Security Affairs

MAY 16, 2025

Over half of firms adopted AI in 2024, but cloud tools like Azure OpenAI raise growing concerns over data security and privacy risks. While these tools deliver clear productivity gains, they also expose businesses to complex new risks, particularly around data security and privacy.

Risk 274

Risk Privacy Cloud Security 274

Security Affairs

DECEMBER 7, 2024

A cyber attack hit the Port of Rijeka in Croatia, the 8Base ransomware group claimed responsibility for the security breach. It also offers various economic services, including equipment maintenance, building upkeep, load securing, and quality control. The Port of Rijeka (Luka Rijeka d.d.),

Ransomware 311

Ransomware Personal data Security IT 311

Security Affairs

DECEMBER 16, 2024

Then he requested help from Amnesty Internationals Security Lab fearing to be the target of surveillance software like other journalists in Serbia. After the police released him, Milanov noticed suspicious changes to his phone settings, such as disabled data and Wi-Fi. ” reads the report published by Amnesty.

Personal data 264

Personal data Encryption Security Privacy 264

Security Affairs

MAY 18, 2025

“However, rogue communication devices not listed in product documents have been found in some Chinese solar power inverters by U.S experts who strip down equipment hooked up to grids to check for security issues, the two people said.” Representative August Pfluger, a Republican member of the Committee on Homeland Security.

Energy and Utilities 363

Energy and Utilities Manufacturing Communications Government 363

Security Affairs

MAY 11, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape iClicker site hack targeted students with malware via fake CAPTCHA New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms Backdoor found in popular ecommerce components Stealthy Linux backdoor leveraging (..)

Security 238

Security Ransomware Access Data breaches 238

Security Affairs

APRIL 6, 2025

The document is realistic enough to bypass automated Know Your Customer (KYC) checks, the expert states. Experts are calling for stronger defenses, including broader use of NFC-based verification and electronic identity documents (eIDs), which offer more resilient, hardware-level authentication. ” Musielak wrote on X.

Insurance 364

Insurance Authentication Compliance IT 364

The Last Watchdog

JULY 10, 2025

Cary, NC, July 10, 2025, CyberNewsire — INE Security , a leading provider of cybersecurity education and cybersecurity certifications, today launched its significantly enhanced eMAPT (Mobile Application Penetration Testing) certification.

Security 130

Security Communications Cybersecurity Education 130

Security Affairs

FEBRUARY 24, 2025

TopSec is also a Tier 1 vulnerability supplier for China’s intelligence ministry and has provided cloud and IT security monitoring services nationwide since 2004. The data leak includes infrastructure details and work logs from employees of a state-affiliated private sector security firm in China.

Cybersecurity 246

Cybersecurity Government Cloud Security 246

Security Affairs

OCTOBER 24, 2024

Cisco addressed multiple vulnerabilities in Adaptive Security Appliance (ASA), Secure Firewall Management Center (FMC), and Firepower Threat Defense (FTD) products, including an actively exploited flaw tracked as CVE-2024-20481. The vulnerability CVE-2024-20481 (CVSS score of 5.8) ” continues the advisory.

Passwords 308

Passwords Authentication Access Security 308

Security Affairs

DECEMBER 4, 2024

The group claimed to have stolen 500GB of data including Finacial data, Organisation data, Users data and personal documents, NDA’s, Confidential data, and more. As proof of the data breach, the group published multiple screenshots, including pictures of passports and other documents.

Ransomware 315

Ransomware Blockchain Insurance Data breaches 315

Security Affairs

OCTOBER 25, 2024

DLP is key in cybersecurity; a risk assessment identifies data risks, helping turn findings into real-world security improvements. They typically include an evaluation of data handling practices, security policies, and DLP solutions to identify and remediate any vulnerabilities that could result in a data breach.

Risk 307

Risk Cybersecurity Cloud Compliance 307

Collaboration 2.0

JUNE 20, 2025

The file was completely exposed - no encryption, no password protection, no security - just a plain text document containing millions of sensitive data entries.

Passwords 276

Passwords Data breaches Encryption Security 276

Security Affairs

JUNE 30, 2025

Canada bans Hikvision over national security concerns, ordering the company to stop operations and barring its tech from government use. Canada ordered Chinese surveillance firm Hikvision to cease all operations in the country, citing national security concerns. to cease all operations in Canada and close its Canadian business. .’s

Security 183

Security Government Manufacturing Military 183

Collaboration 2.0

JUNE 10, 2025

But often an employee's phone is unmanaged and uncontrolled, leading to security weaknesses that can be exploited by hackers and attackers. Security features Advanced protection: Employees can better thwart targeted attacks through strong mobile device protection. Here's what they do.

Security 196

Security IT Passwords Artificial Intelligence 196

Krebs on Security

NOVEMBER 9, 2024

The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based based technology companies.

Government 309

Government Phishing Cybersecurity Access 309

The Last Watchdog

JULY 9, 2025

(NASDAQ: DDOG), the monitoring and security platform for cloud applications. This integration combines advanced website security intelligence with enterprise-grade observability, empowering organizations with continuous visibility and control over their expanding attack surface. vendors used by your vendors). “By

Security 130

Security Risk Financial Services Compliance 130

Security Affairs

MARCH 20, 2025

The use of popular instant messaging apps on both mobile and desktop devices broadens the attack surface, creating uncontrolled information exchange channels that bypass security measures. DCRat first appeared in the threat landscape in 2018, but a year later it was redesigned and relaunched.

Computer and Electronics 270

Computer and Electronics Archiving Passwords Government 270

Security Affairs

NOVEMBER 11, 2024

The phishing messages contain a malicious Excel document disguised as an order file to trick the recipient into opening the document. Threat actors use Remcos to steal sensitive information and control victims’ computers for malicious activities. Upon opening the file, the RCE vulnerability CVE-2017-0199 is exploited.

Phishing 324

Phishing Metadata Encryption IT 324

Security Affairs

JANUARY 11, 2025

The security breach exposed customer data and IDs between October 10 and November 10, 2024. After discovering the security breach, the company investigated the incident and notified law enforcement. We have determined that certain of our customers personal information and documents was acquired by the threat actors.”

Data breaches 281

Data breaches Retail Sales Government 281

IT Governance

OCTOBER 23, 2024

What to do when your ‘supply chain’ is really a ‘supply loop’ When I asked Bridget Kenyon – CISO (chief information security officer) for SSCL, lead editor for ISO 27001:2022 and author of ISO 27001 Controls – what she’d like to cover in an interview, she suggested supply chain security. How can you secure a ‘supply loop’?

Security 110

Security Information Security Risk Access 110

WIRED Threat Level

MARCH 6, 2025

Documents obtained by WIRED show the US Department of Defense is considering cutting up to 75 percent of workers who stop the spread of chemical, biological, and nuclear weapons.

Security 363

Security 363

Security Affairs

OCTOBER 14, 2024

An investigation was promptly launched with assistance from external security experts.” ” Compromised information includes names, Social Security numbers, financial account data, and drivers license information. We detected this activity on August 19 and immediately took steps to terminate the access.

Data breaches 334

Data breaches Financial Services Access Security 334

Security Affairs

OCTOBER 6, 2024

Google announced that its Pixel 9 has implemented new security features, and it supports measures to mitigate baseband attacks. Pixel phones are known for their strong security features, particularly in protecting the cellular baseband, which is the processor handling LTE, 4G, and 5G communications. ” concludes the announcement.

Security 332

Security Communications IT Access 332

Security Affairs

MAY 15, 2025

“These instances of such personnel accessing data without business need were independently detected by the Companys security monitoring in the previous months. ” The security breach did not expose passwords, private keys, or customer funds. and adding stronger security controls and monitoring across all locations.

Data breaches 214

Data breaches Retail Access Passwords 214

Security Affairs

MAY 13, 2025

Ransomware attacks on defense contractors and their supply chains have profound implications for national security, operational efficiency, financial stability, trust and brand reputation.

Ransomware 282

Ransomware Military Risk Cybersecurity 282

Security Affairs

APRIL 16, 2025

-funded CVE program, a core cybersecurity tool for tracking vulnerabilities, faces funding expiry Wednesday, risking disruption to global security. The 25-year-old program has assigned over 274,000 CVE IDs for public security vulnerabilities. cybersecurity agency told media [ 1 , 2 ].

Cybersecurity 329

Cybersecurity Government Risk Security 329

Security Affairs

JANUARY 14, 2025

The experts observed a cyber espionage campaign using weaponized Kazakh Ministry of Foreign Affairs documents to gather intelligence on Central Asia’s diplomatic and economic ties. Upon enabling the macro in the weaponized documents, the malicious code creates a second blank document in the C:Users[USER]AppDataLocalTemp folder.

Government 171

Government IT Security Information Security 171

Security Affairs

DECEMBER 30, 2024

Cisco confirmed the authenticity of the 4GB of leaked data, the data was compromised in a recent security breach, marking the second leak in the incident. Cisco confirmed the authenticity of the 4GB of leaked data, which was compromised in a recent security breach, marking it as the second leak in the incident.

Authentication 311

Authentication Data breaches Access Cloud 311

Security Affairs

MAY 21, 2025

These instances of such personnel accessing data without business need were independently detected by the Companys security monitoring in the previous months. The security breach did not expose passwords, private keys, or customer funds. and adding stronger security controls and monitoring across all locations. We said no.

Data breaches 183

Data breaches Communications Retail Access 183

Krebs on Security

JULY 15, 2024

Monahan said the migration has left domain owners with fewer options to secure and monitor their accounts. “If you bought Google Workspace via Google Domains, Squarespace is now your authorized reseller,” the help document explains. It’s easier to secure one account than two.”

Security 349

Security Passwords Access Phishing 349

Security Affairs

JANUARY 14, 2025

According to court documents, the Chinese government paid Mustang Panda to develop PlugX malware, used since 2014 to target U.S., The malware was operated by a China-linked threat actor, known as Mustang Panda (aka Twill Typhoon, to steal sensitive information from victim computers. European, and Asian entities. systems. .”

Government 303

Government Cybersecurity Access IT 303

Security Affairs

APRIL 26, 2025

Security footage reportedly shows the man attempting to access multiple offices before installing malicious software designed to capture screenshots every 20 minutes and transmit them to an external IP address. Bowie was arrested on April 14, following the issuance of an arrest warrant.

Cybersecurity 363

Cybersecurity Access Security IT 363

Security Affairs

JUNE 24, 2025

While Signal itself remains secure, attackers are exploiting its growing popularity in official communications to make their phishing attempts more convincing. “Attackers, using Signal, delivered a malicious document titled “Акт.doc” containing a macro. The experts were not able to determine the initial infection vector.

Phishing 219

Phishing Encryption Military Communications 219

Security Affairs

JUNE 17, 2025

A cyberattack, likely carried out by state-sponsored hackers, compromised the Microsoft email accounts of Washington Post journalists, including reporters covering China and national security. The reporters targeted include those on the national-security and economic-policy teams, including some who write about China, the people said.”

Passwords 260

Passwords Access Cybersecurity Government 260

Security Affairs

APRIL 20, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malicious NPM Packages Targeting PayPal Users New Malware Variant Identified: ResolverRAT Enters the Maze Nice chatting with you: what connects cheap Android smartphones, WhatsApp and cryptocurrency theft?

Security 198

Security Phishing Encryption Ransomware 198

Krebs on Security

MARCH 14, 2025

Earlier this month, the security firm Arctic Wolf warned about ClickFix attacks targeting people working in the healthcare sector. Malicious macros became such a common malware threat that Microsoft was forced to start blocking macros by default in Office documents that try to download content from the web.

Phishing 299

Phishing Passwords Security IT 299

Security Affairs

FEBRUARY 8, 2024

26 key cyber security stats for 2024 that every user should know, from rising cyber crime rates to the impact of AI technolog y. million unfilled cyber security jobs, showing a big need for skilled professionals. Market Growth: AI cyber security technology is projected to grow by 23.6% The US topped the list at $5.09

Security 355

Security IoT Phishing Ransomware 355