The March update keeps getting worse for Pixel phone users.
CISA says the Medusa ransomware operation has impacted over 300 organizations in critical infrastructure sectors in the United States until last month. [...]
Microsoft on Tuesday released security updates to address 57 security vulnerabilities in its software, including a whopping six zero-days that it said have been actively exploited in the wild. Of...
ASEC Blog publishes Ransom & Dark Web Issues Week 2, March 2025 New ransomware group SecP0 demands ransom for corporate vulnerabilities. Pro-Palestinian hacktivist group RipperSec claims DDoS...
Note This trend report on the deep web and dark web of February 2025 is sectioned into Ransomware, Data Breach, DarkWeb, CyberAttack, and Threat Actor. We would like to state beforehand that some...
On March 5, AhnLab SEcurity intelligence Center (ASEC) found a post recruiting students for a unification-related course, which included a link to download a malicious HWP document. At the time of...
The encrypted messaging app Signal has stopped responding to requests from Ukrainian law enforcement regarding Russian cyber threats, a Ukrainian official claimed, warning that the shift is aiding...
It’s easy for Enterprise architect Marvin Solis to outline Nuvision Credit Union’s business strategy: “The first question we ask ourselves is, ‘How is this going to benefit our members?’” Founded...
Surging machine identities, faster threat detection and fewer vulnerabilities are shaping cloud security according to a new report
2025-03-11 • The Hacker News • Ravie Lakshmanan • win.asyncrat, win.njrat, win.quasar_rat, win.remcos Open article on Malpedia
Mandiant revealed that Chinese espionage actor UNC3886 has deployed modified versions of the TinyShell backdoor across multiple Juniper OS routers
Written by: Lukasz Lamparski, Punsaen Boonyakarn, Shawn Chew, Frank Tse, Jakub Jozwiak, Mathew Potaczek, Logeswaran Nadarajan, Nick Harbour, Mustafa Nasser Introduction In mid 2024, Mandiant...
Tel Aviv, Israel, 12th March 2025, CyberNewsWire
A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party app store APKPure through at least five malicious apps. [...]
Indian authorities arrested Aleksej Besciokov, the co-founder and one of the administrators of the Russian Garantex crypto-exchange while vacationing with his family in Varkala, India. [...]
This update also re-enables Apple Intelligence for those who previously had turned off this feature. Here's how to fix that, too.
Following last month’s research on a new campaign by the Chinese threat actor Silver Fox, which exploited Philips... The post Forescout widens research on Silver Fox hackers, reveals malware...
Strong and smart security operations teams are at the heart of any cybersecurity strategy, and today a startup that builds tooling to help keep them on their toes is announcing some funding on the...
San Jose, United States / California, 12th March 2025, CyberNewsWire
Facing increasing regulations, VIP Authentication Hub offers EU security teams greater control and compliance
Hot on the heels of the exploitation attempts of the medium-severity vulnerability in Espressif ESP32 Bluetooth chips, leveraged in over 1 billion devices, another security issue in a widely...
Researchers at Palo Alto Networks have uncovered multiple vulnerabilities within a Supervisory Control and Data Acquisition (SCADA) system,... The post Palo Alto detects critical vulnerabilities...
The U.S. National Institute of Standards and Technology (NIST) released a status report on the fourth round of... The post NIST advances post-quantum cryptography standardization, selects HQC...
Xage Security, vendor of zero trust access and protection solutions, has announced the launch of its patent-pending Remote... The post Xage Security launches remote CAC authentication,...
Apple has released a series of crucial security updates designed to patch vulnerabilities across its ecosystem of devices. On March 11, 2025, the tech giant rolled the Apple security update with...
API attacks are constantly on the rise, with a recent alarming study showing that 59% of organizations give…
Mozilla is warning Firefox users to update their browsers to the latest version to avoid facing disruption and security risks caused by the upcoming expiration of one of the company's root...
Microsoft's March 2025 Patch Tuesday fixes six actively exploited zero-day vulnerabilities, including critical RCE and privilege escalation flaws. Learn how these vulnerabilities impact Windows...
2025-03-07 • Proofpoint • Ole Villadsen, Proofpoint Threat Research Team, Selena Larson Open article on Malpedia
Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been exploited in attacks since March 2023. [...]