We’re adding a new specialist to VirusTotal’s Crowdsourced AI lineup: Exodia Labs, with an AI engine focused on analyzing Chrome extension (.CRX) files. This complements our existing Code Insight and other AI contributors by helping users better understand this format…
New DNS Malware ‘Detour Dog’ Uses TXT Records to Deliver Strela Stealer
Detour Dog, a stealthy website malware campaign tracked since August 2023, has evolved from redirecting victims to tech-support scams into a sophisticated DNS-based command-and-control (C2) distribution system that delivers the Strela Stealer information stealer via DNS TXT records. Tens of…
Imgur yanks Brit access to memes as parent company faces fine
ICO investigation into platform’s lack of age assurance continues The UK’s data watchdog has described Imgur’s move to block UK users as “a commercial decision” after signaling plans to fine parent company MediaLab.… This article has been indexed from The…
Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts
Despite Cisco and various cybersecurity agencies warning about attackers actively exploting zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) in Cisco Adaptive Security Appliances (ASA) for months, there are still around 48,000 vulnerable appliances out there. The number is provided by the Shadowser…
CMMC is coming, but most contractors still have a long road to full compliance
A new survey illustrates the defense industrial base’s fragmented security posture. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: CMMC is coming, but most contractors still have a long road to full compliance
Best DLP Services to Protect Your Data
Best DLP Services: Top Data Loss Prevention Software for Modern Businesses When everything is going well, it’s easy to relax. This is especially true when working with information. The human factor impacts data security no less, if not more, than…
Forensic journey: hunting evil within AmCache
Kaspersky experts share insights into how AmCache may prove useful during incident investigation, and provide a command line tool to extract data from this artifact. This article has been indexed from Securelist Read the original article: Forensic journey: hunting evil…
New Android Banking Trojan “Klopatra” Uses Hidden VNC to Control Infected Smartphones
A previously undocumented Android banking trojan called Klopatra has compromised over 3,000 devices, with a majority of the infections reported in Spain and Italy. Italian fraud prevention firm Cleafy, which discovered the sophisticated malware and remote access trojan (RAT) in…
New China-Aligned Hackers Hit State and Telecom Sectors
Phantom Taurus is the latest formally identified cyber-espionage group aligned with Chinese state interest This article has been indexed from www.infosecurity-magazine.com Read the original article: New China-Aligned Hackers Hit State and Telecom Sectors
Hackers Abuse EV Certificates to Sign Completely Undetectable DMG Malware
Security researchers have uncovered a new macOS malware campaign in which threat actors are abusing Extended Validation (EV) code-signing certificates to distribute completely undetectable (FUD) disk image (DMG) payloads. While EV certificate abuse has long plagued the Windows ecosystem, its…
Explain digital ID or watch it fizzle out, UK PM Starmer told
Politico avoids the topic at Labour conference speech, homes in on AI instead UK prime minister Keir Starmer avoided mentioning the mandatory digital ID scheme in his keynote speech to the Labour Party conference amid calls for him to put…
Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability
Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM. The post Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Campaign Warns Solicitors and House Buyers of Payment Diversion Fraud
The NCA warns that house buyers could face losses of over £80,000 from a type of BEC called payment diversion fraud This article has been indexed from www.infosecurity-magazine.com Read the original article: Campaign Warns Solicitors and House Buyers of Payment…
Hackers Exploit Cellular Router’s API to Send Malicious SMS Messages With Weaponized Links
Hackers have recently leveraged a vulnerability in the web-based management interfaces of certain cellular routers to co-opt their built-in SMS functionality for nefarious purposes. By targeting exposed APIs, attackers are able to dispatch large volumes of malicious SMS messages containing…
Schools are swotting up on security yet still flunk recovery when cyberattacks strike
Coursework ‘gone forever’ as 10% report critical damage Schools and colleges hit by cyberattacks are taking longer to restore their networks — and the consequences are severe, with students’ coursework being permanently lost in some cases.… This article has been…
Battering RAM Attack Breaks Intel and AMD Security Tech With $50 Device
Intel and AMD say the research is not in scope of their threat model because the attack requires physical access to a device. The post Battering RAM Attack Breaks Intel and AMD Security Tech With $50 Device appeared first on…
Top CVEs & Vulnerabilities of September 2025
CVEs & Vulnerabilities of September 2025 reveal a wave of high-impact flaws that security teams cannot afford to ignore. From unauthenticated exploits in FreePBX to privilege escalation in Android and root-level risks in Cisco firewalls, attackers are moving fast to…
Siemens simplifies OT security with virtualized, encrypted connectivity
Siemens launched SINEC Secure Connect, the zero trust security platform designed for operational technology (OT) networks. The software solution virtualizes network structures using overlay networks. It enables Machine-to-Machine, Machine-to-Cloud, and Machine-to-Datacenter connections, plus secure remote access to industrial systems, all…
Red Hat OpenShift AI Vulnerability Lets Attackers Seize Infrastructure Control
A serious vulnerability in the Red Hat OpenShift AI service (RHOAI) enables attackers with minimal access to escalate privileges and take control of entire clusters. Identified as CVE-2025-10725, the flaw resides in an overly permissive ClusterRole assignment. A low-privileged user,…
Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of new targeted cyber attacks in the country using a backdoor called CABINETRAT. The activity, observed in September 2025, has been attributed to a threat cluster it tracks as UAC-0245.…
ICO: Imgur’s UK Decision Won’t Prevent Regulatory Fine
Image-sharing platform Imgur has blocked its services within the UK, following a regulatory notice from the ICO This article has been indexed from www.infosecurity-magazine.com Read the original article: ICO: Imgur’s UK Decision Won’t Prevent Regulatory Fine
IT Security News Hourly Summary 2025-10-01 09h : 7 posts
7 posts were published in the last hour 7:3 : Why AI Browsers Could Put Your Money at Risk 7:2 : 48+ Cisco Firewalls Hit by Actively Exploited 0-Day Vulnerability 7:2 : Cisco IOS/IOS XE SNMP Vulnerabilities Exploited in Ongoing…
Battering RAM Exploit Bypasses Modern Protections in Intel, AMD Cloud Processors
Cloud providers rely on hardware-based memory encryption to keep user data safe. This encryption shields sensitive information like passwords, financial records, and personal files from hackers and curious insiders. Leading technologies such as Intel SGX and AMD SEV-SNP are designed…
Google Publishes Security Hardening Guide to Counter UNC6040 Threats
Google’s Threat Intelligence Group (GTIG) has published a comprehensive guide to help organizations strengthen their SaaS security posture—particularly Salesforce—against UC6040’s sophisticated voice-phishing and malicious connected-app attacks. By combining identity hardening, SaaS-specific controls, and advanced logging and detection, security teams can…