A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process This article has been indexed from www.infosecurity-magazine.com Read the original article: CrushFTP Vulnerability Exploited Following Disclosure Issues
Tag: www.infosecurity-magazine.com
Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware
The cybercriminal uses the service of Proton66, an infamous Russian-based bulletproof hosting provider, to deploy malware This article has been indexed from www.infosecurity-magazine.com Read the original article: Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware
Sensitive Data Breached in Highline Schools Ransomware Incident
Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the September 2024 incident This article has been indexed from www.infosecurity-magazine.com Read the original article: Sensitive Data Breached in Highline Schools Ransomware Incident
Over Half of Attacks on Electricity and Water Firms Are Destructive
Semperis claims 62% of water and electricity providers were hit by cyber-attacks in the past year This article has been indexed from www.infosecurity-magazine.com Read the original article: Over Half of Attacks on Electricity and Water Firms Are Destructive
Nearly 600 Phishing Domains Emerge Following Bybit Heist
BforeAI researchers discover 596 suspicious Bybit-themed domains designed to defraud visitors This article has been indexed from www.infosecurity-magazine.com Read the original article: Nearly 600 Phishing Domains Emerge Following Bybit Heist
Stripe API Skimming Campaign Unveils New Techniques for Theft
A novel skimming attack has been observed by Jscramber, using the Stripe API to steal payment information by injecting malicious scripts into pages This article has been indexed from www.infosecurity-magazine.com Read the original article: Stripe API Skimming Campaign Unveils New…
Royal Mail Investigates Data Breach Affecting Supplier
A cyber threat actor has claimed to have leaked 144GB of data from Royal Mail users This article has been indexed from www.infosecurity-magazine.com Read the original article: Royal Mail Investigates Data Breach Affecting Supplier
Gray Bots Surge as Generative AI Scraper Activity Increases
Gray bots surge as generative AI scraper activity increases, impacting web applications with millions of requests daily This article has been indexed from www.infosecurity-magazine.com Read the original article: Gray Bots Surge as Generative AI Scraper Activity Increases
Bybit Heist Fuels Record Crypto-Theft Surge, Says CertiK
Hackers stole $1.67bn of cryptocurrencies in the first quarter of 2025, a 303% increase This article has been indexed from www.infosecurity-magazine.com Read the original article: Bybit Heist Fuels Record Crypto-Theft Surge, Says CertiK
North Korea’s Fake IT Worker Scheme Sets Sights on Europe
Google has found a significant increase in North Korean actors attempting to gain employment as IT workers in European companies, leading to data theft and extortion This article has been indexed from www.infosecurity-magazine.com Read the original article: North Korea’s Fake…
Steam Surges to Top of Most Spoofed Brands List in Q1
Gaming community Steam appeared most often in phishing emails and texts detected by Guardio in Q1 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: Steam Surges to Top of Most Spoofed Brands List in Q1
ICO Apologizes After Data Protection Response Snafu
The UK’s data protection regulator says it is overwhelmed with complaints from the public This article has been indexed from www.infosecurity-magazine.com Read the original article: ICO Apologizes After Data Protection Response Snafu
Ukraine Blames Russia for Railway Hack, Labels It “Act of Terrorism”
The CERT-UA investigation concluded that the attack’s techniques were “characteristic of Russian intelligence services” This article has been indexed from www.infosecurity-magazine.com Read the original article: Ukraine Blames Russia for Railway Hack, Labels It “Act of Terrorism”
WP Ultimate CSV Importer Flaws Expose 20,000 Websites to Attacks
WP Ultimate CSV Importer flaws expose 20,000 websites to attacks enabling attackers to achieve full site compromise This article has been indexed from www.infosecurity-magazine.com Read the original article: WP Ultimate CSV Importer Flaws Expose 20,000 Websites to Attacks
New Phishing Attack Combines Vishing and DLL Sideloading Techniques
A new attack targeting Microsoft Teams users used vishing, remote access tools and DLL sideloading to deploy a JavaScript backdoor This article has been indexed from www.infosecurity-magazine.com Read the original article: New Phishing Attack Combines Vishing and DLL Sideloading Techniques
Google to Switch on E2EE for All Gmail Users
Google is set to roll out end-to-end encryption for all Gmail users, boosting security, compliance and data sovereignty efforts This article has been indexed from www.infosecurity-magazine.com Read the original article: Google to Switch on E2EE for All Gmail Users
Cybercriminals Expand Use of Lookalike Domains in Email Attacks
BlueVoyant found that the use of lookalike domains in email-based attacks is allowing actors to extend the types of individuals and organizations being targeted This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybercriminals Expand Use of Lookalike…
Cyber Security and Resilience Bill Will Apply to 1000 UK Firms
A thousand UK service providers will be expected to comply with the forthcoming Cyber Security and Resilience Bill This article has been indexed from www.infosecurity-magazine.com Read the original article: Cyber Security and Resilience Bill Will Apply to 1000 UK Firms
New Malware Variant RESURGE Exploits Ivanti Vulnerability
CISA recommends immediate action to address malware variant RESURGE exploiting Ivanti vulnerability CVE-2025-0282 This article has been indexed from www.infosecurity-magazine.com Read the original article: New Malware Variant RESURGE Exploits Ivanti Vulnerability
ClickFake Interview Campaign by Lazarus Targets Crypto Job Seekers
New “ClickFake Interview” campaign attributed to the Lazarus Group targets crypto professionals with fake job offers This article has been indexed from www.infosecurity-magazine.com Read the original article: ClickFake Interview Campaign by Lazarus Targets Crypto Job Seekers