Daily News - Março (23/03 - 29/03) - 13 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

29/03

5 Phone And Email Scams You Should Never Engage With Because They Can Compromise Your Data And Steal Your Info

BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability

ClickFix Captcha – A Creative Technique That Allow Attackers Deliver Malware and Ransomware on Windows

FBI investigates cyberattack at Oracle, patient records breached

'Foreign actors': Data breach exposes York County tax preparer's customer data

Gamaredon Hacker Group Using Weaponize LNK Files To Drop Remcos Backdoor on Windows

Hackers are now using AI to break AI – and it’s working

Hackers Leveraging DNS MX Records To Dynamically Create Fake Logins Mimic as 100+ Brands

Hellenic Open University Hit by Cyberattack, 813 GB of Personal Data Leaked on Dark Web

Mobile Banking Malware Surges 3.6 Times, Crypto Phishing Up 83%

Morphing Meerkat Phishing Operation Targets Users Worldwide

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

Police Warn of EZ-Link Scams That Stole S$156,000 from 97 Victims In March 2025

SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk

Twitter (X) Hit by 2.8 Billion Profile Data Leak in Alleged Insider Job

U.S. seized $8.2 million in crypto linked to 'Romance Baiting' scams

Walmart Owned Sam’s Club Investigates Clop’s Ransomware Claim

Walmart’s Sam’s Club claimed by Cl0p ransomware gang

28/03

7 AI Cybersecurity Trends For The 2025 Cybercrime Landscape

27,000 records in Australian fintech database were exposed

Addressing the growing complexity of cyber-security

Android financial threats: What businesses need to know to protect themselves and their customers

Arts Council England (ACE) apologises following ‘huge data breach’

Aussie property developer TOGA listed as ransomware victim on Akira leak site

Blacklock Ransomware Infrastructure Intruded to Uncover Their Planned Attacks

Browser-native ransomware may be the next billion-dollar threat

Cardiff's children's chief confirms data leak 2 months after cyber risk was 'escalated'

Challenges Facing the UK Government’s Proposed Ransomware Ban

CISA Warns of Google Chrome Zero-day Vulnerability Exploited in the Wild

Cloudflare Announces OpenPubkey SSH to Integrate Single-Sign-on With SSH

Cloudflare open sources OPKSSH to bring Single Sign-On to SSH

CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection

Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)

Critical sandbox escape flaw affects Firefox, Tor on Windows

CSG Consultants Sends Data Breach Letters Following Recent Cybersecurity Incident

Cybersecurity spending set to jump 12.2% in 2025

Darkweb actors claim to have over 100K of Gemini, Binance user info

Data Breach at Three Rivers Hospital Linked to CPS Solutions Email Compromise, Patients Offered Credit Monitoring

Data Breach Hits Pennsylvania’s Largest Workers and Teachers’ Union PSEA, Impacting over 500,000 People

FBI busts $1.5M Hamas-run crypto financing scheme used to fund terrorism

Former Health NZ IT worker 'not surprised' at data breach

France’s critical infrastructure under attack, political tensions to blame

French Department of Education sends phishing mail to 2.5 million students

Gemini, Binance Breach Claims Surface: Is Your Crypto Account Data at Risk?

GLPI Open-source ITSM Tool Vulnerability Let Attackers Inject Malicious SQL Queries

Hackers Abuse MailChimp Email Marketing Platform via Phishing, and Social Engineering Tactics

Hackers are after your router and other network devices, Eclypsium warns

Hacktivists gear up for coordinated attacks on Israel ahead of April 7

Healthcare’s alarming cybersecurity reality

How to create an effective crisis communication plan

Incruit Loses Lawsuit Over Data Breach Fine

Investigative Journalists in Serbia Hit by Advanced Spyware Attack

Kuala Lumpur Airport Suffered Cyberattack – Hackers Demanded US$10 Million Ransom

Morphing Meerkat PhaaS Platform Spoofs 100+ Brands

‘Morphing Meerkat’ spoofs 114 brands via DNS mail exchange records

Mozilla fixed critical Firefox vulnerability CVE-2025-2857

Mozilla Patches Critical Firefox Bug Similar to Chrome's Recent Zero-Day Vulnerability

Mozilla Releases Urgent Patch for Windows Users Following Exploited Chrome 0-Day

New FamousSparrow Malware Attacking Hotels & Engineering Companies to New Backdoor

New Lucid PhAAS Platform Leveraging RCS & iMessage to Bypass Detections

New ‘Lucid’ Phishing Platform Abuses iMessage, Android RCS to Slip Past Defenses

New South Wales (NSW) Attorney-General Cautions Domestic Violence Victims About Court Data Breach

New Ubuntu Linux security bypasses require manual mitigations

Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts

Pacific Residential Mortgage Confirms Data Breach Following Recent Ransomware Attack

Phishing-as-a-service operation uses DNS-over-HTTPS for evasion

Phishing Campaigns Target Anti-Kremlin Informants, Russian Citizens, and Ukraine Sympathizers

Phishing scam; Wisconsin Department of Transportation issues warning

PJobRAT Malware Campaign Targeted Taiwanese Users via Fake Chat Apps

PlayBoy Locker Ransomware Attacking Windows, NAS and ESXi Operating Systems

Post-quantum cryptography and the future of online safety

RansomHub’s EDRKillShifter Link With Other Well-Established Ransomware Gang’s – New Research

Redcurl Actors New Ransomware Exclusively Attacking Hyper-V Servers

Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA

Retail giant Sam’s Club investigates Clop ransomware breach claims

Russian Hackers Mimic as CIA to Steal Ukraine Defense Intelligence Data

SHELBY Malware Steal Data Abusing GitHub for Command-and-control Server

Solar Power System Vulnerabilities Could Result in Blackouts

StreamElements confirms data breach at former third-party provider

The most “pressing threat” to crypto is state-backed actors, Q1 data shows

The rising tide of ransomware – Essential strategies for cyber resilience, response and preparedness

Thousands of Australians just got their IDs and bank details exposed

Threat Actors Hacked 150,000 Sites to Link Chinese Gambling Sites

Threat Actors Trick Hotel Staff With Fake Booking.com Email to Gain System Access

Tor Browser 14.0.8 Released Emergency Update for Windows Users

Trump CISA Cuts Threaten US Election Integrity, Experts Warn

Ukraine state railway says online services partially restored after cyber attack

Weaponized Google Ads Attacking DeepSeek Users to Deliver Malware

27/03

6 million records allegedly stolen from Oracle Cloud

12 Cybercriminals Arrested Following Takedown of Ghost Communication Platform

46 new bugs in solar power inverters raise concerns over power grid stability

94% of financial services and banking orgs suffer cyber attack in last year as insider threat looms

634 Targets, 6 Million Records at Stake—Inside the UAE’s Cybersecurity Showdown

9,000 Highly Sensitive Court Documents Downloaded In Major NSW Data Breach

150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms

Alleged Data Breach Exposes Over 13M Indian Bank Users

APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware

Arkana Ransomware Group Claims Compromise of US Telecom Companies

Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)

At least 9,000 sensitive files leaked in major data breach of New South Wales court website, sparking police cybercrime investigation

Aussie Fintech Vroom Exposes Thousands of Records After AWS Misconfiguration

B1ack’s Stash MarketPlace Actors to Release 4 Million Stolen Credit Card Details for Free

Beware: cybercrooks turning away from malware to abuse your own software

Bitdefender uncovers the mysterious RedCurl ransomware group

Blacklock Ransomware Infrastructure Breached, Revealing Planned Attacks

Broadcom fixes authentication bypass flaw in VMware Tools for Windows

Chinese Hacker Group ‘FamousSparrow’ Resurfaces

Chinese Spy Group FamousSparrow Back with a Vengeance, Targets US

CISA Adds Sitecore CMS Code Execution Vulnerability to List of Known Exploited Vulnerabilities

CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices

Classiscam Actors Automate Malicious Websites To Steal Financial Data

Cloud Attacks Raises by Five Times Attacking Sensitive IAM Service Accounts

Cloud streaming hoster StreamElements confirms data breach following attack

CodeQLEAKED – GitHub Supply Chain Attack Allows Code Execution Using CodeQL Repositories

CoffeeLoader pretends to be ASUS software to steal your data

Crooks target DeepSeek users with fake sponsored Google ads to deliver malware

CrushFTP: Patch critical vulnerability ASAP! (CVE-2025-2825)

Cyber espionage group RedCurl unexpectedly deploys ransomware

Cyber insurance isn’t always what it seems

Cybersecurity pros really need to prioritize attending conferences and building community

Dangerous new CoffeeLoader malware executes on your GPU to get past security tools

'Discreto e inteligente': hacker de 22 anos por trás do MaxBuscas é preso

Dozens of solar inverter flaws could be exploited to attack power grids

Embargo ransomware group claims 300GB data theft from Alabama credit union

ETSI releases security standard for the quantum future

Europcar Allegedly Targeted in Dark Web Data Breach 37GB of Data Exposed

Exim Use-After-Free Vulnerability Allows Privilege Escalation

Fake Snow White Movie Torrent Infects Devices with Malware

G2 Names INE 2025 Cybersecurity Training Leader

GitHub User Data Allegedly Leaked on Dark Web Forum

GorillaBot Attacks Windows Devices With 300,000+ Attack Commands Across 100+ Countries

Hackers Abuse COM Objects for Fileless Malware Lateral Movements

Hottest cybersecurity open-source tools of the month: March 2025

Inside the Takedown of BlackLock Ransomware: Here’s How Resecurity Thwarted Their Operations

Malicious npm packages use devious backdoors to target users

More "unclassified" data spills under Waltz watch: US officials who use Venmo exposed

Mozilla introduces VPN extension with per-site IP controls

Mozilla warns Windows users of critical Firefox sandbox escape flaw

Multiple CVEs Found in Ingress-NGINX—Patch Now to Prevent Cluster Compromise

NCA Warns of Sadistic Online “Com” Networks

NCSC gets influencers to sing the praises of 2FA

NCSC Urges Domain Registrars to Improve Security

NetApp SnapCenter Flaw Could Let Users Gain Remote Admin Access on Plug-In Systems

New macOS Malware ‘ReaderUpdate’ Upgraded Arsenal With Nim and Rust Variants

New Report Explains Why CASB Solutions Fail to Address Shadow SaaS and How to Fix It

New Sophisticated Linux-Backdoor Attacking OT Systems Exploiting 0-Day RCE

New Sophisticated Malware CoffeeLoader Bypasses Endpoint Security to Deploy Rhadamanthys Shellcode

NHS IT supplier hit with major fine following ransomware attack

Notorious Chinese hackers FamousSparrow allegedly target US financial firms

Novel technique can unmask up to 70% of crooks hiding behind VPNs, proxies, Tor

NSW Online Registry Website Breach – 9,000+ Files Stolen by Hackers

NYU website defaced as hacker leaks info on a million students

OpenAI Bug Bounty Program Increases Top Reward to $100,000

OpenAI is upping its bug bounty rewards as security worries rise

OpenAI Offering Up to $100,000 for Critical Vulnerabilities in its Infrastructure

Pakistan APT Hackers Create Weaponized IndiaPost Website to Attack Windows & Android Users

PoC Exploit Released for Ingress-NGINX Remote Code Execution Vulnerabilities

Privacy disaster as LGBTQ+ and BDSM dating apps leak private photos

Recent Windows Server 2025 updates cause Remote Desktop freezes

RedCurl Uses New QWCrypt Ransomware in Hypervisor Attacks

Remote Control Cybercrime: An RMM Protection Guide for MSPs

SnapCenter Security Flaw Rated Critical—NetApp Urges Immediate Patch

Splunk RCE Vulnerability Let Attackers Execute Arbitrary Code Via File Upload

Spy satellite agencies will now surveil US Mexico border

STJ mantém prisão de hacker de 21 anos acusado de desviar R$ 6 milhões de fintech em SC

Sunflower Medical Group receives class action lawsuit over cyber security failings

Sydney Tools data leak exposes millions of customer and employee records

Synology Mail Server Let Remote Attackers Tamper System Configurations

The hidden costs of security tool bloat and how to fix it

These cybersecurity specialists are the most sought-after – report

Thousands of NSW court documents downloaded in "major data breach"

Threat Actors Using Powerful Cybercriminal Weapon ‘Atlantis AIO’ to Automate Credential Stuffing Attacks

Three Rivers Hospital suffers data breach, patient information compromised

Top 3 MS Office Exploits Hackers Use in 2025 – Stay Alert!

Up to 9000 sensitive court files leaked in major New South Wales data breach

U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog

USP está há 15 dias sem sistema; existe suspeita de ataque hacker

Vivaldi integrates Proton VPN into the browser to fight web tracking

Windows 11 January 2025 Preview Update Disconnects Remote Desktop Sessions

Windows Server 2025 Security Update Freezes Remote Desktop Sessions Connection

26/03

3 in 4 Enterprise Users Upload Data to GenAI Including Passwords and Keys

23andMe declares bankruptcy, security leaders discuss data concerns

41% of Ransomware Attacks Exploit Vendors

200 Unique Domains Used by Raspberry Robin Unveiled

A CISO’s guide to securing AI models

A large-scale hacker attack paralyzed the work of the Russian "Lukoil"

Abracadabra Cyberattack: How Hackers Drained $13M from DeFi Platform

AI-Powered Productivity or Security Nightmare? The Risks of Enterprise AI

Alleged Oracle Cloud Data Breach: rose87168 Claims to Have Stolen 6M Records

Appsmith Developer Tool Vulnerability Let Attackers Execute Remote Code

Arete’s annual crimeware report analyzes ransomware and extortion data from 2024

Ataque hacker afeta sistema e site do Tribunal de Justiça do RS

Atlético Madrid and Google team up to tackle cybercrime in sports

Authentication bypass CVE-2025-22230 impacts VMware Windows Tools

BlackLock Ransomware Targeted by Cybersecurity Firm

China-linked FamousSparrow APT group resurfaces with enhanced capabilities

Chrome Releases Critical Update to Address CVE-2025-2783 Vulnerability

Chrome users under attack: dangerous zero-day discovered

CISA Warns of Four Vulnerabilities, and Exploits Surrounding ICS

Cl0p resurgence drives ransomware attacks to new highs in 2025

Clevo Devices Boot Guard Private Key Exposed Via Firmware Update Packages

Cloudflare Attributes Recent Service Outage to Password Rotation Error

Columbia Eye Clinic reports data security incident potentially involving patient information

Critical NetApp SnapCenter Server Vulnerability Let Attackers Become an Admin User

CrushFTP HTTPS Port Vulnerability Leads to Unauthorized Access

Crypto Heist Suspect “Wiz” Arrested After $243 Million Theft

Decoding Hellcat: The Latest Nightmare In Ransomware Attackers

DrayTek Routers Vulnerability Exploited in the Wild – Possibly Links to Reboot Loop

DeFi platform loses $13M in an abracadabra hack

Dismantling of criminal-favored Ghost messaging app leads to major drug trafficking arrests

DOGE staffer, 'Big Balls', provided tech support to cybercrime ring

EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware

ENISA Probes Space Threat Landscape in New Report

ETSI Publishes New Quantum-Safe Encryption Standards

FacePass security lapse exposes users' identification data

Fake DeepSeek ads spotted on Google: all you’ll find are malware infections

Google Chrome Zero-day Vulnerability Exploited by Hackers in the Wild

Google confirms cyber ‘espionage’ attacks on Chrome users from ‘highly sophisticated malware’

Google fixed the first actively exploited Chrome zero-day since the start of the year

Google fixes Chrome zero-day exploited in espionage campaign

Google fixes exploited Chrome sandbox bypass zero-day (CVE-2025-2783)

Hackers behind massive broadband provider WOW! breach, Hudson Rock says

Hackers Target Counter-Strike 2 Players With Fake Steam Login Pop-Ups

Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms

Have I Been Pwned owner Troy Hunt’s mailing list compromised in phishing attack

Hezbollah Shifts To A Cyber Attack Strategy — And Puts Lebanon's Truce At Risk

How does your data end up on the dark web?

How PAM Mitigates Insider Threats: Preventing Data Breaches, Privilege Misuse, and More

If you think you’re immune to phishing attempts, you’re wrong!

Illinois Tollway warns residents about phishing texts. Here's what to know

Jaguar Land Rover reportedly targeted in major cyberattack, sensitive data stolen

Kaspersky warns of a ransomware gang that blackmails victims after publicly revealing their data

Leaked data exposes a Chinese AI censorship machine

Legal impact on cybersecurity in 2025: new developments and challenges in the EU

Malaysia Rejects $10 Million Ransom Demand After Cyberattack on Kuala Lumpur Airport

Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks

Malicious npm Packages Deliver Sophisticated Reverse Shells

Malwoverview: First response tool for threat hunting

Massive cyberattack hits Lukoil, banks, payment systems in Russia — media

Mercenary Hacking Group Appears to Embrace Ransomware

Microsoft: Recent Windows updates cause Remote Desktop issues

Microsoft Security VP Reveals Security Copilot's Agentic AI Transition

New Chrome Installer Breaks With Error “This App can’t Run on your PC” on Windows 10 & 11

New IOCONTROL Malware Attacking Critical Infrastructure to Gain Remote Access and Control

New NPM Attack Infecting Local Packages With Cleverly Hidden Malicious Payload

New npm attack poisons local packages with backdoors

New Security Flaws Found in VMware Tools and CrushFTP — High Risk, No Workaround

New Windows 0-Day Vulnerability Let Remote Attackers Steal NTLM Credentials – Unofficial Patch

North Korean Kimsuky Hackers New Tactics & Malicious Scripts in Latest Attacks

Ontinue reports 132% surge in ransomware attacks, with AiTM and PlugX RAT increasing as tactics shift

Operation ForumTroll – APT Hackers Exploit Google Chrome Zero-Day To Bypass Sandbox Protections

Oracle Cloud data breach: How safe is our data? What can be done to safeguard it?

Oracle Cloud Data Breach Validated by Security Experts, Affecting Over 140,000 Tenants

Oracle Cloud denies breach as hacker offers 6 million records for sale

Oracle customers confirm data stolen in alleged cloud breach is valid

Over 20% of commuting Americans say strangers peek at their devices in public

Over 75,000 people impacted in Lafayette Federal Credit Union data breach

Pentagon Issues Urgent Warning About Signal App Amid Russian Hacking Threat—Beware of Phishing Links

Polícia prende hacker do DF suspeito de vender dados do governo

Production Line Cameras Vulnerabilities Let Attackers Stop The Recordings

Ransomware incidents increase by 132%, vishing by 1,633%

RedCurl cyberspies create ransomware to encrypt Hyper-V servers

RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment

Rising attack exposure, threat sophistication spur interest in detection engineering

Secretive Chinese network tries to lure fired federal workers, research shows

SectopRAT as Weaponized Cloudflare Turnstile Challenge Attacks Windows Users

Security expert Troy Hunt hit by phishing attack

SecurityScorecard 2025 Global Third-Party Breach Report Reveals Surge in Vendor-Driven Attacks

Sparring in the Cyber Ring: Using Automated Pentesting to Build Resilience

The default TV setting you should turn off ASAP - and why you shouldn't wait to do it

The Expert View: Zero Trust Security – Safeguarding Data in a Dynamic World

Top 3 Cyber Attacks In March 2025

UK Government’s New Fraud Strategy to Focus on Tech-Enabled Threats

U.S. wheelchair maker Numotion says data breach impacted half a million customers

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks

Windows 11 24H2 Update Breaks Connection to the Veeam Backup Server

Windows 11 update breaks Veeam recovery, causes connection errors

Your Smart TV May Bring Down the Entire Network

YouTube Creators Under Attack via Brand Collaborators Requests Using Clickflix Technique

25/03

23andMe files for bankruptcy amid data breach and related lawsuits

602K Alleged Yahoo Data Leak Advertised on Dark Web Forum

A cyberattack hits Ukraine’s national railway operator Ukrzaliznytsia

A major Keenetic router data leak could put a million households at risk

AI Cyberattacks on the Rise: Are Australian Businesses Ready to Defend Themselves?

AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface

Alleged Data Breach at French Insurance Firm RCDPRO

Alleged Data Breach at Perrin Performance Surfaces on Dark Web Forum

Alleged Data Breach Claims Surface Against Thai Telecom Company TOT Mobile

Alleged Data Breach Claims Surface on Dark Web Targeting Stark Door

Alleged Data Breach Exposes Indian Voter Information on Dark Web

Alleged Data Breach Exposes Sensitive Information from Jakarta Health Department

Alleged Data Breach Exposes Thousands of Records on Dark Web

Alleged Data Breach Hits Ciba Cobertura Medica

Alleged Data Breach Hits Italian E-Commerce Site Eprice

Alleged Data Breach Hits Maxikits 500K Records Exposed

Alleged Data Breach of Mexican Citizen Information Exposed 1.8M Records

Alleged Data Breach at Ministry of Agriculture

Alleged Data Breach Puts Kuwaiti Government Email at Risk on Dark Web

Alleged Data Breach Targeting Indonesian Government Agency

Alleged Data Breach Targets Indian Company Interjet

Alleged Data Breach Target Indian Ministry of Culture

Alleged Data Breach Targets IT Company

Alleged Data Breach Targets Spanish Business Confederation

Alleged Data Breach: Threat Actor Claims to Sell 25 Million Truecaller Contacts from the USA

Alleged Data Dump: Threat Actor Claims to Release 4 Million Stolen Credit Cards

Alleged Data Leak Targets French Government Websites

Alleged Sale of Georgian Government Email Access Surfaces on Dark Web

Alleged Italian Government Email Advertised on Dark Web Forum

Alleged Threat Actor Claims to Sell Access to Saudi Medical Database on Dark Web

Alleged TP-Link Exploit for Sale on Dark Web

ARACNE – LLM-based Pentesting Agent To Execute Commands on Real Linux Shell Systems

Astral Foods, South Africa’s largest poultry producer, lost over $1M due to a cyberattack

Ataque hacker a hospital de BH deixa pacientes sem serviços

Bangladesh Navy Allegedly Targeted in Data Breach

Bosowa Berlian Motor Allegedly Breached

Brazilian Auction Platform Allegedly Breached

Brazilian Bank Sicoob Allegedly Breached by Threat Actor

Brydens Lawyers obtains injunction following February cyber incident

CAPE from Cuckoo v1 – Malware Sandbox to Execute Malicious Files in An Isolated Environment

China-Linked Weaver Ant Hackers Exposed After Four-Year Telco Infiltration

Chinese government hackers allegedly spent years undetected in foreign phone networks

Chinese Hackers Breach Asian Telecom, Remain Undetected for Over 4 Years

Critical security flaw in Next.js could spell big trouble for JavaScript users

Cybercriminal Allegations: “Prysmax Stealer v1.0.2” Advertised on Dark Web Forum

Cybersecurity Firm Uncovers Major Oracle Cloud Breach—Oracle Denies It

Dark Web Mentions of Malicious AI Tools Spike 200%

Dark Web Post Alleges Sale of 17B Stolen Credentials

Dark Web Post Alleges Sale of Spanish Bank and Crypto Accounts

Data Breach Allegedly Hits PTS News Website, Millions of Records Claimed Stolen

Data of 34M+ orders exposed in major Sydney Tools data leak

Data protection: Top trends in Backup and Recovery

Developers Beware! Fake Coding Challenges Will Deploy FogDoor on Your System

Digitel Venezuela Allegedly Targeted 7M Records Exposed

FBI Warns of File Convertor Tools Used to Deploy Ransomware

Federal Budget 2025: Cyber security loses out in pre-election budget

FM Logistic France Allegedly Suffers Data Breach, Employee Information Exposed

Football coach hijacks athletes' accounts and cloud storage to steal intimate images

Hackers stole over 125,000 individuals' data from St. Joseph’s College of Maine

Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social Apps

Hackers Using Fake Semrush Ads to Steal Google Accounts Login Credentials

Hatolna Allegedly Breached

HighWire Press Allegedly Breached 26M Records Exposed

Hong Kong Tightens Cyber Laws—What It Means for Businesses and Tech Investments

How AI agents could undermine computing infrastructure security

HTW Dresden’s Cloud Server Allegedly Breached 90GB of Sensitive Data Exposed

Indian Food Delivery Platform Allegedly Suffers Data Breach, Threat Actor Claims

Indian Sales & Logistics Platform Allegedly Breached

Indonesian Educational Platform Allegedly Targeted

Indonesian Firefighting Services Platform Allegedly Breached

Ingress NGINX Remote Code Execution Vulnerability Let Attacker Takeover Cluster

IngressNightmare: Four Critical Bugs Found in 40% of Cloud Systems

INTERPOL Arrests 306 Suspects, Seizes 1,842 Devices in Cross-Border Cybercrime Bust

INTERPOL-led operation Red Card leads to 306 arrests in major cybercrime crackdow

Interpol operation arrests 300 suspects linked to African cybercrime rings

Jaguar Land Rover Allegedly Breached

Japanese Betting Platform Allegedly Targeted in Dark Web Data Leak

Linux Kernel 6.14 Officially Released, What’s New

Malaysia Airports Hit by Cyberattack: Hackers Demand $10M Ransom

Massive Cyberattack Hits Ukraine Railways, Disrupting Online Ticket Sales

Massive Cyberattack Takes Down Ukrainian State Railway’s Online Services

Massive Data Breach Allegedly Exposes Sensitive User Information from MeetNChill

Massive Data Breach Allegedly Hits Investing.com, Threat Actor Claims 6.5 Million User Records Exposed

Massive OPSEC oversight: top-secret Yemen war plans sent to journalist on Signal

Microsoft Announces New Enhanced Protection Against AI & BYOD for Edge Business Users

Microsoft Unveils New Security Copilot Agents & Protections for AI

Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight

Multistage Info Stealer SnakeKeylogger Attacking Individuals and Businesses to Steal Logins

New Android malware uses Microsoft’s .NET MAUI to evade detection

New Malware Attacking Android Users Abusing Cross-Platform Framework For Evasion

New Phishing Attack Using Browser-In-The-Browser Technique To Attack Gamers

New Phishing Campaign Attacking Mac Users to Steal User Credentials

NIST Struggling To Clear the Growing Backlog of CVEs in the Official National Vulnerability Database

NoName057(16)Targets Water Supply System in Spain

North Korea-linked insider threats surged in 2024, according to new report

Novo ataque hacker? Site da Marinha sai do ar enquanto USP reforça cibersegurança

Oracle hack appears to be the real deal, despite the company’s denials

OT systems are strategic targets in global power struggles

Over 17,000 impacted in Cross Valley Federal Credit Union data breach

Papua New Guinea shuts down Facebook, but that won’t stop users

Ransomware Attack Hits Union County, Exposing Residents’ Personal Data

Research: Rooting Tools vs The Mobile Security Industry

Researchers Compared Malware Development in Rust vs C & C++ Languages

Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access Broker

Rilide Malware as Browser Extension Attacking Chrome & Edge Users to Steal Login Credentials

Russian crypto exchange popular among ransomware gangs is reborn two weeks after its crackdown

Russian hackers shut down major Belgian websites

Russian Railways Portal Allegedly Breached 570K Records Exposed

Security Onion 24.10 Released – What’s New

Service NSW to make MFA mandatory by 2026

Site da Marinha do Brasil fora do ar. Hacker assume autoria do ataque

Spring clean your security data: The case for cybersecurity data hygiene

Staying Safe with In-Game Skins: How to Avoid Scams and Malware

Tata AIG Allegedly Targeted in Massive Data Breach

This dangerous new ransomware is hitting Windows, ARM, ESXi systems

Threat Actor Claims Access to UAE Power Company’s Network

Threat Actor Claims to Have 2M Stolen Credit Card Records

Threat Actor Claims to Have Internal T-Mobile Contacts

Threat Actor Claims to Possess 10GB of Stolen Login Credentials

Threat Actor Claims Unprotected TensorFlow Database Exposes Sensitive Files Including Passwords

Threat Actor Sells Alleged South African and Angolan Government Emails

Trump administration accidentally leaks Yemen strike details in unauthorised Signal chat

Ukraine train network stunted by cyber attack

VanHelsingRaaS Strikes: Sinking Its Fangs into Windows, Linux, and More

Whistleblowers help Binance catch and suspend insider trader

Whittaker: “don’t be fooled by WhatsApp’s marketing fluff”

24/03

$5million worth of HYBE shares stolen from BTS’ Jungkook by hacker

23andMe files for bankruptcy, customers advised to delete DNA data

23andMe files for bankruptcy: what does this mean for customers’ DNA data?

56% of security teams say AI is crucial to daily operations

82% of all phishing emails utilized AI

A million Phishing-as-a-Service attacks in two months highlight a fast-evolving threat, Barracuda report

ABYSSWORKER: A New EDR-Killer in Medusa Ransomware Attacks

Access Financial Services addresses data breach from cybersecurity incident

AI bots scraping your data? This free tool gives those pesky crawlers the run-around

Astral Foods Hit by Cyberattack, Expects R20 Million Loss in Profits

Attackers can bypass middleware auth checks by exploiting critical Next.js flaw

Authorities Seize 1842 Devices in Africa’s Cybercrime Crackdown

Auto Insurer Root to Pay New York $975K Over Data Breach

Baidu executive's daughter leaked user data following an online spat

BYDFi Official Statement: Beware of Phishing Sites and Online Scam Risks

California AG Reminds 23andMe Customers of Data Deletion Rights Amid Bankruptcy Filing

Canary tokens: threat hunting with digital trip wires

Chinese APT Weaver Ant infiltrated a telco in Asia for over four years

Chinese Weaver Ant hackers spied on telco network for 4 years

CISOs are taking on ever more responsibilities and functional roles – has it gone too far?

Cloud providers aren’t delivering on security promises

Coinbase was Primary target in GitHub Attack: Cybersecurity firms

Critical flaw in Next.js lets hackers bypass authorization

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)

Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks

Cyber attack on Klickitat Valley Health compromised patients' sensitive information

Cyberattack takes down Ukrainian state railway’s online services

Cybercriminals advance with MEDUSA ransomware campaign

‘Dangerous’ hacking campaign that affected Windows systems is now targeting Mac users

DrayTek routers worldwide go into reboot loops over weekend

Did your Google Maps Timeline disappear? Here's the fix to get yours back

Enterprises walk a tightrope between AI innovation and security

Fake file converters are stealing info, pushing ransomware, FBI warns

FBI Warning for New York: Ransomware Hits Popular Email Services

FBI warns of malicious free online document converters spreading malware

Finders Keypers: Open-source AWS KMS key usage finder

Former University of Michigan Football Coach Indicted on Charges of Unauthorized Access and Identity Theft

Four Faces of Hacker Group Behind 90 Data Breaches Worldwide Revealed

Google Account Hijackers Target Victims Via Semrush Ads

Google timeline data loss: privacy win or user betrayal?

Hack or no hack? Oracle denies theft of 6 million records (update)

Hacker hits New York University (NYU) website, posts alleged test scores, GPAs based on race

Hackers Exploit Gamma AI to Create Sophisticated Microsoft Themed Phishing Redirectors

Hackers Exploiting Cisco CSLU Backdoor—SANS Calls for Urgent Action

Hackers steal sensitive data from Pennsylvania county during ransomware attack

Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks

How AI, corruption and digital tools fuel Europe’s criminal underworld

How to Balance Password Security Against User Experience

Hybrid Threats and AI: Shaping the Future of EU’s Organized Threat Landscape in 2025

Indonesian Police Arrest Two Chinese Nationals in SMS Phishing Scam

Industry leaders urge insurance sector to tackle escalating cyber threats

Intro to Deceptionology: Why Falling for Scams is Human Nature

Law enforcement managed to recover millions more from crypto scammers

Mac Users At Risk! Hackers Using Fake Security Warnings To Steal Apple Credentials: How To Stay Safe

Medusa ransomware deployed via malicious Windows driver

Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools

Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data Leaks

New Phishing Campaign Targets macOS Users with Fake Security Alerts

New phishing campaign uses scareware to steal Apple credentials

New VanHelsing ransomware targets Windows, ARM, ESXi systems

New VanHelsingRaaS Attacking Linux, BSD, ARM, and ESXi Systems

New York Police Department (NYPD) deploys more drones to 911 calls, privacy advocates are worried

Online file converters leveraged for malware distribution

Oracle Cloud breach may impact 140,000 enterprise customers

Oracle denies breach as threat actor claims sale of stolen cloud data

Orthodontic Practice Management Software Provider Announces Data Breach

Pennsylvania State Education Association announces data breach

Pentagon launches leak investigation amid Elon Musk controversy

Pocket Card Users Under Attack Via Sophisticated Phishing Campaign

Police arrests 300 suspects linked to African cybercrime rings

Pro-Russian hackers attack Belgian government websites

Ransomware-as-a-Service (RaaS): The new frontier of cybercrime

Ransomware hackers are desperate lying liars

Ransomware hits Virginia AG's office: 134GB of data leaked

South Africa’s Astral Foods flags sharp profit fall, reports cyber attack

Teen Boys at Risk of Sextortion as 74% Lack Basic Awareness

Trump shifts cyberattack readiness to state and local governments in wake of info-sharing cuts

UK organisations face significant rise in phishing threats

Ukraine Railway Systems Hit by Targeted Cyber-Attack

Unitree Go1 robot dogs can spy on you: secret backdoor discovered

University of Notre Dame Fremantle faces backlash following cyber attack

Unmasking Quishing: The rising threat of QR code-based phishing attacks

USP sofre ataque hacker e reforça rede virtual de segurança; PF investiga

VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, Multi-OS, and Double Extortion Tactics

VanHelsingRaaS Expands Rapidly in Cybercrime Market

Virginia Attorney General’s Office purportedly breached by Cloak ransomware

VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware

Why cyber resilience matters now more than ever

Widespread Keenetic Router Data Breach Uncovered

23/03

After Windows, hackers target Mac users in new Apple ID phishing scam

Ansible vs Terraform: Which is More Secure for Infrastructure Automation?

Choosing consequence-based cyber risk management to prioritize impact over probability, redefine industrial security

Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed

Hacker Claims Sale of 6 Million Records Stolen from Oracle Cloud Servers

Hacker steals 8.4 billion won in HYBE shares owned by BTS member Jungkook

Japan's NTT warns customers' data breach

More online casinos offline after data breach

New DICT chief urged to boost data breach management, digital infra

OpenAI Operator can perform phishing attacks autonomously

Oracle Denies Massive Data Breach as Hacker Claims to Sell Six Million Records

Telangana Cyber Security Bureau warns corporate companies of ‘impersonation scamsters’

Victims of a data breach may be eligible for a $1,500 settlement

Semana Anterior - Last Week

Daily News - Fevereiro (16/03 - 22/03) - 12 Semana de 2025