Threat actors have reemerged in mid-2025 leveraging previously disclosed vulnerabilities in SonicWall SSL VPN appliances to deploy Akira ransomware on enterprise networks. Beginning in July, multiple incidents of initial access via unpatched SonicWall devices were reported across North America and…
Tag: EN
New Chaosbot Leveraging CiscoVPN and Active Directory Passwords to Execute Network Commands
ChaosBot surfaced in late September 2025 as a sophisticated Rust-based backdoor targeting enterprise networks. Initial investigations revealed that threat actors gained entry by exploiting compromised CiscoVPN credentials coupled with over-privileged Active Directory service accounts. Once inside, ChaosBot was stealthily deployed…
Spyware maker NSO Group confirms acquisition by US investors
NSO Group confirmed to TechCrunch that an unnamed group of American investors has taken “controlling ownership” of the surveillance tech maker. This article has been indexed from Security News | TechCrunch Read the original article: Spyware maker NSO Group confirms…
Your passwords don’t need so many fiddly characters, NIST says
It’s once again time to change your passwords, but if one government agency has its way, this might be the very last time you do it. This article has been indexed from Malwarebytes Read the original article: Your passwords don’t…
Apple voices concerns over age-check law that could put user privacy at risk
The more sensitive data that companies have to collect and store, the greater the consequences for users if it’s breached. This article has been indexed from Malwarebytes Read the original article: Apple voices concerns over age-check law that could put…
What is CAA? Understanding Certificate Authority Authorization
Learn what a CAA record is, how it protects your domain from unauthorized SSL certificate issuance, and how to set it up for stronger website security. The post What is CAA? Understanding Certificate Authority Authorization appeared first on Security Boulevard.…
The Psychology of Security: Why Users Resist Better Authentication
70% of Americans feel overwhelmed by passwords, yet only half choose secure ones despite knowing the risks. The problem isn’t user education—it’s psychology. Discover why users resist better authentication and the UX design principles that make security feel human, not…
Telstra Denies Scattered Spider Data Breach Claims Amid Ransom Threats
Telstra, one of Australia’s leading telecommunications companies, has denied claims made by the hacker group Scattered Spider that it suffered a massive data breach compromising nearly 19 million personal records. The company issued a statement clarifying that its internal…
SonicWall investigation shows hackers gained wide access to customer backup files
The probe contradicts earlier claims that a limited set of MySonicWall customers were impacted. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: SonicWall investigation shows hackers gained wide access to customer backup files
Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries
A threat actor known as Storm-2657 has been observed hijacking employee accounts with the end goal of diverting salary payments to attacker-controlled accounts. “Storm-2657 is actively targeting a range of U.S.-based organizations, particularly employees in sectors like higher education, to…
Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers
Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js’ Single Executable Application (SEA) feature as a way to distribute its payloads. According to Fortinet FortiGuard Labs, select iterations have also employed the open-source…
Oracle E-Business Suite exploitation traced back as early as July
Researchers say an extortion campaign linked to the Clop ransomware group used a series of chained vulnerabilities and sophisticated malware. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Oracle E-Business Suite exploitation traced…
Stealit Malware Using Node.js to Hide in Fake Game and VPN Installers
Fortinet warns of Stealit, a MaaS infostealer, now targeting Windows systems and evading detection by using Node.js’s SEA feature while hiding in fake game and VPN installers. This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech,…
Your browser is an AI-enabled OS, so secure it like one
<p>From an application perspective, web browsers have become a sort of OS within an OS. With the introduction of agentic AI capabilities within the browser (just look at what <a href=”https://www.techtarget.com/searchenterpriseai/news/366629196/Perplexitys-Chrome-bid-shows-growing-competition-in-AI-search”>Perplexity</a>, Opera and, to some extent, Google and Microsoft are…
Ukraine sees surge in AI-Powered cyberattacks by Russia-linked Threat Actors
Russia-linked actors use AI to craft phishing and malware attacks against entities in Ukraine, says SSSCIP. Russian hackers increasingly use AI in cyberattacks against Ukraine, the country’s State Service for Special Communications and Information Protection (SSSCIP) reported. Beyond AI-generated phishing,…
Juniper patched nine critical flaws in Junos Space
Juniper fixed nearly 220 flaws in Junos OS, Junos Space, and Security Director, including nine critical bugs in Junos Space. Juniper Networks released patches to address nearly 220 vulnerabilities in Junos OS, Junos Space, and Security Director, including nine critical…
Pro-Russia hacktivist group dies of cringe after falling into researchers’ trap
Forescout’s phony water plant fooled TwoNet into claiming a fake cyber victory – then it quietly shut up shop Security researchers say they duped pro-Russia cybercriminals into targeting a fake critical infrastructure organization, which the crew later claimed – via…
In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware
Other noteworthy stories that might have slipped under the radar: US universities targeted by payroll pirates, Zimbra vulnerability exploited, Mic-E-Mouse attack. The post In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware appeared first on SecurityWeek. This…
Microsoft Defender Incorrectly Flags SQL Server Software as End-of-life
Microsoft Defender for Endpoint is incorrectly flagging specific versions of SQL Server as having reached their end-of-life, causing potential confusion for system administrators. The issue, tracked under advisory DZ1168079, stems from a code bug and affects the Threat and Vulnerability…
RondoDox Botnet Exploits 50+ Vulnerabilities to Attack Routers, CCTV Systems and Web Servers
Since its emergence in early 2025, RondoDox has rapidly become one of the most pervasive IoT-focused botnets in operation, targeting a wide range of network-connected devices—from consumer routers to enterprise CCTV systems and web servers. Its modular design allows operators…