UNC3944, a financially-motivated threat actor also linked to the group known as Scattered Spider, has transitioned from niche SIM swapping operations targeting telecommunications organizations to a more aggressive focus on ransomware and data theft extortion across diverse industries. Initially observed…
Category: EN
Uncovering the Security Risks of Data Exposure in AI-Powered Tools like Snowflake’s CORTEX
As artificial intelligence continues to reshape the technological landscape, tools like Snowflake’s CORTEX Search Service are revolutionizing data retrieval with advanced fuzzy search and LLM-driven Retrieval Augmented Generation (RAG) capabilities. However, beneath the promise of efficiency lies a critical security…
BFDOOR Malware Targets Organizations to Establish Long-Term Persistence
The BPFDoor malware has emerged as a significant threat targeting domestic and international organizations, particularly in the telecommunications sector. First identified by PwC in 2021, BPFDoor is a highly sophisticated backdoor malware designed to infiltrate Linux systems with an emphasis…
2,800+ Hacked Websites Attacking MacOS Users With AMOS Stealer Malware
A massive malware campaign targeting macOS users through more than 2,800 compromised websites. The operation deploys Atomic Stealer (AMOS), a sophisticated information-stealing malware specifically designed to extract sensitive data from Apple computers. The campaign, dubbed “MacReaper” was initially discovered on…
Popular Instagram Blogger’s Account Hacked to Trick Users & Steal Banking Credentials
A prominent Instagram influencer with over 2.5 million followers became the unwitting host of a sophisticated phishing campaign this week. The unnamed lifestyle blogger’s account was compromised on Monday, with attackers using their trusted platform to distribute malicious links disguised…
M365 Copilot Chat & Office Apps Gets SafeLinks Protection at Time-of-Click of URL
In a significant security enhancement announced today, Microsoft has successfully rolled out SafeLinks protection worldwide for M365 Copilot Chat across Desktop, Web, Outlook Mobile, Teams Mobile, and the Microsoft 365 Copilot Mobile app on both iOS and Android platforms. This…
Microsoft Warns Default Helm Charts May Expose Kubernetes Apps to Data Leaks
Microsoft security researchers have issued an urgent warning that default Helm chart configurations widely used for deploying Kubernetes applications could inadvertently expose sensitive data to attackers. According to a report published on May 5, 2025, by Microsoft Defender for Cloud…
Critical MobSF 0-Day Exposes Systems to Stored XSS & ZIP of Death Attacks
The Mobile Security Framework (MobSF), a widely utilized tool, contains two critical zero-day vulnerabilities. These vulnerabilities, designated as CVE-2025-46335 and CVE-2025-46730, impact all versions of MobSF up to and including version 4.3.2. If exploited, they could result in system compromise…
Beware the Bundle: Companies Are Banking on Becoming Your Police Department’s Favorite “Public Safety Technology” Vendor
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> When your local police department buys one piece of surveillance equipment, you can easily expect that the company that sold it will try to upsell them on…
What is DLP & Why It’s Not Enough to Stop Data Breaches Alone
The post What is DLP & Why It’s Not Enough to Stop Data Breaches Alone appeared first on Votiro. The post What is DLP & Why It’s Not Enough to Stop Data Breaches Alone appeared first on Security Boulevard. This…
Why Your Security Team is Wasting 70% of Their Time on Phantom Threats And How to Fix It
Your security team is spending 70% of their time chasing ghosts. Here’s how to reclaim those hours for strategic work that actually matters. The post Why Your Security Team is Wasting 70% of Their Time on Phantom Threats And How…
Infostealer Malware Soars 500% as 1.7 Billion Passwords Leak on Dark Web
A new report has exposed a staggering 500% rise in infostealer malware attacks, with over 1.7 billion passwords leaked on the dark web in 2024 alone. Despite the growing threat, poor password hygiene continues to be a critical issue,…
WhatsApp Balances AI Innovation with User Privacy Concerns
Despite WhatsApp’s position as the world’s largest messaging platform, it continues to push the boundaries of digital communication by implementing advanced artificial intelligence (AI) features that enhance the experience for its users and enable the platform to operate more…
Pune-Based Biopharma Company Hit by Ransomware Attack, Hackers Demand $80,000
A multinational biopharmaceutical company based in Pune has fallen victim to a sophisticated ransomware attack, with cybercriminals encrypting vital data and demanding $80,000 (over Rs 68 lakh) for its release. The attackers have also threatened to leak the stolen…
Do Not Charge Your Phone at Public Stations, Experts Warn
For a long time, smartphones have had a built-in feature that saves us against unauthorized access through USB. In Android and iOS, pop-ups ask us to confirm access before a data USB connection is established to transfer our data. But…
Iran Claims it Thwarted Sophisticated Cyberattack on its Infrastructure
Iran thwarted a “widespread and complex” cyberattack on Sunday that targeted the nation’s infrastructure, a senior official told Tasnim News Agency, which is affiliated with the Islamic Revolutionary Guard Corps. Behzad Akbari, the head of the government’s Telecommunications Infrastructure…
Over 2,800 Hacked Websites Targeting MacOS Users with AMOS Stealer Malware
Cybersecurity researcher has uncovered a massive malware campaign targeting MacOS users through approximately 2,800 compromised websites. The operation, dubbed “MacReaper,” uses sophisticated social engineering and blockchain technology to deliver the Atomic Stealer (AMOS) malware, capable of stealing passwords, cryptocurrency wallets,…
DragonForce Ransomware: Redefining Hybrid Extortion in 2025
The ransomware world isn’t just evolving—it’s fragmenting, decentralizing, and growing more dangerous. In this volatile landscape, DragonForce is emerging as one of the most intriguing and threatening actors of 2025. Born from possible hacktivist roots and now fully immersed in…
How will enterprises handle changes in Exchange Server SE?
With current Exchange Server versions expiring in October, Microsoft’s move to subscriptions and a tight migration deadline puts pressure on organizations keeping on-premises email. This article has been indexed from Search Security Resources and Information from TechTarget Read the original…
Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324
Threat actors launch second wave of attacks on SAP NetWeaver, exploiting webshells from a recent zero-day vulnerability. In April, ReliaQuest researchers warned that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited. Thousands of…