In the rapidly evolving cybersecurity landscape of 2025, DragonForce has emerged as a formidable ransomware threat, redefining the hybrid extortion model. First appearing in December 2023 with the launch of its “DragonLeaks” dark web portal, DragonForce has quickly established itself…
Top Cyber Attacks In April 2025 You Need to Aware
April wasn’t quiet in the world of cybersecurity. From sneaky fake CAPTCHAs to region-targeted phishing and revamped ransomware, attackers kept busy, refining their tricks and finding new ways to slip past defenses. Thanks to insights from ANY.RUN researchers, powered by…
PoC Tool Released for Max Severity Apache Parquet Vulnerability to Detect Affected Servers
A proof-of-concept (PoC) exploit tool has been publicly released for a maximum severity vulnerability in Apache Parquet, enabling security teams to easily identify affected servers. The vulnerability, tracked as CVE-2025-30065 with a CVSS score of 10.0, affects a widely-used data…
Europol Take Down DDoS-for-Hire Empire & Arrested 4 Admins
In a major blow to the cybercriminal ecosystem, Polish authorities have arrested four individuals who allegedly operated a network of Distributed Denial of Service (DDoS) platforms responsible for thousands of cyberattacks worldwide. The operation, announced on May 7, 2025, dismantled…
Wormable Linux Rootkit Attack Multiple Systems to Steal SSH Keys and Privilege Escalation
Cybersecurity researchers at ANY.RUN have uncovered a sophisticated attack leveraging the Diamorphine rootkit to deploy a cryptocurrency miner on Linux systems, highlighting the growing misuse of open-source tools in malicious campaigns. The detailed analysis with ANY.RUN Sandbox exposes a multi-stage…
Ox Security Bags $60M Series B to Tackle Appsec Alert Fatigue
Ox Security has raised a total $94 million since its launch in 2021 with ambitious plans to cash in on two fast-moving trends. The post Ox Security Bags $60M Series B to Tackle Appsec Alert Fatigue appeared first on SecurityWeek.…
CrowdStrike Plans Layoffs to Pursue $10B ARR Target
CrowdStrike said the planned cuts will affect approximately 500 employees and will span the first half of fiscal 2026. The post CrowdStrike Plans Layoffs to Pursue $10B ARR Target appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Inferno Drainer Returns, Stealing Millions from Crypto Wallets
Inferno Drainer returns, stealing millions from crypto wallets through phishing on Discord This article has been indexed from www.infosecurity-magazine.com Read the original article: Inferno Drainer Returns, Stealing Millions from Crypto Wallets
Kubernetes IngressNightmare: Wake Up and Fight Back with Microsegmentation
Discover how to defend Kubernetes from Ingress vulnerabilities with microsegmentation and Zero Trust security from Akamai. Stay protected ? inside and out. This article has been indexed from Blog Read the original article: Kubernetes IngressNightmare: Wake Up and Fight Back…
NSO group slapped with $168m penalty for spreading Pegasus Malware
After an intense six-year legal battle, Meta, the parent company of Facebook, has emerged victorious in its fight against the Israeli cybersecurity firm NSO Group, developers of the notorious Pegasus malware. A Californian jury has awarded Meta a hefty $168…
Openreach Names 163 ‘Stop Sell’ Locations To See Full Fibre Deployment
Latest tranche. No more copper telephone lines to be sold in 163 locations named by Openreach, as full fibre (FTTP) rollout continues This article has been indexed from Silicon UK Read the original article: Openreach Names 163 ‘Stop Sell’ Locations…
Israeli NSO Group Fined $168M for Pegasus Spyware Attack on WhatsApp
US jury orders NSO Group to pay $168M to WhatsApp and Meta over Pegasus spyware use in 2019… This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: Israeli NSO…
T-Mobile’s data breach settlement payments are finally rolling out – how to see if you qualify
After a 2021 data breach exposed the data of 76 million customers, settlement checks are finally being sent out this month. Here’s what you need to know. This article has been indexed from Latest stories for ZDNET in Security Read…
BSidesLV24 – Proving Ground – Threat Modeling At Scale: More Than Shifting Left
Author/Presenter: Troy Bowman Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations [YouTube][4] channel. Permalink The post BSidesLV24…
“Nationally Significant” Cyber-Attacks Have Doubled, UK’s NCSC Reports
NCSC CEO Richard Horne said the cyber agency has managed twice as many nationally significant cyber incidents in the period from September 2024 to May 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: “Nationally Significant” Cyber-Attacks…
Amazon Claims Breakthrough With Robots That Can ‘Feel’ Items
Claim that AI-powered sensor allows Amazon robot to feel the items in its ‘hand’, to determine required pressure This article has been indexed from Silicon UK Read the original article: Amazon Claims Breakthrough With Robots That Can ‘Feel’ Items
Agenda Ransomware Group Enhances Tactics with SmokeLoader and NETXLOADER
The Agenda ransomware group, also known as Qilin, has been reported to intensify its attacks in the first quarter of 2025, targeting critical sectors like healthcare, technology, financial services, and telecommunications across the US, the Netherlands, Brazil, India, and the…
Top Ransomware Groups Target Financial Sector, 406 Incidents Revealed
Flashpoint analysts have reported that between April 2024 and April 2025, the financial sector emerged as a prime target for cyber threat actors, with 406 publicly disclosed victims falling prey to ransomware attacks alone. This figure accounts for roughly seven…
Canary Exploit tool allows to find servers affected by Apache Parquet flaw
F5 Labs researchers released a PoC tool to find servers vulnerable to the Apache Parquet vulnerability CVE-2025-30065. A working proof-of-concept exploit for the critical Apache Parquet vulnerability CVE-2025-30065 has been released by F5 Labs, allowing the identification of vulnerable servers.…
DDoS-for-Hire Network Dismantled in International Operation
A prolific DDoS-for-hire network has been dismantled by Polish authorities as part of a coordinated international crackdown This article has been indexed from www.infosecurity-magazine.com Read the original article: DDoS-for-Hire Network Dismantled in International Operation
CrowdStrike says it will lay off 500 workers
The cybersecurity company said it will lay off 5% of its global workforce. This article has been indexed from Security News | TechCrunch Read the original article: CrowdStrike says it will lay off 500 workers
New UK Framework Pressures Vendors on SBOMs, Patching and Default MFA
By baking minimum expectations into procurement conversations, the plan is to steer software vendors to “secure-by-design and default” basics. The post New UK Framework Pressures Vendors on SBOMs, Patching and Default MFA appeared first on SecurityWeek. This article has been…
Spyware Maker NSO Ordered to Pay WhatsApp $168 Million for 2019 Hack
Meta, which owns WhatsApp, became the first company to sue and win against NSO Group, the maker of the notorious Pegasus spyware, when a U.S. ruled in December that the vendor hacked into 1,400 mobile devices in 2019. A jury…
OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws
A second security flaw impacting the OttoKit (formerly SureTriggers) WordPress plugin has come under active exploitation in the wild. The vulnerability, tracked as CVE-2025-27007 (CVSS score: 9.8), is a privilege escalation bug impacting all versions of the plugin prior to…