2025

Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968)

Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968) 2025-02-05 at 18:49 By Zeljka Zorz XE Group, a cybercriminal outfit that has been active for over a decade, has been quietly exploiting zero-day vulnerabilities (CVE-2025-25181, CVE-2024-57968) in VeraCore software, a popular solution for warehouse management and order fulfillment. According to Intezer and Solis Security […]

React to this headline:

Loading spinner

Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968) Read More »

How Agentic AI will be Weaponized for Social Engineering Attacks

How Agentic AI will be Weaponized for Social Engineering Attacks 2025-02-05 at 18:30 By Stu Sjouwerman With each passing year, social engineering attacks are becoming bigger and bolder thanks to rapid advancements in artificial intelligence. The post How Agentic AI will be Weaponized for Social Engineering Attacks appeared first on SecurityWeek. This article is an

React to this headline:

Loading spinner

How Agentic AI will be Weaponized for Social Engineering Attacks Read More »

Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign

Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign 2025-02-05 at 18:03 By The North Korea-linked Lazarus Group has been linked to an active campaign that leverages fake LinkedIn job offers in the cryptocurrency and travel sectors to deliver malware capable of infecting Windows, macOS, and Linux operating systems. According to cybersecurity company

React to this headline:

Loading spinner

Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign Read More »

You know something’s wrong when Clippy fills you with nostalgia for simpler times

You know something’s wrong when Clippy fills you with nostalgia for simpler times 2025-02-05 at 17:48 By Richard Speed It looks like you want to irritate Windows users. Do you want some help with that? There are some things that can’t be unseen, including Microsoft posting a hand-drawn image of the company’s infamous assistant, Clippy,

React to this headline:

Loading spinner

You know something’s wrong when Clippy fills you with nostalgia for simpler times Read More »

Meta Blocks Paragon Spyware Targeting Journalists on WhatsApp

Meta Blocks Paragon Spyware Targeting Journalists on WhatsApp 2025-02-05 at 17:45 View original post at vpnMentor Meta has confirmed a zero-click spyware attack on WhatsApp that targeted around 90 journalists and civil society members across more than two dozen countries. The breach, detected in December 2024, involved spyware from Israeli firm Paragon Solutions, delivered via

React to this headline:

Loading spinner

Meta Blocks Paragon Spyware Targeting Journalists on WhatsApp Read More »

What Is RedNote/Xiaohongshu and Is It Safe to Use in 2025?

What Is RedNote/Xiaohongshu and Is It Safe to Use in 2025? 2025-02-05 at 17:18 View original post at vpnMentor Dubbed “China’s Instagram meets Pinterest,” RedNote (or Xiaohongshu) is more than just a place to share photos — it’s a hub for discovering products, trends, and user reviews. With over 300 million active users, it’s no

React to this headline:

Loading spinner

What Is RedNote/Xiaohongshu and Is It Safe to Use in 2025? Read More »

Hacker Conversations: David Kennedy – an Atypical Typical Hacker

Hacker Conversations: David Kennedy – an Atypical Typical Hacker 2025-02-05 at 17:04 By Kevin Townsend David Kennedy is a hacker. There is no doubt about that. He has qualities common among hackers, but also many differences. The post Hacker Conversations: David Kennedy – an Atypical Typical Hacker appeared first on SecurityWeek. This article is an

React to this headline:

Loading spinner

Hacker Conversations: David Kennedy – an Atypical Typical Hacker Read More »

Los Alamos lab to research next-gen chip technologies

Los Alamos lab to research next-gen chip technologies 2025-02-05 at 16:48 By Dan Robinson Radiation-hardening for space environments and energy efficiency tweaks for above and below Los Alamos National Laboratory (LANL) is leading a project to transform how chips are designed and manufactured, to make them more energy efficient and able to better tolerate environmental

React to this headline:

Loading spinner

Los Alamos lab to research next-gen chip technologies Read More »

SafeBreach exposure validation platform identifies security gaps

SafeBreach exposure validation platform identifies security gaps 2025-02-05 at 16:33 By Industry News SafeBreach launched SafeBreach exposure validation platform, which combines the power of its time-tested breach and attack simulation (BAS) product—now called Validate—and its new attack path validation product, Propagate. Together, they provide enterprise security teams with deeper insight into threat exposure and a

React to this headline:

Loading spinner

SafeBreach exposure validation platform identifies security gaps Read More »

Cyber Insights 2025: OT Security

Cyber Insights 2025: OT Security 2025-02-05 at 16:33 By Kevin Townsend Just as OT technology differs from IT technology, the threats, likely adversaries, and potential harm also differ. The post Cyber Insights 2025: OT Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Loading spinner

Cyber Insights 2025: OT Security Read More »

Swap EOL Zyxel routers, upgrade Netgear ones!

Swap EOL Zyxel routers, upgrade Netgear ones! 2025-02-05 at 16:18 By Zeljka Zorz There will be no patches for EOL Zyxel routers under attack via CVE-2024-40891, the company has confirmed. Meanwhile, Netgear has issued patches for critical flaws affecting its routers and wireless access points. Zyxel vulnerability: Exploited, no patches CVE-2024-40891, a command injection vulnerability

React to this headline:

Loading spinner

Swap EOL Zyxel routers, upgrade Netgear ones! Read More »

Lazarus Group Targets Organizations with Sophisticated LinkedIn Recruiting Scam

Lazarus Group Targets Organizations with Sophisticated LinkedIn Recruiting Scam 2025-02-05 at 16:03 By Ionut Alexandru BALTARIU Bitdefender Labs warns of an active campaign by the North Korea-linked Lazarus Group, targeting organizations by capturing credentials and delivering malware through fake LinkedIn job offers. LinkedIn may be a vital tool for job seekers and professionals, but it

React to this headline:

Loading spinner

Lazarus Group Targets Organizations with Sophisticated LinkedIn Recruiting Scam Read More »

US cranks up espionage charges against ex-Googler accused of trade secrets heist

US cranks up espionage charges against ex-Googler accused of trade secrets heist 2025-02-05 at 15:52 By Connor Jones Mountain View clocked onto the scheme with days to spare A Chinese national faces a substantial stint in prison and heavy fines if found guilty of several additional charges related to economic espionage and theft of trade

React to this headline:

Loading spinner

US cranks up espionage charges against ex-Googler accused of trade secrets heist Read More »

Cybersecurity M&A Roundup: 45 Deals Announced in January 2025

Cybersecurity M&A Roundup: 45 Deals Announced in January 2025 2025-02-05 at 15:52 By Eduard Kovacs A significant number of cybersecurity-related merger and acquisition (M&A) deals announced in January 2025.  The post Cybersecurity M&A Roundup: 45 Deals Announced in January 2025 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Loading spinner

Cybersecurity M&A Roundup: 45 Deals Announced in January 2025 Read More »

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts 2025-02-05 at 15:51 By Cybercriminals are increasingly leveraging legitimate HTTP client tools to facilitate account takeover (ATO) attacks on Microsoft 365 environments. Enterprise security company Proofpoint said it observed campaigns using HTTP clients Axios and Node Fetch to send HTTP requests and

React to this headline:

Loading spinner

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts Read More »

Silent Lynx Using PowerShell, Golang, and C++ Loaders in Multi-Stage Cyberattacks

Silent Lynx Using PowerShell, Golang, and C++ Loaders in Multi-Stage Cyberattacks 2025-02-05 at 15:51 By A previously undocumented threat actor known as Silent Lynx has been linked to cyber attacks targeting various entities in Kyrgyzstan and Turkmenistan. “This threat group has previously targeted entities around Eastern Europe and Central Asian government think tanks involved in

React to this headline:

Loading spinner

Silent Lynx Using PowerShell, Golang, and C++ Loaders in Multi-Stage Cyberattacks Read More »

Satori provides visibility into data store risk levels

Satori provides visibility into data store risk levels 2025-02-05 at 15:35 By Industry News Satori announced its new capabilities, enabling security teams to be in control of all customer data across the development lifecycle in a simple, cost-effective, and holistic way. These capabilities automate the daunting tasks of discovering data, risk assessment, providing granular access

React to this headline:

Loading spinner

Satori provides visibility into data store risk levels Read More »

Workday erases 8.5% of workforce because of…AI

Workday erases 8.5% of workforce because of…AI 2025-02-05 at 15:06 By Paul Kunert That’s 1,750 positions about to join the employment queue and it’s only February Workday is erasing 8.5 percent of its personnel under a restructuring scheme because… AI.… This article is an excerpt from The Register View Original Source React to this headline:

React to this headline:

Loading spinner

Workday erases 8.5% of workforce because of…AI Read More »

850,000 individuals impacted by Globe Life ransomware incident

850,000 individuals impacted by Globe Life ransomware incident 2025-02-05 at 15:06 By An estimated 850,000 individuals have been affected by a ransomware attack on Globe Life, an insurance organization. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

850,000 individuals impacted by Globe Life ransomware incident Read More »

Riot Raises $30 Million for Employee Cybersecurity Solution

Riot Raises $30 Million for Employee Cybersecurity Solution 2025-02-05 at 15:06 By Ionut Arghire Riot has raised $30 million in Series B funding for a platform that helps employees improve their cybersecurity posture. The post Riot Raises $30 Million for Employee Cybersecurity Solution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Loading spinner

Riot Raises $30 Million for Employee Cybersecurity Solution Read More »

Scroll to Top