SecurityTicks

In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU Hacked

In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU Hacked 2025-03-28 at 14:07 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Key members of Hellcat ransomware group identified, controversy around CrushFTP flaw CVE, NYU website hacked and defaced. The post In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU […]

In Other News: Hellcat Hackers Unmasked, CrushFTP Bug Controversy, NYU Hacked Read More »

Windows Server 2025 locking up after February patch, no word of when a fix will land

Windows Server 2025 locking up after February patch, no word of when a fix will land 2025-03-28 at 13:47 By Iain Thomson Similar issue in Windows 11 resolved as of Wednesday Microsoft is warning that a faulty patch pushed out in February is causing Windows Server 2025 Remote Desktop sessions to freeze under certain circumstances.… […]

Windows Server 2025 locking up after February patch, no word of when a fix will land Read More »

Cloudflare open sources OPKSSH to bring Single Sign-On to SSH

Cloudflare open sources OPKSSH to bring Single Sign-On to SSH 2025-03-28 at 13:31 By Help Net Security OPKSSH (OpenPubkey SSH) makes it easy to authenticate to servers over SSH using OpenID Connect (OIDC), allowing developers to ditch manually configured SSH keys in favor of identity provider-based access. By tightly integrating with identity providers (IdPs) and […]

Cloudflare open sources OPKSSH to bring Single Sign-On to SSH Read More »

New Issuance Requirements Improve HTTPS Certificate Validation

New Issuance Requirements Improve HTTPS Certificate Validation 2025-03-28 at 13:31 By Ionut Arghire HTTPS certificate issuance now requires Multi-Perspective Issuance Corroboration and linting to improve validation. The post New Issuance Requirements Improve HTTPS Certificate Validation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

New Issuance Requirements Improve HTTPS Certificate Validation Read More »

Lazarus Group’s 2024 pause was repositioning for $1.4B Bybit hack

Lazarus Group’s 2024 pause was repositioning for $1.4B Bybit hack 2025-03-28 at 13:03 By Cointelegraph by Zoltan Vardai North Korea-affiliated hackers may have scaled back their operations in the second half of 2024 while preparing for what became the largest crypto hack in history. The crypto industry was rocked by the enormous hack on Feb. […]

Lazarus Group’s 2024 pause was repositioning for $1.4B Bybit hack Read More »

NFT sales plunge 63% in Q1, but Pudgy Penguins, Doodles buck trend

NFT sales plunge 63% in Q1, but Pudgy Penguins, Doodles buck trend 2025-03-28 at 13:03 By Cointelegraph by Ezra Reguerra Sales of non-fungible tokens (NFTs) dropped sharply in the first quarter of 2025, plunging 63% year-over-year. Still, a few standout collections defied the downturn and posted gains. NFTs recorded $1.5 billion in total sales from […]

NFT sales plunge 63% in Q1, but Pudgy Penguins, Doodles buck trend Read More »

Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)

Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857) 2025-03-28 at 12:57 By Zeljka Zorz Google’s fixing of CVE-2025-2783, a Chrome zero-day vulnerability exploited by state-sponsored attackers, has spurred Firefox developers to check whether the browser might have a similar flaw – and they found it. There’s currently no indication that the Firefox bug (CVE-2025-2857) […]

Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857) Read More »

Morphing Meerkat Phishing Kits Target Over 100 Brands

Morphing Meerkat Phishing Kits Target Over 100 Brands 2025-03-28 at 12:57 By Ionut Arghire A threat actor tracked as Morphing Meerkat abuses DNS mail exchange (MX) records to deliver spoofed login pages. The post Morphing Meerkat Phishing Kits Target Over 100 Brands appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Morphing Meerkat Phishing Kits Target Over 100 Brands Read More »

Product Walkthrough: How Datto BCDR Delivers Unstoppable Business Continuity

Product Walkthrough: How Datto BCDR Delivers Unstoppable Business Continuity 2025-03-28 at 12:57 By Long gone are the days when a simple backup in a data center was enough to keep a business secure. While backups store information, they do not guarantee business continuity during a crisis. With IT disasters far too common and downtime burning […]

Product Walkthrough: How Datto BCDR Delivers Unstoppable Business Continuity Read More »

UK govt data people not ‘technical,’ says ex-Downing St data science head

UK govt data people not ‘technical,’ says ex-Downing St data science head 2025-03-28 at 12:33 By Lindsay Clark Despite pockets of excellence, many wouldn’t make the grade in business, AI advisor implies A former director of data science at the UK prime minister’s office has told MPs that people working with data in government are […]

UK govt data people not ‘technical,’ says ex-Downing St data science head Read More »

Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe

Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe 2025-03-28 at 12:33 By Ionut Arghire The Grandoreiro banking trojan has reemerged in new campaigns targeting users in Latin America and Europe. The post Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe Read More »

Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia

Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia 2025-03-28 at 12:26 By Eduard Kovacs Firefox developers have determined that their browser is affected by a vulnerability similar to the recent Chrome sandbox escape zero-day. The post Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia appeared first on SecurityWeek. This […]

Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia Read More »

Nuclear center must replace roof on 70-year-old lab so it can process radioactive waste

Nuclear center must replace roof on 70-year-old lab so it can process radioactive waste 2025-03-28 at 11:36 By Lindsay Clark Project sees 7-year delay and budget swell to £1.5B, but nuclear leadership ‘confident’ it has an alternative The center of the UK’s nuclear industry has agreed on alternatives for how it will process waste into […]

Nuclear center must replace roof on 70-year-old lab so it can process radioactive waste Read More »

‘Bitcoin Macro Index’ bear signal puts $110K BTC price return in doubt

‘Bitcoin Macro Index’ bear signal puts $110K BTC price return in doubt 2025-03-28 at 11:03 By Cointelegraph by William Suberg Bitcoin (BTC) risks falling into a fresh bear market as a large collection of BTC price metrics has produced a “bearish divergence.” In a social media discussion on March 27, Bitcoin commentators flagged troubling signals […]

‘Bitcoin Macro Index’ bear signal puts $110K BTC price return in doubt Read More »

PJobRAT Malware Campaign Targeted Taiwanese Users via Fake Chat Apps

PJobRAT Malware Campaign Targeted Taiwanese Users via Fake Chat Apps 2025-03-28 at 10:46 By An Android malware family previously observed targeting Indian military personnel has been linked to a new campaign likely aimed at users in Taiwan under the guise of chat apps. “PJobRAT can steal SMS messages, phone contacts, device and app information, documents, […]

PJobRAT Malware Campaign Targeted Taiwanese Users via Fake Chat Apps Read More »

VMware distributor Arrow says minimum software subs set to jump from 16 to 72 cores

VMware distributor Arrow says minimum software subs set to jump from 16 to 72 cores 2025-03-28 at 09:32 By Simon Sharwood Claims Broadcom will levy 20 percent penalty for customers who don’t pay before renewal deadlines The French limb of global tech distributor Arrow has emailed VMware partners it serves with news of big price […]

VMware distributor Arrow says minimum software subs set to jump from 16 to 72 cores Read More »

After Chrome patches zero-day used to target Russians, Firefox splats similar bug

After Chrome patches zero-day used to target Russians, Firefox splats similar bug 2025-03-28 at 08:45 By Iain Thomson Single click on a phishing link in Google browser blew up sandbox on Windows Google pushed out an emergency patch for Chrome on Windows this week to stop attackers exploiting a sandbox-breaking zero-day vulnerability, seemingly used by […]

After Chrome patches zero-day used to target Russians, Firefox splats similar bug Read More »

Mozilla Patches Critical Firefox Bug Similar to Chrome’s Recent Zero-Day Vulnerability

Mozilla Patches Critical Firefox Bug Similar to Chrome’s Recent Zero-Day Vulnerability 2025-03-28 at 08:45 By Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after Google patched a similar flaw in Chrome that came under active exploitation as a zero-day. The security vulnerability, CVE-2025-2857, has been […]

Mozilla Patches Critical Firefox Bug Similar to Chrome’s Recent Zero-Day Vulnerability Read More »

Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts

Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts 2025-03-28 at 08:45 By Cybersecurity researchers have discovered several cryptocurrency packages on the npm registry that have been hijacked to siphon sensitive information such as environment variables from compromised systems. “Some of these packages have lived on npmjs.com for over 9 years, and provide […]

Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts Read More »

Android financial threats: What businesses need to know to protect themselves and their customers

Android financial threats: What businesses need to know to protect themselves and their customers 2025-03-28 at 08:30 By Help Net Security The rise of mobile banking has changed how businesses and customers interact. It brought about increased convenience and efficiency, but has also opened new doors for cybercriminals, particularly on the Android platform, which dominates […]

Android financial threats: What businesses need to know to protect themselves and their customers Read More »

Scroll to Top