Cybersecurity: The Rising Threats and Why Reliable Wallets Matter

Cyber-attack lateral movement averages 27 minutes in 2024

Cybersecurity needs a leader, so let’s stop debating and start deciding

Dark Web Post Alleges Sale of Spanish Bank and Crypto Accounts

DISA data breach: Everything you need to know and steps to take

DOGE's US worker purge has created a spike in insider risk

Dragos finds ransomware attacks on industrial sector surge 87%, manufacturing hit hardest as OT targeting rises

Escalating OT/ICS cyber threats emerge with ransomware activity

EU sanctioned the leader of North Korea-linked APT groups

FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services

Firefox continues Manifest V2 support as Chrome disables MV2 ad-blockers

Genea says patient information may have been stolen during cyber attack on fertility IVF specialist

Ghostwriter Cyber-Attack Targets Ukrainian, Belarusian Opposition

GitVenom attacks abuse hundreds of GitHub repos to steal crypto

GitVenom Campaign Abusing Thousands of GitHub Repositories To Infect Users

GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets

Hackers Bypassing Outlook Spam Filter to Deliver Weaponized ISO Files

Hackers Exploit Fake GitHub Repositories to Spread GitVenom Malware

Home Depot denies rumors that it was hacked

How to create an effective incident response plan

Infini bank attack: hacker steals USDC 49.5 million and launders it on Tornado Cash

Intelligence mined from exposed Black Basta internal chats

Kaspersky reports nearly 900 million phishing attempts in 2024 as cyber threats increase

KernelSnitch – A New Side-Channel Attack Targeting Data Structures

Kewadin announces plans to reopen casinos weeks after ransomware attack

LightSpy Expanded With 100+ Commands to Attack Android, iOS, Windows, macOS & Linux Users

LightSpy Expands to 100+ Commands, Increasing Control Over Windows, macOS, Linux, and Mobile

Linux Grub Read Command Buffer Overflow Vulnerability Enabling Potential Secure Boot Bypass

Michigan Casino Chain To Reopen Following Ransomware Attack

Microsoft fixes Entra ID authentication issue caused by DNS change

New Auto-Color Linux backdoor targets North American govts, universities

New EU Sanctions Blacklist Russian and North Korean Cyber Operatives

One wrong SMS can wipe your savings, thanks to this Android Trojan

Only a Fifth of Ransomware Attacks Now Encrypt Data

Open source strikes back: Nextcloud Hub 10 challenges Big Tech’s monopoly on AI and privacy

Orange Group confirms breach after hacker leaks company documents

Orange Group Suffers Data Breach: Hacker Claims Theft of Thousands of Internal Documents

Poseidon Stealer Malware Attacking Mac Users via Fake DeepSeek Site

PowerSchool data breach: What does it mean for the educational sector?

Qualcomm & Google Tied Up to Offer Eight Years of Software and Security Updates

Quarter of Brits Report Deepfake Phone Scams

Ransomware attacks against industrial orgs up 87%

Research Jailbreaked OpenAI o1/o3, DeepSeek-R1, & Gemini 2.0 Flash Thinking Models

Russia warns financial sector organizations of IT service provider LANIT compromise

Siberia's largest dairy plant reportedly disrupted with LockBit variant

Sliver C2 Server Vulnerability Let Attackers Open a TCP connection to Read Traffic

Silver Fox APT Hides ValleyRAT in Trojanized Medical Imaging Software

SimonMed Imaging failed to protect patient information before ransomware attack, class action lawsuit claims

Swedish authorities seek backdoor to encrypted messaging apps

Television station Detroit PBS hacked, Qilin ransomware takes responsibility

The CISO’s dilemma of protecting the enterprise while driving innovation

The Sneaky New Phishing Scam Consumers Need to Watch For

Threat Actors Mimic Commander Tool for Windows to Deploy LummaC2 Malware

TSforge – A New Tool Exploits Every Version of Windows Activation

Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA

UAC-0212 Hackers Launching Destructive Attack Targeting Critical Infrastructure

UK Home Office’s new vulnerability reporting mechanism leaves researchers open to prosecution

U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog

US drug testing firm DISA says data breach impacts 3.3 million people

Why Apple's disabling of iCloud encryption in the UK is bad news for everyone

Windows 10 KB5052077 update fixes broken SSH connections

24/02

A data leak exposes the operations of the Chinese private firm TopSec, which provides Censorship-as-a-Service

A large botnet targets M365 accounts with password spraying attacks

Account takeover detection: There’s no single tell

AI can kill banks: Cybersecurity’s disinformation gap

Australia bans all Kaspersky products on government systems

Australia Bans Kaspersky Software Over National Security and Espionage Concerns

Australian National University confirms no ‘active ransomware threat’

Bangladesh Navy Allegedly Targeted in Data Breach

Becoming Ransomware Ready: Why Continuous Validation Is Your Best Defense

Botnet targets Basic Auth in Microsoft 365 password spray attacks

Bybit Offers $140m Bounty to Recover Funds After Mega Crypto-Heist

Bybit suffers record-breaking $1.5 billion cryptocurrency heist

DeepSeek Unveils FlashMLA, A Decoding Kernel That’s Make Things Blazingly Fast

Developing the foundations of resilience

Essential Addons for Elementor XSS Vulnerability Discovered

Exim Mail Transfer Vulnerability Let Attackers Inject Malicious SQL Queries

Expert warns universities and schools are ‘prime targets for cyber criminals’

Experts Slam Government After “Disastrous” Apple Encryption Move

Exploits for unpatched Parallels Desktop flaw give root on Macs

Fluent Bit 0-day Vulnerabilities Exposes Billions of Production Environments to Cyber Attacks

FM Logistic France Allegedly Suffers Data Breach, Employee Information Exposed

Google Cloud KMS Adds Quantum-Safe Digital Signatures to Defend Against Future Threats

Google Cloud Shields Data With Quantum-Resistant Digital Signatures

Google Unveils Quantum-Safe Digital Signatures in Cloud KMS

Hackers Exploited Confluence Server Vulnerability To Deploy LockBit Ransomware

Home Office investigates potential data breach involving British citizens

IT/OT Convergence Fuels Manufacturing Cyber Incidents

Major Australian IVF firm confirms breach, reveals potentially stolen patient data

Man vs. machine: Striking the perfect balance in threat intelligence

Massive botnet hits Microsoft 365 accounts

Massive Data Breach Allegedly Exposes Sensitive User Information from MeetNChill

Michigan Man Indicted for Dark Web Credential Fraud

Misconfig Mapper: Open-source tool to uncover security misconfigurations

Nagios XI Vulnerability Allows Unauthenticated Users to View Other User Details & Email

New Malware Campaign Uses Cracked Software to Spread Lumma and ACR Stealer

North Korean APT Lazarus Group blamed for Bybit Ethereum theft

North Korean hackers linked to $1.5 billion ByBit crypto heist

Op-Ed: Security alerts can cry wolf – and strain expert resources

OpenAI bans ChatGPT accounts used by North Korean hackers

OpenAI bans malicious North Korean, Chinese users

Parallels Desktop 0-Day Vulnerability Gain Root Privileges – PoC Released

PoC exploit for Ivanti Endpoint Manager vulnerabilities released (CVE-2024-13159)

PoC Exploit Released for F5 BIG-IP Command Injection Vulnerability

Record Breaking Crypto Hack – Attackers Stolen $1.46 Billion From Bybit Exchange

Russia warns financial sector of major IT service provider hack

SpyLend Android malware found on Google Play enabled financial cyber crime and extortion

Spylend malware downloaded from Google Play over 100,000 times

Strategic? Functional? Tactical? Which type of CISO are you?

The best password generator of 2025: Expert tested

UniFi Protect Camera Vulnerability Allows Remote Code Execution Attacks

US securities regulator to drop lawsuit against Coinbase, firm says

Victorian Police warns of scam campaign targeting Chinese-speaking community

Zero Day on Netflix: more marketing than true insights into large cyberattacks

Why AI deployment requires a new level of governance

Why Gmail is replacing SMS codes with QR codes - and what it means for you

Wireshark 4.4.4 Released With Fix for Vulnerability That Triggers DoS Attack

23/02

10 Best Email Security Gateways In 2025

Apple Faces Backlash After Massive ICloud Data Breach

Australian IVF giant Genea confirms a major cyber attack on its systems

BlackBastaGPT – A ChatGPT Powered Tool to Uncover Ransomware Group Tactics

Darcula Phishing Platform Set to Launch Advanced Version, Making Scams Easier Than Ever

Espionage Meets Ransomware: China-linked Actor Shifts to Financially Motivated Attacks

Google Cloud introduces quantum-safe digital signatures in KMS

HCRG Care Group investigating a major ransomware attack on its network

How to Defend Amazon S3 Buckets From Ransomware Exploiting SSE-C Encryption

Investigators Link $1.4B Bybit Hack to North Korea’s Lazarus Group

Massive leak exposes the inner workings of top ransomware syndicate Black Basta

Ransomware atacks in the Netherlands decline despite global increase

Top 10 Best Ransomware Protection Tools – 2025

Daily News - Fevereiro (16/02 - 22/02) - 08 Semana de 2025