Devs told to exercise ‘extreme caution’ with emails disguised as account update prompts Mozilla is warning of an ongoing phishing campaign targeting developers of Firefox add-ons.… This article has been indexed from The Register – Security Read the original article:…
CNCERT Accuses of US Intelligence Agencies Attacking Chinese Military-Industrial Units
Since mid-2022, Chinese military-industrial networks have reportedly been the target of highly sophisticated cyber intrusions attributed to US intelligence agencies. These campaigns exploited previously unknown vulnerabilities to install stealthy malware, maintain prolonged access, and exfiltrate sensitive defense data. Initially identified…
Researchers Exploited Google kernelCTF Instances And Debian 12 With A 0-Day
Researchers exploited CVE-2025-38001—a previously unknown Use-After-Free (UAF) vulnerability in the Linux HFSC queuing discipline—to compromise all Google kernelCTF instances (LTS, COS, and mitigation) as well as fully patched Debian 12 systems. Their work netted an estimated $82,000 in cumulative bounties…
FUJIFILM Printers Vulnerability Let Attackers Trigger DoS Condition
A critical security vulnerability affecting multiple FUJIFILM printer models could allow attackers to trigger denial-of-service (DoS) conditions through malicious network packets. The vulnerability, tracked as CVE-2025-48499, was announced on August 4, 2025, and affects various DocuPrint and Apoes printer series.…
Securing the Skies: Balancing Cybersecurity, Innovation and Risk in Modern Aviation
Commercial aviation has always treated safety as non-negotiable, yet its digital attack surface keeps widening. Aerospace security specialists Lawrence Baker and Jeffrey Hall tell Mike Vizard that the industry now juggles classic ransomware on ticketing systems and loyalty apps while…
IT Security News Hourly Summary 2025-08-04 15h : 17 posts
17 posts were published in the last hour 13:5 : Mozilla Issues Warning on Phishing Campaign Targeting Add-on Developer Accounts 13:5 : Get up to a year of Adobe Creative Cloud access for 40% off 13:4 : LastPass can now…
Zero Trust in the AI Era: Start Small, Protect What Matters
John Kindervag—the analyst who coined “zero trust” back in 2010—joins Alan Shimel to talk about how the idea has grown from a heretical memo into standard security doctrine. Kindervag, now at a microsegmentation vendor, still starts every project with the…
Market Trends Reveal Urgent Emerging Cybersecurity Requirements
During an era of unprecedented digital acceleration and hyperconnectivity, cybersecurity is no longer the sole responsibility of IT departments — it has now become a crucial strategic pillar for businesses of all sizes in an age of hyperconnectivity. Recent…
Vietnam Launches NDAChain for National Data Security and Digital Identity
Vietnam has launched NDAChain, a new blockchain network that allows only approved participants to join. The move is aimed at locking down Vietnam’s government data. About NDAChain The network is built by the National Data Association and managed by the…
CyberSaint’s new AI tool tells you which threats matter
CyberSaint launched AI-Powered Findings Management within the CyberStrong platform. This new feature, powered by the company’s proprietary CyberSaint AI engine, transforms how CISOs and team prioritize threats by dynamically ingesting security telemetry, emerging threats, cyber loss data and a customer’s…
#BHUSA: Microsoft and Google Among Most Affected as Zero Day Exploits Jump 46%
Forescout also observed a big rise in CVEs added to CISA’s KEV catalog, some of which impacted end-of-life products This article has been indexed from www.infosecurity-magazine.com Read the original article: #BHUSA: Microsoft and Google Among Most Affected as Zero Day…
Real Enough to Fool You: The Evolution of Deepfakes
Not long ago, deepfakes were digital curiosities – convincing to some, glitchy to most, and often more meme than menace. Fast forward to 2025, and they’ve become fully weaponized, commercially available, and dangerously scalable. What began as clever video edits…
North Korean spies posing as remote workers have infiltrated hundreds of companies, says CrowdStrike
North Korean IT workers are increasingly using generative AI to draft resumes and “deepfake” their appearances to make money for North Korea’s sanctioned nuclear weapons program. This article has been indexed from Security News | TechCrunch Read the original article:…
PlayPraetor Android RAT expands rapidly across Spanish and French-speaking regions
PlayPraetor Android RAT has hit 11K+ devices, spreading fast via campaigns targeting Spanish and French speakers, say Cleafy researchers. Cleafy researchers have identified a new Android RAT called PlayPraetor, which has infected over 11,000 devices, mainly in Portugal, Spain, France,…
Malicious Packages Across Open-Source Registries: Detection Statistics and Trends (Q2 2025)
Malware threats continue to infiltrate open-source software registries. FortiGuard Labs’ Q2 2025 analysis reveals persistent tactics used in malicious NPM and PyPI packages, including credential theft, obfuscation, and install-time payloads. Learn how threat actors exploit OSS and how to stay…
US Announces $100 Million for State, Local and Tribal Cybersecurity
CISA and FEMA announced two grants of more than $100 million for state, local, and tribal governments looking to improve cybersecurity. The post US Announces $100 Million for State, Local and Tribal Cybersecurity appeared first on SecurityWeek. This article has…
Ex-CISA Head Easterly: Rescinded West Point Post Victim of ‘Manufactured Outrage’
Jen Easterly, a West Point graduate who led CISA during the Biden Administration, had her appointment to head a department at the academy rescinded after a complaint by Laura Loomer, a right-wing MAGA adherent who spoke out in a X…
Web-Based AI Usage Surge Shifts Global Internet Traffic Patterns
Web traffic to AI sites surged 50% from Feb 2024 to Jan 2025, driven by browser-based GenAI tools This article has been indexed from www.infosecurity-magazine.com Read the original article: Web-Based AI Usage Surge Shifts Global Internet Traffic Patterns
LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code
A new security flaw, LegalPwn, exploits a weakness in generative AI tools like GitHub Copilot and ChatGPT, where malicious code is disguised as legal disclaimers. Learn why human oversight is now more critical than ever for AI security. This article…
FUJIFILM Printer Flaw Allows Attackers to Trigger DoS Attacks
FUJIFILM Business Innovation has disclosed a critical vulnerability affecting multiple printer models that could allow attackers to launch denial-of-service (DoS) attacks through specially crafted network packets. The vulnerability, tracked as CVE-2025-48499, affects the Internet Printing Protocol (IPP) and Line Printer…
Mozilla Issues Warning on Phishing Campaign Targeting Add-on Developer Accounts
Mozilla has issued an urgent security warning to Firefox add-on developers following the detection of a sophisticated phishing campaign targeting accounts on the Add-ons Mozilla Organization (AMO) platform. The alert, published by Scott DeVaney from Mozilla’s Add-ons Community team on…
Get up to a year of Adobe Creative Cloud access for 40% off
Get more than 20 Creative Cloud apps, including Photoshop, Illustrator, Premiere Pro, and Acrobat Pro, at a big discount through Adobe. This article has been indexed from Latest news Read the original article: Get up to a year of Adobe…
LastPass can now warn or block logins to shadow SaaS apps – here’s how
The password manager’s browser plug-in now includes identity-and-access–management controls for unapproved SaaS applications. This article has been indexed from Latest news Read the original article: LastPass can now warn or block logins to shadow SaaS apps – here’s how
LARGEST EVER Bitcoin Hack Valued $3.5 Billion Uncovered
The largest cryptocurrency hack ever recorded involved the theft of 127,426 BTC from Chinese mining pool LuBian in December 2020. The stolen Bitcoin was worth approximately $3.5 billion at the time of the theft and has since appreciated to an…