Daily News - Março/Abril (30/03 - 05/04) - 14 Semana de 2025

Information & Cyber Security, Privacy and Hacking News --- Daily Updates !! Weekly Resume...

05/04

AI-generated Aadhaar, PAN cards spark debate on privacy, data breach

Australian Super Funds Hit by Major Cyber Attack: What Members Need to Know

Can AI Outsmart Ransomware 2.0 Before It’s Too Late?

Chinese hacker identified in Taiwan’s MacKay hospital ransomware attack, CIB reports

City Of Chattanooga Affected By Nationwide Recovery Services Data Breach

“Clipboard Hijacking” A Fake CAPTCHA Leverage Pastejacking Script Via Hacked Sites To Steal Clipboard Data

“Gay Furry Hacker” group’s former leader may have been raided by FBI

Hackers Intensify Crypto Scams with 83% More Attacks detected in 2024: Kaspersky report

How to be alert to investor risks from SMS phishing scams

“IngressNightmare” Critical RCE Vulnerabilities in Kubernetes NGINX Clusters Let Attackers Gain Full Control

Kellogg’s Confirms Data Breach Affected Servers that Sent Files to Human Resources

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

Maryland pharmacist used keyloggers to spy on coworkers for a decade, victim alleges

MGM Resorts Reaches $45 Million Settlement With FTC Over Data Breach

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

Protect Your Investments: Top Tips to Dodge SMS Phishing Scams!

Scam Emails Explained: How to Protect Yourself from Phishing and Fraud

Sec-Gemini v1 – Google Released a New AI Model for Cybersecurity

Sophos Reveals Key Findings: 56% of Cyberattacks Exploit Valid Credentials

Taiwan Hospital Ransomware Attack: Chinese Hacker Unveiled

Top Cybersecurity Concerns in 2025: Key Statistics You Must Know

WinRAR flaw bypasses Windows Mark of the Web security alerts

04/04

1.5 Million Explicit Images Leaked From Dating Apps, Including BDSM And LGBTQ+ Platforms

30 Best Cyber Security Search Engines In 2025

39M secrets exposed: GitHub rolls out new security tools

$500,000 stolen in Australian super fund data breach

7 password rules security experts live by in 2025 - the last one might surprise you

16 months after they experienced a ransomware attack, Dameron Hospital notifies those affected

AI is now better than humans at phishing

AI programming copilots are worsening code security and leaking more secrets

Apache Parquet users warned of maximum risk security flaw, told to patch now

April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft

Australia's data breach costs hit record AUD $4.26m

Australia's largest pension funds hit by hackers, thousands of dollars stolen

Australian pension funds hit by wave of credential stuffing attacks

AustralianSuper, Rest, ART Among Victims in Widespread Superannuation Cyberattacks

Benefits from privacy investment are greater than the cost

Beware of Fake Unpaid Toll Message Attack to Steal Login Credentials

Beware of Weaponized Recruitment Emails that Deliver BeaverTail and Tropidoor Malware

Businesses are losing millions to fraud every year

CA man blackmailed young girls to make violent porn for ‘764’ online network, FBI says

CERT-UA reports attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware

CERT-UA Reports Cyberattacks Targeting Ukrainian State Systems with WRECKSTEEL Malware

Chinese State Hackers Exploiting Newly Disclosed Ivanti Flaw

Chinese threat actor jumps on misdiagnosed RCE in Ivanti VPN appliances

CISA Adds Actively Exploits Ivanti Connect Secure Vulnerability in Known Exploited Catalog

City of Chattanooga says it was also affected by data breach

Closing the Cybersecurity Skills Gap: A New Perspective on Career Paths

Connected cars drive into a cybersecurity crisis

Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code

Critical flaw in Apache Parquet’s Java Library allows remote code execution

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

Cyber Agencies Warn of Fast Flux Threat Bypassing Network Defenses

Cyber attacks target Australian superannuation funds, members report account lockouts and missing funds

Data compromise confirmed by Highline Public Schools

DDoS attack cripples Dutch hosting company Argeweb for over a week

DDoS Attacks Now Key Weapons in Geopolitical Conflicts, NETSCOUT Warns

DeepSeek-R1 Prompts Abused to Generate Advanced Malware and Phishing Sites

EncryptHub Ransomware Unmasked Using ChatGPT & OPSEC Mistakes

Europcar GitLab breach exposes data of up to 200,000 customers

FBI, CISA warns of new Fast Flux DNS evasion being used by cyber gangs

Forward-thinking CISOs are shining a light on shadow IT

Free VPN apps linked to Chinese military: over 70 million downloads

Go phish: Why the sudden rise in phishing attacks?

Hackers abuse Tax Day lure to steal credentials and deploy malware

Hackers use Booking.com scam to hijack hotels

Head of NSA and US Cyber Command abruptly ousted: what happened?

Health provider recovering from 'cyber-attack'

How security teams can manage shadow APIs

How UK Firms Can Transform Cybersecurity Recruitment and Retention

Hunters International rebrands away from ransomware

Inside the AI-driven threat landscape

Insignia platform breached amid ‘unsettling’ super sector cyber attack

Ivanti Connect Secure RCE Vulnerability Actively Exploited in the Wild – Apply Patch Now!

Ivanti patches serious Connect Secure flaw

Lawmakers seek to close loophole limiting Secret Service investigations into cyber laundering

Life University Confirms Data Breach Following July 2024 Cybersecurity Incident

LiUNA Announces Data Breach Following Confirmed Ransomware Attack

Mass Data Leak of 2.8 Billion X and Twitter User Profile May Have Been Work of Disgruntled Former Employee

Medusa Rides Momentum From Ransomware-as-a-Service Pivot

Minnesota Tribe Struggles After Ransomware Attack

Nevro Files Notice of Data Breach Affecting Confidential Consumer Information

New PoisonSeed Attacking CRM & Bulk Email Providers in Supply Chain Phishing Attack

OPSEC Failure Exposes Coquettte's Malware Campaigns on Bulletproof Hosting Servers

OPSEC lapse reveals hub for amateur cybercriminals

Oracle quietly confirms to customers that breach was of ‘legacy’ environment

PoisonSeed phishing campaign behind emails with wallet seed phrases

Port of Seattle says ransomware breach impacts 90,000 people

President Trump fired the head of U.S. Cyber Command and NSA

Ransomware: The Final Frontier

Royal Mail investigates data leak

SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack

State Bar of Texas confirms data breach following ransomware gang's claims

Texas State Bar hit by possible ransomware attack, warns of data breach

Tj-actions Supply Chain Attack Traced Back to Single GitHub Token Compromise

Too little budget for OT security despite rising threats

Top 10 Best Password Managers in 2025

Top 20 Best Endpoint Management Tools – 2025

Top Dems, industry pros, express concerns over firing of NSA Director Timothy Haugh

03/04

7 ways to get C-suite buy-in on that new cybersecurity tool

Age verification for porn sites required by UK watchdog despite cybersecurity concerns

AI Adoption in the Enterprise: Breaking Through the Security and Compliance Gridlock

AI coding sounds great, until you realize it breaks, and leaks everything

AI disinformation didn’t upend 2024 elections, but the threat is very real

AI Image Site GenNomis Exposed 47GB of Underage Deepfakes

AI Threats Are Evolving Fast — Learn Practical Defense Tactics in this Expert Webinar

Alleged Data Leak Targets Indonesian Ministry of Transportation

AutonomyAI Emerges from Stealth with $4M Pre-Seed Funding to Transform Front-End Development with Autonomous AI Agents

Beware fake AutoCAD, SketchUp sites dropping malware

Building a cybersecurity strategy that survives disruption

Businesses still haven’t stopped using weak passwords, and it’s getting super risky

Chinese hacker targeting hospital identified: police

CISA’s Latest Advisories Expose High-Risk Vulnerabilities in Industrial Control Systems

Crooks target Spotify and Apple Music to attack users

Cybercriminals exfiltrate data in just three days

DDoS attacks are becoming a critical tool in geopolitical battles

Do I really need antivirus for Windows 11?

Dodgy Android smartphones are being preloaded with Triada malware

Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation

Evasive 'fast flux' technique is latest national security threat, CISA warns

FBI: scammers stealing tax returns from thousands of Americans

GenAI bots could well be scraping your web apps, researchers warn

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Hacker Claims Twilio’s SendGrid Data Breach, Selling 848,000 Records

Hacker expõe dados de mais 270 mil clientes da Samsung

Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores

Hamilton County investigates data breach affecting 14,000 ambulance customers

How attackers exploit Microsoft 365 from the inside – and what to do about it

How to Recover Deleted Photos from an iPhone

Identity Management Day focuses on digital security future

Infected 4G/5G routers secretly send SMS messages and drain accounts

Kaspersky discovers & patches zero-day Chrome flaw

Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost Malware

Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign

Microsoft adds hotpatching support for Windows 11 enterprise users as it looks to end unnecessary downtime for work devices

Nearly 600 Phishing Domains Emerge Following Bybit Heist

New Triada Trojan comes preinstalled on Android devices

NSA: ‘Fast Flux’ DNS evasion technique now a national security threat

Old Stripe APIs are being hijacked for credit card skimmer attacks

Open-source malware doubles, data exfiltration attacks dominate

Oracle admits second major security breach, user login data stolen

Oracle tells clients of second recent hack, log-in data stolen, Bloomberg News reports

Over Half of Attacks on Electricity and Water Firms Are Destructive

Phishers are increasingly impersonating electronic toll collection companies

ProtectEU Is Here – But Can It Really Protect Europe from Rising Security Threats?

Royal Mail investigates potential data breach following leak of 144GB of stolen data

Royal Mail investigating possible data breach after supplier targeted

Russia captures Ukraine drone infected with malware, according to video

Scallywag ad-fraud operation generated 1.4 billion ad requests per day

Scam Kill Chain – what is it, and how can it help fight cybercrime?

Secure Ideas Achieves CREST Accreditation and CMMC Level 1 Compliance

Sensitive Data Breached in Highline Schools Ransomware Incident

Sensitive Data From Parking Payment Platform Allegedly Leaked

Sonatype reports rise in open source malware to 17,954

Sophos report highlights urgency of active cyber defence

T-Mobile's $25,000 data breach payouts begin this month - how to check your eligibility

The front lines at home: Small business cybersecurity must be a national priority

Threat Actor Claims to Sell Sensitive Information Belongs to BajajCapital

ThreatAware unveils Version 3.0 of its cyber security platform

Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices

Trump’s Signalgate proves, once again, that human error is still the number one cybersecurity threat

UK Announces Stricter Cyber Reporting Rules for Critical Infrastructure

Veterans are an obvious fit for cybersecurity, but tailored support ensures they succeed

Verizon security flaw could allow hackers to view entire call history

Want AI to work for your business? Then privacy needs to come first

Watch out - those PDFs lurking in your inbox could be a major security risk

Why you should replace your Kaspersky antivirus

02/04

5 Questions CISOs Should Ask Third-Party Vendors

10 best practices for vulnerability management according to CISOs

20,000 WordPress Sites at Risk of File Upload & Deletion Exploits

Alleged Access to Mexican Territorial Operating System Exposes Thousands of Records

Alleged Data Breach of Thailand Post Exposes 19M Records

Apple backported fixes for three actively exploited flaws to older devices

Apple Backports Zero-Day Patches to Older Devices in Latest Security Update

Apple Fined $162 Million by France Authorities for Mobile Ad Market Domination

Australian and Philippine law enforcement cracking down on scam centre ‘boiler rooms’

Balancing data protection and clinical usability in healthcare

BlueToolkit: Open-source Bluetooth Classic vulnerability testing framework

Bybit Heist Fuels Record Crypto-Theft Surge, Says CertiK

Canon Printer Drivers Flaw Could Let Hackers Run Malicious Code

ChatGPT is down worldwide with something went wrong error

CISA Alerts on Active Exploitation of Apache Tomcat Vulnerability

Cisco warns of CSLU backdoor admin account used in attacks

Clicked on a phishing link? Take these 7 steps ASAP to protect yourself

Counterfeit Android devices found preloaded with Triada malware

Devastating security failure hits “Gay Daddy” dating app: 50K users exposed

DOGE official at DOJ bragged about hacking, distributing pirated software

DragonForce Claims to Be Taking Over RansomHub Ransomware Infrastructure

Evolving strategies essential amidst AI-driven cyber threats

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites

Firefox 137 Launches with Patches for High-Severity Security Flaws

France fines Apple €150 million for abusing market dominance through App Tracking Transparency

GitHub expands security tools after 39 million secrets leaked in 2024

Google Cloud Platform Vulnerability Exposes Sensitive Data to Attackers

Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse

Google Introduces End-to-End Encryption for Gmail Business Users

Google is making sending end-to-end encrypted emails easy

Google warns North Korean spies are gaining positions in Western firms

Gootloader Malware Spreads via Google Ads with Weaponized Documents

Gray Bots Surge as Generative AI Scraper Activity Increases

Hacker Leaks 144GB of Royal Mail Group Data, Blames Supplier Spectos

Hackers are using QR codes to steal your login info – and it’s working

Hackers Exploit JavaScript & CSS Tricks to Steal Browsing History

Hackers Exploit Microsoft Teams Messages to Deliver Malware

Hackers Exploiting Vulnerabilities in SonicWall, Zoho, F5 & Ivanti Systems

Hackers Hijack Telegram Accounts via Default Voicemail Passwords

Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers

Houston Housing Authority reports data breach affecting over 30,000 Texans

How SSL Misconfigurations Impact Your Attack Surface

How to map and manage your cyber attack surface with EASM

ICO Apologizes After Data Protection Response Snafu

Kidflix pedo platform boasting millions of users shut down by Europol, dozens arrested

KillSec claims ransomware attack on Qld IT services firm Hexicor

LinkedIn user prompts ChatGPT to create fake passport

Malicious actors increasingly put privileged identity access to work across attack chains

Massive 2.9B-user Twitter leak less serious than feared

Microsoft adds hotpatching support to Windows 11 Enterprise

More than half of Australian businesses are already using agentic AI

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

New Outlaw Linux Malware Using SSH brute-forcing To Maintain Botnet Activities for long Time

North Korea IT Workers Expand Their Employment Across Europe To Infiltrate the Company Networks

North Korean IT workers set their sights on European organizations

North Korea's Fake IT Worker Scheme Sets Sights on Europe

Only 1% of malicious emails that reach inboxes deliver malware

Oracle relata segundo ataque hacker em um mês, dados de login de clientes roubados

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

Over $1.5 billion of crypto was lost to scams or theft in just three months of 2025

Palo Alto Networks gateways facing huge number of possible security attacks

Police shuts down KidFlix child sexual exploitation platform

Prince Ransomware – An Automated Open-Source Ransomware Builder Freely Available on GitHub

Python Introduces New Standard Lock File Format for Enhanced Security

QR Code Phishing (Quishing) Attack Your Smartphones To Steal Microsoft Accounts Credentials

Romanian Security Firm Allegedly Breached Affecting 586K Customers

Royal Mail confirms cyber attack resulting from third-party provider Spectos

Royal Mail Investigates Data Breach Affecting Supplier

Royal Mail investigates data leak claims, no impact on operations

Russian railway outage a suspected tit-for-tat Ukrainian cyber attack

Spike in Palo Alto Networks scanner activity suggests imminent cyber threats

Startup aims to end phishing: what’s behind bold claims?

Steam Surges to Top of Most Spoofed Brands List in Q1

Stripe API Skimming Campaign Unveils New Techniques for Theft

Thailand Enhances Cyber Resilience with AI-Powered Security Measures

The American View: AI Surveillance in Schools – Safety Net or Privacy Nightmare?

The industry speaks: World Cloud Security Day 2025

The Reality Behind Security Control Failures—And How to Prevent Them

Thousands of PostgreSQL servers are being hijacked to mine crypto

U.S. CISA adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog

When it comes to security, public Wi-Fi could be a risky choice for commuters worldwide

Your smart home may not be as secure as you think

01/04

6 hard-earned tips for leading through a cyberattack — from CSOs who’ve been there

400GB of X (Twitter) Data Allegedly Leaked by Threat Actors on Hackers Forums

24,000 unique IP addresses target PAN-OS GlobalProtect gateways

173,000 Patients Affected by Chord Specialty Dental Partners Email Data Breach

A key WordPress feature has been hijacked to show malicious code, spam images

AI, Data Protection, and Governance: Key Pillars for the Future of Business

Akira Ransomware Group Claims Cyberattack on Spain’s STE Group and Exfiltrating 30GB of Data

Alleged Schneider Electric data posted following November ransomware incident

American cyber brass calls for retaliatory strikes against China, but is the US really ready?

Apple Backports Critical Fixes for 3 Recent 0-Days Impacting Older iOS and macOS Devices

Apple backports zero-day patches to older iPhones and Macs

Apple Fined €150 Million by French Regulator Over Discriminatory ATT Consent Practices

Apple fined €150 million over App Tracking Transparency issues

Apple Warns of Three 0-Day Vulnerabilities Actively Exploited in Attacks

Attackers are probing Palo Alto Networks GlobalProtect portals

Attackers are targeting CrushFTP vulnerability with public PoC (CVE-2025-2825)

Ataque hacker prejudica pacientes que lutam contra o câncer

California Cryobank faces class action suit over 2024 data breach

Canon CVE-2025-1268 Vulnerability: A Buffer Overflow Threatening Printer Security

Change in tactics: Danish courts send two digital pirates straight to prison

Check Point Acknowledges Data Breach, Claims Information is ‘Old

Check Point denies severity of alleged data breach amid hacker claims

China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions

Chord Specialty Dental Partners Data Breach Exposes Customer Personal Data

CIOs and CISOs need a common strategy around AI copilots

CISA Warns of Cisco Smart Licensing Utility Credential Vulnerability Exploited in Attacks

Critical auth bypass bug in CrushFTP now exploited in attacks

CrushFTP CVE-2025-2825 flaw actively exploited in the wild

CrushFTP Vulnerability Exploited in Attacks Following PoC Release

Cyber attack impacts operations at South Africa's top poultry supplier Astral Foods

Cyber Security and Resilience Bill Will Apply to 1000 UK Firms

Cybercriminals Expand Use of Lookalike Domains in Email Attacks

EncGPT – AI-agent that Dynamically Generates Encryption & Decryption Rules

Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform

Fashion firm found at fault for data breach

FBI investigating cyberattack at Oracle, Bloomberg News reports

Florida Department of State data breach may have exposed information of 500,000 people

Former GCHQ Intern Pleads Guilty to Smuggling Top Secret Data

France’s antitrust authority fines Apple €150M for issues related to its App Tracking Transparency

Generative AI Is reshaping financial fraud. Can security keep up?

Gig platform app Yoojo leaks millions of user files

Google adds feature to send end-to-end encrypted emails to anyone

Google rolls out easy end-to-end encryption for Gmail business users

Google says easy email encryption is on the way - for some users

Google to Switch on E2EE for All Gmail Users

Hacker Claims Breach of Check Point Cybersecurity Firm, Sells Access

Hackers Scanning From 24,000 IPs to Gain Access to Palo Alto Networks GlobalProtect Portals

Hiding WordPress malware in the mu-plugins directory to avoid detection

HijackLoader With New Modules to Hide Functions & Detect Malware Analysis

How to build an effective cybersecurity simulation

How to disable ACR on your TV (and why doing makes such a big difference for privacy)

How to talk to your family and friends about online security - before it's too late

Identiverse 2025: Your map to navigate the future of identity security

Infostealer malware poses potent threat despite recent takedowns

Ivanti products targeted by dangerous malware yet again

Kentico Xperience CMS XSS Vulnerability Let Attackers Execute Remote Code

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing

Microsoft has its AI-powered Security Copilot discover a whole host of previously unknown vulnerabilities

Microsoft revamps its blue screen of death for Windows 11

Microsoft Teams Vishing Used to Deploy Malware via TeamViewer

Microsoft Uncovers Several Vulnerabilities in GRUB2, U-Boot, Barebox Bootloaders Using Copilot

Moscow Metro Digital Outage: Alleged Cyberattack or Technical Failure?

Moscow Metro targeted in likely retaliatory cyberattack

Mysterious Disappearance of Cybersecurity Expert Xiaofeng Wang and Wife Triggers FBI Raids

Nearly 24,000 IPs behind wave of Palo Alto Global Protect scans

Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign

New Case Study: Global Retailer Overshares CSRF Tokens with Facebook

New naming convention for threat actors unveiled: they're sh*ts

New Phishing Attack Combines Vishing and DLL Sideloading Techniques

New South Wales police investigating online court registry data theft

Oracle Health data breach possibly compromised millions of patients' data

Oracle Hit with Lawsuit Over Alleged Cloud Breach Affecting Millions

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

Plantronics Hub Vulnerability Let Attackers Escalate Privileges

Rockwell Automation Vulnerability Let Attackers Gain Access to Run Arbitrary Commands

Royal Mail customer data stolen in massive attack, hackers claim

Samsung Data Leak – Threat Actors Leak 270,000 Customers Tickets Data

Samsung Germany customer data exposed in credential breach linked to third-party vendor

The human side of insider threats: People, pressure, and payback

Top 3 Techniques To Improve Threat Hunting In Your Company

Top API testing firm APIsec exposed customer data during security lapse

Ukraine Blames Russia for Railway Hack, Labels It "Act of Terrorism"

VMware Aria Operations Vulnerability Exposes Systems to Privilege Escalation Attacks

Walmart’s Sam’s Club claimed by Cl0p ransomware gang

Why global tensions are a cybersecurity problem for every business

Why multi-factor authentication is absolutely essential in 2025

Windows 11 PC won't boot? Microsoft's new tool tries to fix it before you even panic - here's how

World Backup Day: Why Human Error Remains the Biggest Threat to Data Protection

Wordpress Ultimate CSV Importer Flaws Expose 20,000 Websites to Attacks

31/03

5 Impactful AWS Vulnerabilities You're Responsible For

20 Best Remote Monitoring Tools – 2025

65% of the 100 largest US hospitals and health systems have had a recent data breach

200 Million X User Records Released — 2.8 Billion Twitter IDs Leaked

A fake Zoom app is spreading – and it’s harvesting your data

A ransomware attack through an IP camera

ABYSSWORKER: Malicious driver disables security tools

AI promises to create a ‘SIEM Renaissance’ in the SOC

API testing firm APIsec exposed customer data during security lapse

Brasil realizou ataque hacker contra governo do Paraguai, diz site

Brasil teria feito ataque hacker contra o Paraguai para obter dados sigilosos

Bromley man accused of cyber attack on trains to 'incite religious hatred'

Browser-native ransomware threat examined

Canada launches breach risk self-assessment online tool

Cannon Printer Vulnerability Let Attackers Execute Arbitrary Code

CISA, FBI warn healthcare, other critical sectors about Medusa ransomware

CISA reveals new malware variant used on compromised Ivanti Connect Secure devices

ClickFake Interview Campaign by Lazarus Targets Crypto Job Seekers

ClickFake Interview – Lazarus Hackers Exploit Windows and macOS Users Fake Job Campaign

CoffeeLoader uses a GPU-based packer to evade detection

Coinbase user may have lost 400 BTC to scammers – investigator

Coinbase users hit by $46M in suspected phishing scams — ZachXBT

Combating Australia’s cyber crime

Contractor Brighton Australia listed on SafePay's ransomware leak site

Critical PHP Vulnerability Let Hackers Bypass the Validation To Load Malicious Content

Cybersecurity M&A Roundup: Google Agrees $32bn Wiz Acquisition

Daisy Cloud Hacker Group Exposed 30K Login Credentials Across a Wide Range of Services

DarkCloud – An Advanced Stealer Malware Selling Via Telegram To Steal Data From Windows

Department of Justice (DOJ) charges hacker for 2021 Texas GOP website defacement

Earth Alux Hackers Employ VARGIET Malware to Attack Organizations

EU Commission to Invest €1.3bn in Cybersecurity and AI

Ex-GCHQ employee pleads guilty to secret data breach risking national security

Exegol: Open-source hacking environment

Fake Zoom installer tries to trick users into installing dangerous ransomware – here’s how to stay safe

Gen Z’s Rising Susceptibility to Social Engineering Attacks

GenAI turning employees into unintentional insider threats

Georgia Urology Notifies Patients of Data Breach Following Compromised Employee Email Accounts

Governo brasileiro nega ação hacker contra governo do Paraguai

Governo nega envolvimento com ataque hacker da Abin ao Paraguai

Hacker Leaks Samsung Customer Data

Hackers abuse WordPress MU-Plugins to hide malicious code

Hackers broke Google’s AI. Here’s how they did it

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

Hackers Used Weaponized Zoom Installer to Gain RDP Access & Deploy BlackSuit Ransomware

Hewlett Packard RCE Vulnerability Allows Attackers to Bypass Authentication and Execute Remote Commands

How CISOs can balance business continuity with other responsibilities

How to recognize and prevent deepfake scams

KnowBe4 Report Finds Polymorphic Phishing Features Present in 76.4% of Campaigns

Konni RAT Exploit Windows Explorer To Launches a Multi-Stage Attack in Windows

Major dating app data breach may have exposed 1.5 million private user images online

Microsoft Removes bypassnro.cmd in Windows 11 Insider To Stop Users from Installing OS Without MS Account

Morphing Meerkat phishing kits exploit DNS MX records

Multiple Dell Unity Vulnerabilities Let Attackers Compromise Affected System

NCSC Urges Users to Patch Next js Flaw Immediately

New Android Banking Trojan Targets More Than 750 Financial and Crypto Apps

New Malware Variant RESURGE Exploits Ivanti Vulnerability

New Ubuntu Security Bypasses Allow Attackers to Exploit Kernel Vulnerabilities

North Korean hackers adopt ClickFix attacks to target crypto firms

Only 2-5% of application security alerts require immediate action

Op-Ed: Paving a pathway to better Australian cyber security preparedness

Oracle Health suffers major breach, hospital data potentially exposed

Russia-linked Gamaredon targets Ukraine with Remcos RAT

Russia-Linked Gamaredon Uses Troop-Related Lures to Deploy Remcos RAT in Ukraine

Russian Hackers Using Russia-Based Bulletproof Network to Switch Network Infrastructure

Sam’s Club investigates possible C10p ransomware breach

Samsung in trouble: data of 270,000 customers dumped online

The CSO guide to top security conferences

Threats Actors Hide Malware in WordPress Websites to Execute Code Remotely

Triton RAT Leveraging Telegram To Remotely Access & Control Systems

Two things you need in place to successfully adopt AI

US Seizes $8.2m from Romance Baiting Scammers

Windows 11 quick machine recovery: Restoring devices with boot issues

World Backup Day: Why Backup Isn't Enough in the Age of AI and Data Exfiltration

30/03

Aeroporto internacional da Malásia sofre ataque e hackers exigem R$ 10 milhões

CISA warns of RESURGE malware exploiting Ivanti flaw

Growing threat of 'quishing' in Philippines

Hacker Group Anonymous Claims Cyber Offensive Against Turkish Government

Kink and LGBT dating apps exposed 1.5m private user images online

Microsoft's killing script used to avoid Microsoft Account in Windows 11

Microsoft tests new Windows 11 tool to remotely fix boot crashes

New Crocodilus malware steals Android users’ crypto wallet keys

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

!!! Semana Anterior !!!

Daily News - Março (23/03 - 29/03) - 13 Semana de 2025