Microsoft has issued security updates to fix 130+ vulnerabilities this month, including one zero-day This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Fixes Over 130 CVEs in April Patch Tuesday
Category: www.infosecurity-magazine.com
NCSC Warns of Spyware Targeting Chinese and Taiwanese Diaspora
The UK and allies have warned of new mobile spyware targeting Uyghur, Tibetan and Taiwanese communities This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Warns of Spyware Targeting Chinese and Taiwanese Diaspora
Google Releases April Android Update to Address Two Zero-Days
Google’s latest Android update fixes 62 flaws, including two zero-days previously used in limited targeted attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: Google Releases April Android Update to Address Two Zero-Days
NIST Defers Pre-2018 CVEs to Tackle Growing Vulnerability Backlog
NIST marks CVEs pre-2018 as “Deferred” in the NVD as agency focus shifts to managing emerging threats This article has been indexed from www.infosecurity-magazine.com Read the original article: NIST Defers Pre-2018 CVEs to Tackle Growing Vulnerability Backlog
Half of Firms Stall Digital Projects as Cyber Warfare Risk Surges
Armis survey reveals that the growing threat of nation-state cyber-attacks is disrupting digital transformation This article has been indexed from www.infosecurity-magazine.com Read the original article: Half of Firms Stall Digital Projects as Cyber Warfare Risk Surges
CISA Warns of CrushFTP Vulnerability Exploitation in the Wild
The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-31161 to its Known Exploited Vulnerabilities (KEV) catalog This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Warns of CrushFTP Vulnerability Exploitation in the Wild
Boards Urged to Follow New Cyber Code of Practice
The British government has launched a new code of practice designed to boost corporate cyber governance This article has been indexed from www.infosecurity-magazine.com Read the original article: Boards Urged to Follow New Cyber Code of Practice
Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign
Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsoft’s lightweight source-code editor This article has been indexed from www.infosecurity-magazine.com Read the original article: Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign
Smishing Triad Fuels Surge in Toll Payment Scams in US, UK
A rise in smishing campaigns impersonating toll service providers has been linked to China’s Smishing Triad This article has been indexed from www.infosecurity-magazine.com Read the original article: Smishing Triad Fuels Surge in Toll Payment Scams in US, UK
Darknet’s Xanthorox AI Offers Customizable Tools for Hackers
Xanthorox AI, a self-contained system for offensive cyber operations, has emerged on darknet forums This article has been indexed from www.infosecurity-magazine.com Read the original article: Darknet’s Xanthorox AI Offers Customizable Tools for Hackers
Vodafone Urges UK Cybersecurity Policy Reforms as SME Cyber-Attack Costs Reach £3.4bn
Vodafone Business has urged the UK government to implement policy changes, including improvements to the Cyber Essentials scheme and tax incentives for cybersecurity This article has been indexed from www.infosecurity-magazine.com Read the original article: Vodafone Urges UK Cybersecurity Policy Reforms…
Government Backs Britain’s First Cyber Seed Fund, Worth £50m
Osney Capital’s new fund is the first to focus exclusively on early-stage UK cybersecurity This article has been indexed from www.infosecurity-magazine.com Read the original article: Government Backs Britain’s First Cyber Seed Fund, Worth £50m
Aussie Pension Savers Hit with Wave of Credential Stuffing Attacks
Cyber-attacks on Australian superannuation funds leave some savers out of pocket This article has been indexed from www.infosecurity-magazine.com Read the original article: Aussie Pension Savers Hit with Wave of Credential Stuffing Attacks
Cyber Agencies Warn of Fast Flux Threat Bypassing Network Defenses
A joint cybersecurity advisory warns organizations globally about the defense gap in detecting and blocking fast flux techniques, which are exploited for malicious activities This article has been indexed from www.infosecurity-magazine.com Read the original article: Cyber Agencies Warn of Fast…
Chinese State Hackers Exploiting Newly Disclosed Ivanti Flaw
Mandiant warned that Chinese espionage actor UNC5221 is actively exploiting a critical Ivanti vulnerability, which can lead to remote code execution This article has been indexed from www.infosecurity-magazine.com Read the original article: Chinese State Hackers Exploiting Newly Disclosed Ivanti Flaw
Tj-actions Supply Chain Attack Traced Back to Single GitHub Token Compromise
The threat actors initially attempted to compromise projects associated with the Coinbase cryptocurrency exchange, said Palo Alto Networks This article has been indexed from www.infosecurity-magazine.com Read the original article: Tj-actions Supply Chain Attack Traced Back to Single GitHub Token Compromise
Major Online Platform for Child Exploitation Dismantled
An international law enforcement operation has shut down Kidflix, a platform for child sexual exploitation with 1.8m registered users This article has been indexed from www.infosecurity-magazine.com Read the original article: Major Online Platform for Child Exploitation Dismantled
CrushFTP Vulnerability Exploited Following Disclosure Issues
A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process This article has been indexed from www.infosecurity-magazine.com Read the original article: CrushFTP Vulnerability Exploited Following Disclosure Issues
Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware
The cybercriminal uses the service of Proton66, an infamous Russian-based bulletproof hosting provider, to deploy malware This article has been indexed from www.infosecurity-magazine.com Read the original article: Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware
Sensitive Data Breached in Highline Schools Ransomware Incident
Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the September 2024 incident This article has been indexed from www.infosecurity-magazine.com Read the original article: Sensitive Data Breached in Highline Schools Ransomware Incident