2025

Chinese snoops use stealth RAT to backdoor US orgs – still active last week 2025-04-15 at 17:22 By Jessica Lyons Let the espionage and access resale campaigns begin (again) A cyberspy crew or individual with ties to China’s Ministry of State Security has infected global organizations with a remote access trojan (RAT) that’s “even better” […]

Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool 2025-04-15 at 17:21 By The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called VShell to infect Linux systems. “Threat actors are increasingly using

Critical Apache Roller Vulnerability (CVSS 10.0) Enables Unauthorized Session Persistence 2025-04-15 at 17:21 By A critical security vulnerability has been disclosed in the Apache Roller open-source, Java-based blogging server software that could allow malicious actors to retain unauthorized access even after a password change. The flaw, assigned the CVE identifier CVE-2025-24859, carries a CVSS score

Pump.Fun’s PumpSwap DEX processed $2.5B of trades last week, up 40% 2025-04-15 at 17:01 By Cointelegraph by Adrian Zmudzinski Market data shows PumpSwap, the decentralized exchange of memecoin launch platform Pump.Fun, processed $2.5 billion of trades last week. DefiLlama data shows that in the week of April 6, PumpSwap saw a trading volume increase of nearly 40%

DeFi platform KiloEx offers $750K bounty to hacker 2025-04-15 at 17:01 By Cointelegraph by Ezra Reguerra Decentralized exchange (DEX) KiloEx has offered the hacker who exploited $7.5 million in crypto from its platform a 10% white hat bounty.  On April 15, KiloEx posted an offer directed to the hacker who stole millions from the DEX.

Crypto’s debanking problem persists despite new regulations 2025-04-15 at 17:01 By Cointelegraph by Aaron Wood The crypto industry’s inability to access banking services still concerns many industry observers despite recent policy victories. In past years, financial services firms and banks concerned about fiduciary risk, reporting liabilities and reputational risk often would refuse to offer service

US senator warns ‘China is cheering’ for proposed NASA budget cuts 2025-04-15 at 16:25 By Richard Speed Bipartisan support needed to keep DOGE from the door The proposed cuts to NASA’s budget are drawing sharp criticism from US lawmakers, with one saying: “If you cut this budget, you cut into the heart of America’s leadership

Incomplete NVIDIA patch could leave AI infrastructure and data at risk 2025-04-15 at 16:19 By An incomplete NVIDIA patch could leave AI infrastructure and data at risk. Security leaders share their insights.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Using AI to Predict, Stop and Recover from the Next Ransomware Incident 2025-04-15 at 16:13 By Eric Chien Introducing Incident Prediction, an industry-first capability that can accurately predict an attackers’ next four or five moves with up to 100% confidence This article is an excerpt from Broadcom Software Blogs View Original Source

Can you really buy anything with Pi coin? Find out here! 2025-04-15 at 16:13 By Cointelegraph by Shailey Singh Key takeaways Pi coin finally went live on open mainnet in February 2025, unlocking real-world use cases after years in closed beta. You can spend Pi coin, but mostly within P2P communities and KYC-verified Pi apps

Crypto ‘uninvestable’ if exchanges ignore manipulation: DeFiance CEO 2025-04-15 at 16:13 By Cointelegraph by Ezra Reguerra A crypto investment executive said the biggest problem with digital asset markets is price manipulation, claiming that collusion between market makers and exchanges distorts token prices.  Arthur Cheong, founder of crypto investment firm DeFiance Capital, said in an X

ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK? 2025-04-15 at 15:35 By Richard Speed Stopping users shooting themselves in the foot with last century’s tech Microsoft has twisted the knife into ActiveX once again, setting Microsoft 365 to disable all controls without so much as a prompt.… This article

Majority of Browser Extensions Can Access Sensitive Enterprise Data, New Report Finds 2025-04-15 at 15:35 By Everybody knows browser extensions are embedded into nearly every user’s daily workflow, from spell checkers to GenAI tools. What most IT and security people don’t know is that browser extensions’ excessive permissions are a growing risk to organizations. LayerX