Amsterdam, Netherlands, 17th March 2025, CyberNewsWire
Posted by Rex Pan and Xueqin Cui, Google Open Source Security TeamIn December 2022, we released the open source OSV-Scanner tool, and earlier this year, we open sourced OSV-SCALIBR. OSV-Scanner...
Scammers are sending fake extortion and ransom demands while posing as ransomware gangs, including the notorious Cl0p ransomware.…
Following the success of the Neuro Nostalgia Hackathon that closed out in 2024, Hackathon Raptors has completed its…
Action Fraud reported a spike in social media and email account hacks in 2024, resulting in losses of nearly £1m
A supply chain attack on the widely used 'tj-actions/changed-files' GitHub Action, used by 23,000 repositories, potentially allowed threat actors to steal CI/CD secrets from GitHub Actions build...
Common Good Cyber has released a new mapping database designed to help NGOs find the security tools they need
As duties under the U.K.’s Online Safety Act (OSA) related to tackling illegal content came into force Monday, the internet watchdog, Ofcom, said it has launched a new enforcement program focused...
Researchers warn that popular open source software package tj-actions has been compromised
Here's what's been hot on the AI scene over the past 12 months, how it's changing the face of warfare, and how you can fight AI-powered scams
Microsoft says the March 2025 Windows cumulative updates automatically and mistakenly remove the AI-powered Copilot digital assistant from some Windows 10 and Windows 11 systems. [...]
Frankfurt am Main, Germany, 17th March 2025, CyberNewsWire
Frankfurt am Main, Germany, 17th March 2025, CyberNewsWire
A critical remote code execution (RCE) vulnerability in Apache Tomcat tracked as CVE-2025-24813 is actively exploited in the wild, enabling attackers to take over servers with a simple PUT request. [...]
The Indian - Computer Emergency Response Team (CERT-In) issued a critical vulnerability note, CIVN-2025-0048, detailing several vulnerabilities in the Rising Technosoft CAP back office...
The percentage of ICS computers on which malicious objects were blocked increased in eight regions. Regionally, the percentage ranged from 10.6% in Northern Europe to 31.0% in Africa.
Each Monday, the Tenable Exposure Management Academy will provide the practical, real-world guidance you need to shift from vulnerability management to exposure management. In our first blog in...
The percentage of ICS computers on which malicious scripts and phishing pages as well as ransomware were blocked continued to increase.
The Malaysia Computer Emergency Response Team (MyCERT) has reported several Drupal vulnerabilities within its AI module, specifically affecting versions prior to 1.0.5. This issue, outlined in a...
The Singapore Cyber Emergency Response Team (SingCERT) has issued a warning regarding the rise in fraudulent emails, with scammers impersonating officials from the Cyber Security Agency of...
In a digital landscape hungry for the next big thing in Artificial Intelligence, a new contender called DeepSeek recently burst... The post Bogus ‘DeepSeek’ AI Installers Are Infecting Devices...
A broad coalition drawn from across the ranks of Europe’s tech industry is calling for “radical action” from European Union lawmakers to shrink reliance on foreign-owned digital infrastructure and...
Written by: Truman Brown, Emily Astranova, Steven Karschnia, Jacob Paullus, Nick McClendon, Chris Higgins Executive Summary The Rise of Browser in the Middle (BitM): BitM attacks offer a...
Legacy VPN vulnerabilities continue to drive large-scale credential theft and administrative control, now amplified by AI-driven attacks and automation.
This is a weekly threat intelligence report review from RST Cloud. This week, we analysed 66 threat intelligence reports and compiled a concise summary of each report, along with the pertinent...
Did you know that 43% of cyberattacks target small businesses, yet only 14% are prepared to defend themselves?…
1. Overview In June 2024, the security company CheckPoint-Research (CPR) published a post on a security threat that used the Legacy Driver Exploitation technique. This attack mostly focused on...
A widespread phishing campaign has targeted nearly 12,000 GitHub repositories with fake "Security Alert" issues, tricking developers into authorizing a malicious OAuth app that grants attackers...
Evolving cyber threat landscapes have led to OT/ICS incident response priorities being under significant pressure. By stressing the... The post Strengthening OT/ICS incident response to address...
Cybercriminals are promoting malicious Microsoft OAuth apps that masquerade as Adobe and DocuSign apps to deliver malware and steal Microsoft 365 accounts credentials. [...]