Leaked chat logs have exposed connections between the BlackBasta ransomware group and Russian authorities, according to new analysis by Trellix This article has been indexed from www.infosecurity-magazine.com Read the original article: BlackBasta Ransomware Ties to Russian Authorities Uncovered
IT Security News Hourly Summary 2025-03-18 15h : 32 posts
32 posts were published in the last hour 13:38 : Fake DeepSeek AI Installers, Websites, and Apps Spreading Malware 13:38 : Microsoft Warns of StilachiRAT Stealing Remote Desktop Protocol Session Data 13:38 : DocSwap Malware Masquerades as Security Document Viewer…
Fake DeepSeek AI Installers, Websites, and Apps Spreading Malware
Cybercriminals exploit AI hype with SEO poisoning, tricking users into downloading malware disguised as DeepSeek software, warns McAfee Labs in a new report. This article has been indexed from Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News Read…
Microsoft Warns of StilachiRAT Stealing Remote Desktop Protocol Session Data
Microsoft has recently issued a warning about a novel remote access trojan (RAT) known as StilachiRAT, which poses significant threats to system security by stealing sensitive data, including credentials and cryptocurrency information. This sophisticated malware was discovered by Microsoft Incident…
DocSwap Malware Masquerades as Security Document Viewer to Attack Android Users Worldwide
The cybersecurity landscape has witnessed a new threat with the emergence of the DocSwap malware, which disguises itself as a “Document Viewing Authentication App” to deceive users into installing it on their Android devices. This sophisticated malware is suspected to…
Squid Werewolf Mimics Recruiters to Target Job Seekers and Steal Personal Data
In a sophisticated phishing campaign uncovered by the BI.ZONE Threat Intelligence team, the Squid Werewolf group, also known as APT37, has been impersonating recruiters to target key employees in various organizations. This espionage cluster uses fake job opportunities to lure…
Hackers Use DLL Side-Loading to Deploy Malicious Python Code
A recent discovery by Xavier Mertens, a senior handler at the Internet Storm Center, has highlighted a sophisticated attack where hackers utilize DLL side-loading to deploy malicious Python code. This technique involves tricking an application into loading a malicious DLL…
Bybit Hack: Details of Sophisticated Multi-Stage Attack Uncovered
The Bybit hack, which occurred on February 21, 2025, has been extensively analyzed by multiple cybersecurity teams, including Sygnia. This attack exposed significant security vulnerabilities across various domains, including macOS malware, AWS cloud compromise, application security, and smart contract security.…
This new tool lets you see how much of your data is exposed online – and it’s free
Want to keep your personal info safe? Use this tool from ExpressVPN to see how much of it is out there. This article has been indexed from Latest stories for ZDNET in Security Read the original article: This new tool…
Confirmed: Google buys Wiz for $32B to beef up in cloud security
Google is making the biggest acquisition in its history. The company’s parent company Alphabet is buying Wiz, the cloud security startup, for $32 billion in an all-cash transaction. The deal has now been confirmed. Wiz will remain an independent platform…
ChatGPT Vulnerability Actively Exploited From 10,000+ IPs to Attack US Government Organizations
Attackers are actively exploiting a Server-Side Request Forgery (SSRF) vulnerability in OpenAI’s ChatGPT infrastructure. The vulnerability, identified as CVE-2024-27564, has become a significant threat despite its medium severity classification. According to research by cybersecurity firm Veriti, this vulnerability has already been…
Google Parent Alphabet in Talks to Acquire Cyber Security Group Wiz for $30bn
Google’s parent company, Alphabet Inc., is reportedly in advanced negotiations to acquire cybersecurity startup Wiz for approximately $30 billion. If completed, this acquisition would become the tech giant’s largest deal in its history, far surpassing its previous record of $12.5…
GIMP 3.0 Image Editor Released For Linux, macOS, Unix, and Windows
At long last, the first release of GIMP 3.0 is here! This is the end result of seven years of rigorous development by volunteer developers, designers, artists, and community members (for reference, GIMP 2.10 was first published in 2018). With…
Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash
Google has confirmed reports that it’s buying cloud security giant Wiz and says it’s prepared to pay $32 billion in cash. The post Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash appeared first on SecurityWeek. This…
New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads
Cybersecurity researchers have warned about a large-scale ad fraud campaign that has leveraged hundreds of malicious apps published on the Google Play Store to serve full-screen ads and conduct phishing attacks. “The apps display out-of-context ads and even try to…
Over 16.8 Billion Records Exposed as Data Breaches Increase 6%
Flashpoint data points to a surge in data breaches fueled by compromised credentials, ransomware and exploits This article has been indexed from www.infosecurity-magazine.com Read the original article: Over 16.8 Billion Records Exposed as Data Breaches Increase 6%
(g+) Datenanonymisierung: Wie Firmen trotz DSGVO Daten sicher nutzen können
Die DSGVO schützt Daten von Kunden und Mitarbeitern. Mit Anonymisierungsverfahren lassen sie sich jedoch frei nutzen. (DSGVO, KI) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: (g+) Datenanonymisierung: Wie Firmen trotz DSGVO Daten sicher nutzen…
Vorsicht bei diesen Gratis-Tools: Kostenlose Datei-Konverter verbreiten Malware
Bei der Verwendung kostenloser Online-Fileconverter ist Vorsicht geboten. Einige Anbieter nutzen solche Tools zur Verbreitung von Schadsoftware. (Malware, Virus) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Vorsicht bei diesen Gratis-Tools: Kostenlose Datei-Konverter verbreiten Malware
AI Addressing New Need to Secure Data from The Inside Out
Today’s traditional perimeter-based cybersecurity measures are increasingly inadequate due to threats that arise from within an organization. Whether born of malice or mistake, it’s clear that insider threats are only… The post AI Addressing New Need to Secure Data from…
Google’s Parent Alphabet in Talks to Acquire Cybersecurity Firm Wiz for $30 Billion
Alphabet, the parent company of Google, is reportedly in discussions to acquire Wiz, a leading cybersecurity firm, for a staggering $30 billion. This potential acquisition highlights Alphabet’s strategic expansion into the cybersecurity sector, which has become increasingly crucial for businesses…
Amazon Ends Local Voice Processing, Transitions Fully to Cloud
Amazon announced that it will discontinue the local voice processing feature for its AI assistant Alexa. This change, set to take effect on March 28, means that all voice commands will be processed in the cloud instead of on the…
How Manufacturers Can Turn Security Into a Competitive Advantage
Digitization has significantly changed manufacturing over the past 25 years. The benefits include reducing inventory costs and machine downtime, and boosting throughput and forecasting accuracy. But as digitization has grown in prevalence, so have the security challenges facing manufacturers. This…
Halliday raises $20 million to build AI agents that operate safely on blockchain
Halliday secures $20 million to develop secure AI agents for blockchain, solving critical safety challenges for enterprise applications with immutable guardrails and automated workflows. This article has been indexed from Security News | VentureBeat Read the original article: Halliday raises…
What is Bundesamt für Sicherheit in der Informationstechnik (BSI)?
Most countries have some sort of government agency dedicated to protecting digital infrastructure and promoting cybersecurity awareness. In the English-speaking world alone, the UK has the National Cyber Security Center (NCSC), the US has the National Institute of Standards and…