January 2025

Zero-day exploits plague Ivanti Connect Secure appliances for second year running 2025-01-09 at 16:46 By Connor Jones Factory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging those in charge of defending their orgs to take mitigation efforts “seriously” as Ivanti battles two dangerous new vulnerabilities, […]

React to this headline:

Trump China tariffs to ‘overshadow’ the ‘progress’ of AI PCs 2025-01-09 at 16:19 By Paul Kunert Already inflated costs of NPU-based boxes set to jump on import tax The “progress” of AI PCs is being “overshadowed” by enterprises concerned about the state of the economy and US President-elect Trump’s tariff threats for kit made in

React to this headline:

New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption 2025-01-09 at 16:19 By Cybersecurity researchers have uncovered a new, stealthier version of a macOS-focused information-stealing malware called Banshee Stealer. “Once thought dormant after its source code leak in late 2024, this new iteration introduces advanced string encryption inspired by Apple’s XProtect,” Check Point Research

React to this headline:

Security pros baited with fake Windows LDAP exploit traps 2025-01-09 at 15:19 By Connor Jones Tricky attackers trying yet again to deceive the good guys on home territory Security researchers are once again being lured into traps by attackers, this time with fake exploits of serious Microsoft security flaws.… This article is an excerpt from

React to this headline:

Product Review: How Reco Discovers Shadow AI in SaaS 2025-01-09 at 15:18 By As SaaS providers race to integrate AI into their product offerings to stay competitive and relevant, a new challenge has emerged in the world of AI: shadow AI.  Shadow AI refers to the unauthorized use of AI tools and copilots at organizations.

React to this headline:

“U.S. Cyber Trust Mark” launched by the White House 2025-01-09 at 15:05 By The White House announced a “U.S. Cyber Trust Mark,” establishing a label for American consumers to verify if their connected devices are cybersecure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

NASA’s lunar Roomba set to suck up Moon dirt for study 2025-01-09 at 14:23 By Richard Speed Collecting regolith samples with a blast of gas NASA is sending a “vacuum cleaner” to the Moon as a payload on next week’s Blue Ghost 1 mission to land on the lunar surface.… This article is an excerpt

React to this headline:

Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions 2025-01-09 at 13:50 By Ransomware isn’t slowing down—it’s getting smarter. Encryption, designed to keep our online lives secure, is now being weaponized by cybercriminals to hide malware, steal data, and avoid detection.The result? A 10.3% surge in encrypted attacks over the past year

React to this headline:

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan 2025-01-09 at 13:50 By Japan’s National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The primary

React to this headline:

What happens when someone subpoenas Cloudflare to unmask a blogger? This… 2025-01-09 at 13:18 By Thomas Claburn Ex-politician in UK claims he’s been defamed – and goes to court in US for answers A former deputy mayor in the UK has subpoenaed Cloudflare in the US to discover the identity of an anonymous British political

React to this headline:

£3.8B later, old tech supplier flames still burning for HMRC 2025-01-09 at 12:43 By Lindsay Clark Deal supposed to end in 2017 continues to haunt HMRC procurement In the last five years, the UK’s tax collector has spent £3.8 billion with tech suppliers – including £591 million without any outside competition – on top of

React to this headline:

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection 2025-01-09 at 12:43 By Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution (RCE). The vulnerability in question, CVE-2024-52875, refers to

React to this headline:

Recent research reveals “phish-free PayPal phishing” scam 2025-01-09 at 12:03 By Research reveals the emergence of a “phish-free PayPal phishing” scam. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

UK government pledges law against sexually explicit deepfakes 2025-01-09 at 11:37 By Lindsay Clark Not just making them, but sharing them too The UK government has promised to make the creation and sharing of sexually explicit deepfake images a criminal offence.… This article is an excerpt from The Register View Original Source React to this

React to this headline: