A sophisticated phishing campaign exploiting a nearly 8-year-old Microsoft Office vulnerability to distribute the dangerous XLoader information stealer. The attack leverages CVE-2017-11882, a memory corruption vulnerability in Microsoft’s Equation Editor component, demonstrating that cybercriminals continue to successfully weaponize older security…
Tag: EN
Securing Boardroom Buy-In for Your Cybersecurity Budget
Cybersecurity has evolved from a technical concern to a strategic business priority. With escalating regulatory requirements, sophisticated threat actors, and the rising financial and reputational costs of breaches, boards of directors are increasingly scrutinizing cybersecurity investments. However, securing budget approval…
Outlaw Cybergang Attacking Linux Environments Worldwide With New Malware
A previously documented threat actor known as Outlaw (or “Dota”) has resurfaced with an enhanced malware toolkit targeting Linux servers globally, according to a recent incident response investigation by Securelist analysts. The group, active since at least 2018, has shifted…
Konni APT Hackers Using Multi-Stage Malware to Attack Organizations
A sophisticated multi-stage malware campaign linked to the North Korean Konni APT group has been detected targeting organizations primarily in South Korea. Security researchers uncovered the operation on April 29, 2025, revealing a complex attack chain designed to establish persistent…
OpenAI Rolled Out Last Week’s GPT-4o Update Causing Flattering Issues
OpenAI has reversed last week’s update to its GPT-4o model after users reported the AI had become excessively agreeable and flattering, a behavior AI researchers term “sycophancy.” The company confirmed that the rollback is complete for free users and is…
Firewalls and VPNs Under Siege as Businesses Report Growing Cyber Intrusions
A security researcher has discovered an ongoing cyberattack that is active, exploiting a newly discovered vulnerability in Fortinet’s FortiGate Firewalls to infiltrate corporate and enterprise networks and has been conducting this activity for some time. A security advisory published…
Photos: RSAC 2025
RSAC 2025 Conference is taking place at the Moscone Center in San Francisco. Help Net Security is on-site, and this gallery takes you inside the event. The featured vendors are: PowerDMARC, Skyhawk Security, ThreatLocker, Stellar Cyber, Center for Internet Security,…
RidgeSphere streamlines security validation operations
Ridge Security announced RidgeSphere, a centralized management platform designed to simplify the orchestration of multiple RidgeBot , the AI-powered automated security validation platform, across client environments. Built for Managed Security Service Providers (MSSPs) and large enterprises, RidgeSphere eliminates operational silos,…
UK Retail Giant Co-op Shuts Down IT Systems After Cyberattack Attempt
Retailer Acts Swiftly to Limit Threat as UK Retail Sector Faces Growing Digital Risks This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: UK Retail Giant Co-op Shuts Down…
Cybercriminals Trick Tenants into Sending Rent to Fraudulent Accounts
Proofpoint, a leading cybersecurity firm, has identified and named a new financially motivated Business Email Compromise (BEC) threat actor, dubbed TA2900, actively targeting individuals in France and occasionally Canada. This actor employs sophisticated social engineering tactics, sending French-language emails centered…
Researchers Turned Azure Storage Wildcards into a Stealthy Internal SOCKS5 Backdoor
Security researchers at Quarkslab have developed a new covert channel technique that exploits Microsoft’s recommended Azure Storage firewall configurations to bypass network restrictions. Their proof-of-concept tool, named “ProxyBlob,” leverages Azure Blob Storage to create a SOCKS5 proxy, allowing attackers to…
Age Verification in the European Union: The Commission’s Age Verification App
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> This is the second part of a three-part series about age verification in the European Union. In this blog post, we take a deep dive into the…
Download: Edgescan 2025 Vulnerability Statistics Report
Edgescan’s 2025 Vulnerability Statistics Report explores risk density patterns across network/device and application layers, uncovers complex vulnerabilities that automated tools consistently miss, and evaluates the real-world effectiveness of leading vulnerability scoring methodologies, including EPSS, CISA KEV, CVSS, and our proprietary…
Airplay-enabled devices open to attack via “AirBorne” vulnerabilities
Vulnerabilities in Apple’s AirPlay Protocol, AirPlay Software Development Kits (SDKs), and the CarPlay Communication Plug-in could allow attackers to compromise AirPlay-enabled devices developed and sold by Apple and by other companies. “Because AirPlay is a fundamental piece of software for…
UK Retailer Co-op Confirms Hack, Reports “Small Impact” to Its Systems
The Co-op stores, quick commerce operations and funeral homes are trading as usual This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Retailer Co-op Confirms Hack, Reports “Small Impact” to Its Systems
Over 90% of Cybersecurity Leaders Worldwide Report Cloud-Targeted Cyberattacks
A groundbreaking report from Rubrik Zero Labs, titled The State of Data Security: A Distributed Crisis, reveals a staggering reality for global IT and cybersecurity leaders: 90% of surveyed professionals have experienced cyberattacks within the last year, with many facing…
Ruby on Rails Vulnerability Allows CSRF Protection Bypass
A critical vulnerability in Ruby on Rails’ Cross-Site Request Forgery (CSRF) protection mechanism has been identified, affecting all versions since the 2022/2023 “fix” and persisting in the current implementation. This flaw undermines the framework’s ability to secure applications against CSRF…
New WordPress Malware Disguised as Anti-Malware Plugin Takes Full Control of Websites
The Wordfence Threat Intelligence team has identified a new strain of WordPress malware that masquerades as a legitimate plugin, often named ‘WP-antymalwary-bot.php.’ First detected on January 22, 2025, during a routine site cleanup, this malware exhibits advanced capabilities, enabling attackers…
Structify raises $4.1M seed to turn unstructured web data into enterprise-ready datasets
Brooklyn-based Structify emerges from stealth with $4.1 million in seed funding to transform how businesses prepare data for AI, promising to save data scientists from the task that consumes 80% of their time. This article has been indexed from Security…
DHS Head Accuses CISA of Acting Like “the Ministry of Truth”
Kristi Noem said the Trump administration is introducing reforms to ensure CISA is focusing on the core security functions it was created for This article has been indexed from www.infosecurity-magazine.com Read the original article: DHS Head Accuses CISA of Acting…