Ein Cyberkrimineller hat offenbar Daten von bis zu 200.000 Europcar-Kunden abgegriffen und versucht, das Unternehmen zu erpressen. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Europcar: Kundendaten und Quellcodes gestohlen
Everest Ransomware Gang’s Leak Site Hacked and Defaced
TechCrunch has uncovered a concerning development in consumer-grade spyware: a stealthy Android monitoring app that employs password-protected uninstallation to prevent removal. This app, which abuses built-in Android features like overlay permissions and device admin access, exemplifies the escalating technical sophistication…
Threat Actors Exploit Toll Payment Services in Widespread Hacking Campaign
In a sophisticated cybercrime operation, the Smishing Triad, a China-based group, has been identified as the orchestrator behind a surge in smishing campaigns targeting consumers in the US and UK. These campaigns exploit toll payment services like FasTrak, E-ZPass, and…
Google’s Sec-Gemini v1 Takes on Hackers & Outperforms Rivals by 11%
Sec-Gemini v1 has access to real-time cybersecurity data from trusted sources including Google Threat Intelligence, Mandiant’s attack reports, and the Open Source Vulnerabilities database. This article has been indexed from Security | TechRepublic Read the original article: Google’s Sec-Gemini v1…
U.S. CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apache Tomcat path equivalence vulnerability, tracked as CVE-2025-22457,…
Threat Actors Weaponize Windows Screensavers Files to Deliver Malware
Malware operators continue exploiting the Windows Screensaver (.scr) file format to distribute malicious payloads, leveraging its executable nature under the guise of harmless system files. Recent campaigns observed by cybersecurity researchers reveal advanced tactics targeting global enterprises through sophisticated phishing…
That massive GitHub supply chain attack? It all started with a stolen SpotBugs token
But this mystery isn’t over yet, Unit 42 opines That massive GitHub supply chain attack that spilled secrets from countless projects? It traces back to a stolen token from a SpotBugs workflow – exposed way back in November, months earlier…
Auto-Color Linux Backdoor: TTPs and Internal Architecture Exposed
A newly identified Linux backdoor named “Auto-Color,” first observed between November and December 2024, has been targeting government organizations and universities across North America and Asia. This malware, initially disguised as a benign color-enhancement tool, employs sophisticated tactics, techniques, and…
Threat Actors Use VPS Hosting Providers to Deliver Malware and Evade Detection
Cybercriminals are intensifying phishing campaigns to spread the Grandoreiro banking trojan, targeting users primarily in Mexico, Argentina, and Spain. A detailed analysis by Forcepoint X-Labs reveals the sophisticated techniques employed by these attackers to evade detection and deliver malware. Phishing…
ToddyCat Attackers Exploited ESET Command Line Scanner Vulnerability to Conceal Their Tool
In a sophisticated cyberattack, the notorious ToddyCat APT group utilized a previously unknown vulnerability in ESET’s Command Line Scanner (ecls) to mask their malicious activities. The attack came to light when researchers detected a suspicious file named version.dll in the…
BSidesLV24 – HireGround – Penetration Testing Experience And How To Get It
Author/Presenter: Phillip Wylie Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink The post BSidesLV24…
IT Security News Hourly Summary 2025-04-07 21h : 6 posts
6 posts were published in the last hour 18:35 : Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victims 18:10 : Microsoft Security Copilot Gets New Tooling 18:9 : Google Rolls Out Simplified End-to-End Encryption for Gmail Enterprise…
PCI DSS 4.0.1: A Cybersecurity Blueprint by the Industry, for the Industry
As PCI DSS 4.0.1 comes into force, it shows the power of industry collaboration in cybersecurity. The post PCI DSS 4.0.1: A Cybersecurity Blueprint by the Industry, for the Industry appeared first on SecurityWeek. This article has been indexed from…
ML-KEM post-quantum TLS now supported in AWS KMS, ACM, and Secrets Manager
Amazon Web Services (AWS) is excited to announce that the latest hybrid post-quantum key agreement standards for TLS have been deployed to three AWS services. Today, AWS Key Management Service (AWS KMS), AWS Certificate Manager (ACM), and AWS Secrets Manager…
Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victims
Crummy OPSEC leads to potentially decades in prison Noah Michael Urban, 20, of alleged Scattered Spider infamy, has pleaded guilty to various charges and potentially faces decades in prison.… This article has been indexed from The Register – Security Read…
Microsoft Security Copilot Gets New Tooling
Can Microsoft realize the true potential of its AI Security push? The post Microsoft Security Copilot Gets New Tooling appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Microsoft Security Copilot Gets…
Google Rolls Out Simplified End-to-End Encryption for Gmail Enterprise Users
Google has begun the phased rollout of a new end-to-end encryption (E2EE) system for Gmail enterprise users, simplifying the process of sending encrypted emails across different platforms. While businesses could previously adopt the S/MIME (Secure/Multipurpose Internet Mail Extensions) protocol…
Oracle Cloud Confirms Second Hack in a Month, Client Log-in Data Stolen
Oracle Corporation has warned customers of a second cybersecurity incident in the last month, according to Bloomberg News. A hacker infiltrated an older Oracle system and stole login credentials from client accounts, some of which date back as recently…
Fake CAPTCHAs Are the New Trap: Here’s How Hackers Are Using Them to Install Malware
For years, CAPTCHAs have been a familiar online hurdle—click a box, identify a few blurry images, and prove you’re human. They’ve long served as digital gatekeepers to help websites filter out bots and protect against abuse. But now, cybercriminals…
Massive Data Breach Hits Elon Musk’s X Platform
A potentially massive data breach has reportedly compromised Elon Musk’s social media platform X, previously known as Twitter, raising significant privacy concerns for millions of users. Cybersecurity researchers from SafetyDetectives discovered a troubling post over the weekend on BreachForums,…
Randall Munroe’s XKCD ‘Terror Bird’
<a class=” sqs-block-image-link ” href=”https://xkcd.com/3069/” target=”_blank”> <img alt=”” height=”274″ src=”https://images.squarespace-cdn.com/content/v1/5355d604e4b03c3e9896e131/736a1456-bfa7-4485-9609-e9e6af1ce661/bird.png?format=1000w” width=”342″ /> </a><figcaption class=”image-caption-wrapper”> via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Terror Bird’ appeared first on Security Boulevard.…
AI Outperformed Elite Red Teams in Creating an Effective Spear Phishing Attack
AI-powered spear phishing agents have surpassed elite human red teams in crafting socially engineered attacks as recently revealed. From 2023 to 2025, AI’s effectiveness relative to humans improved by 55%, marking a paradigm shift in both offensive and defensive cybersecurity…
News alert: SpyCloud study shows gaps in EDR, antivirus — 66% of malware infections missed
Austin, TX, USA, April 7, 2025, CyberNewswire — SpyCloud, the leading identity threat protection company, today released new analysis of its recaptured darknet data repository that shows threat actors are increasingly bypassing endpoint protection solutions: 66% of malware infections ……
IT Security News Hourly Summary 2025-04-07 18h : 12 posts
12 posts were published in the last hour 16:5 : Brothers Behind Rydox Dark Web Market Extradited to US 16:5 : Vidar Stealer: Revealing A New Deception Strategy 16:4 : Vulnerability Summary for the Week of March 31, 2025 15:32…