The ransomware group known as RansomHouse has recently enhanced the encryption mechanism used in its attacks, moving away from a basic, single-step process to a more advanced, multi-layered approach. This change reflects a deliberate effort to strengthen the effectiveness…
IT Security News Hourly Summary 2025-12-21 15h : 4 posts
4 posts were published in the last hour 14:2 : Security Affairs newsletter Round 555 by Pierluigi Paganini – INTERNATIONAL EDITION 14:2 : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 76 14:2 : Lead Generation Sector Faces Scrutiny Following 16TB Data Exposure…
Security Affairs newsletter Round 555 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. ATM…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 76
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CyberVolk | A Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks Operation MoneyMount-ISO — Deploying…
Lead Generation Sector Faces Scrutiny Following 16TB Data Exposure
In the wake of a massive unsecured MongoDB database, researchers have rekindled their interest in the risks associated with corporate intelligence and lead generation ecosystems. Researchers discovered that the MongoDB instance had been exposed, containing about 16 terabytes of…
£1.8bn BritCard: A Security Investment Against UK Fraud
The UK has debated national ID for years, but the discussion has become more pointed alongside growing privacy concerns. Two decades ago Tony Blair could sing the praises of ID cards and instead of public hysteria about data held by government,…
Top 10 CERT-In Empanelled Auditors in India in 2026
Organisations today are increasingly exposed to cyber risks originating from unchecked network scanning and unpatched vulnerabilities. At the same time, the rise of malicious large language models like WormGPT and FraudGPT has lowered the barrier for hackers, enabling even less-skilled…
How essential are NHIs in the effective management of cloud security
Are Non-Human Identities the Missing Piece in Cloud Security? Where data breaches and cyber threats are a constant concern, the question of how organizations can effectively manage cloud security has become more critical than ever. Non-Human Identities (NHIs) are emerging…
Can NHIs drive better data security practices
How Do Non-Human Identities (NHIs) Enhance Data Security Practices? Have you ever considered the importance of firmly managing Non-Human Identities (NHIs) in your organization’s data security strategy? With digital becomes increasingly sophisticated, safeguarding machine identities is crucial for shielding sensitive…
How to leverage Agentic AI for cost-effective security
Are You Effectively Leveraging Agentic AI for Cost-Effective Security? The rise of digital transformation within organizations has significantly enhanced productivity and innovation yet has introduced potential vulnerabilities, particularly for machine identities or Non-Human Identities (NHIs). Understanding how to manage NHIs…
What innovations in NHIs are transforming cybersecurity
What Are Non-Human Identities and How Do They Impact Cybersecurity? How can organizations secure their digital amidst a rapidly transforming cybersecurity environment? Where industries increasingly transition to cloud-based solutions, managing Non-Human Identities (NHIs) becomes an essential component of a robust…
Week in review: Exploited zero-day in Cisco email security appliances, Kali Linux 2025.4 released
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: How researchers are teaching AI agents to ask for permission the right way People are starting to hand more decisions to AI agents, from booking…
Massive Android botnet Kimwolf infects millions, strikes with DDoS
The Kimwolf Android botnet has infected 1.8M+ devices, launching massive DDoS attacks and boosting its C&C domain, says XLab. Kimwolf is a newly discovered Android botnet linked to the Aisuru botnet that has infected over 1.8 million devices and issued…
IT Security News Hourly Summary 2025-12-21 09h : 1 posts
1 posts were published in the last hour 8:2 : NIST tried to pull the pin on NTP servers after blackout caused atomic clock drift
NIST tried to pull the pin on NTP servers after blackout caused atomic clock drift
A rare case of deliberately trying to induce an outage A staffer at the USA’s National Institute of Standards and Technology (NIST) tried to disable backup generators powering some of its Network Time Protocol infrastructure, after a power outage around…
Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence
Threat hunters have discerned new activity associated with an Iranian threat actor known as Infy (aka Prince of Persia), nearly five years after the hacking group was observed targeting victims in Sweden, the Netherlands, and Turkey. “The scale of Prince…
IT Security News Hourly Summary 2025-12-21 06h : 1 posts
1 posts were published in the last hour 5:2 : 100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild
100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild
Security researchers have identified at least 120 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager devices vulnerable to a critical zero-day flaw that attackers are actively exploiting in the wild. The vulnerability, tracked as CVE-2025-20393, currently has…
IT Security News Hourly Summary 2025-12-21 00h : 1 posts
1 posts were published in the last hour 22:55 : IT Security News Daily Summary 2025-12-20
IT Security News Daily Summary 2025-12-20
32 posts were published in the last hour 22:2 : ATM Jackpotting ring busted: 54 indicted by DoJ 21:2 : Bangladeshi Operator of Fake ID Marketplaces Charged in International Fraud Case 20:31 : LinkedIn Profile Data Among Billions of Records…
ATM Jackpotting ring busted: 54 indicted by DoJ
The U.S. Department of Justice has indicted 54 individuals over a multi-million-dollar ATM jackpotting fraud scheme. U.S. DoJ indicted 54 people for a nationwide ATM jackpotting scheme that stole millions via malware. The case links the crimes to the cybercrime…
Bangladeshi Operator of Fake ID Marketplaces Charged in International Fraud Case
A 29-year-old Bangladeshi man has been indicted on federal charges for operating online marketplaces that sold fraudulent identity document templates to customers worldwide, U.S. authorities announced. Zahid Hasan of Dhaka, Bangladesh, faces nine federal counts, including six counts of transferring…
LinkedIn Profile Data Among Billions of Records Found in Exposed Online Database
Cybersecurity researchers recently identified a massive online database that was left publicly accessible without any security protections, exposing a vast collection of professional and personal information. The database contained more than 16 terabytes of data, representing over 4.3 billion…
IT Security News Hourly Summary 2025-12-20 21h : 2 posts
2 posts were published in the last hour 19:31 : DevOps and Cybersecurity: Building a New Line of Defense Against Digital Threats 19:31 : NDSS 2025 – Too Subtle to Notice: Investigating Executable Stack Issues in Linux Systems