CISA, FBI Warn of Medusa Ransomware Impacting Critical Infrastructure –
CISA and FBI warn of Medusa ransomware impacting over 300 victims across critical infrastructure sectors with double extortion tactics – Read More –
Author: Joe-W
Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails – The Hacker News
Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking.com using an increasingly popular social engineering technique called ClickFix to deliver credential-stealing malware. The activity, the tech giant said, started in December 2024 and operates with the end goal of conducting financial fraud and theft. It’s – Read More –...
Siemens SINEMA Remote Connect Server – All CISA Advisories
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, see Siemens’ ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINEMA Remote...
Siemens SCALANCE LPE9403 – All CISA Advisories
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, see Siemens’ ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE LPE9403...
‘ClickFix’ Phishing Scam Impersonates Booking.com to Target Hospitality –
Microsoft said the ongoing phishing campaign is designed to infect hospitality firms with multiple credential-stealing malware – Read More –
North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps – The Hacker News
The North Korea-linked threat actor known as ScarCruft is said to have been behind a never-before-seen Android surveillance tool named KoSpy targeting Korean and English-speaking users. Lookout, which shared details of the malware campaign, said the earliest versions date back to March 2022. The most recent samples were flagged in March 2024. It’s not clear how successful these efforts were....
New OBSCURE#BAT Malware Targets Users with Fake Captchas – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
OBSCURE#BAT malware campaign exploits social engineering & fake software downloads to evade detection, steal data and persist on… – Read More – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Medusa ransomware: FBI and CISA urge organisations to act now to mitigate threat – Graham Cluley
The Medusa ransomware gang continues to present a major threat to the critical infrastructure sector, according to a newly-released – with at least one organisation hit with a “triple-extortion” threat. Read more in my article on the Tripwire State of Security blog. – Read More – Graham Cluley
GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks – The Hacker News
Two high-severity security flaws have been disclosed in the open-source ruby-saml library that could allow malicious actors to bypass Security Assertion Markup Language (SAML) authentication protections. SAML is an XML-based markup language and open-standard used for exchanging authentication and authorization data between parties, enabling features like single sign-on (SSO), which allows – Read More – The Hacker News
INE Security Alert: Using AI-Driven Cybersecurity Training to Counter Emerging Threats – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Cary, North Carolina, 13th March 2025, CyberNewsWire – Read More – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025 – The Hacker News
As IT environments grow more complex, IT professionals are facing unprecedented pressure to secure business-critical data. With hybrid work the new standard and cloud adoption on the rise, data is increasingly distributed across different environments, providers and locations, expanding the attack surface for emerging cyberthreats. While the need for a strong data protection strategy has become – Read More –...
Tech Complexity Puts UK Cybersecurity at Risk –
Palo Alto Networks found that nearly two-thirds of UK organizations cited technology complexity as the most significant challenge towards building a sophisticated security posture – Read More –
The problems with patching – NCSC Feed
Applying patches may be a basic security principle, but that doesn’t mean it’s always easy to do in practice. – Read More – NCSC Feed
There’s a hole in my bucket – NCSC Feed
…or ‘Why do people leave sensitive data in unprotected AWS S3 buckets?’ – Read More – NCSC Feed
Thinking about the security of AI systems – NCSC Feed
Why established cyber security principles are still important when developing or implementing machine learning models. – Read More – NCSC Feed
The logic behind three random words – NCSC Feed
Whilst not a password panacea, using ‘three random words’ is still better than enforcing arbitrary complexity requirements. – Read More – NCSC Feed
The security benefits of modern collaboration in the cloud – NCSC Feed
By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’. – Read More – NCSC Feed
The problems with forcing regular password expiry – NCSC Feed
Why the NCSC decided to advise against this long-established security guideline. – Read More – NCSC Feed
The problems with forcing regular password expiry – NCSC Feed
Why the NCSC decided to advise against this long-established security guideline. – Read More – NCSC Feed
The security benefits of modern collaboration in the cloud – NCSC Feed
By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’. – Read More – NCSC Feed
Thanking the vulnerability research community with NCSC Challenge Coins – NCSC Feed
Reflecting on the positive impact of the Vulnerability Reporting Service – and introducing something new for selected contributors. – Read More – NCSC Feed
The Cyber Assessment Framework 3.1 – NCSC Feed
Latest version of the CAF focusses on clarification and consistency between areas of the CAF. – Read More – NCSC Feed
Spotlight on shadow IT – NCSC Feed
New guidance to help organisations manage rogue devices and services within the enterprise. – Read More – NCSC Feed
VC Investment in Cyber Startups Surges 35% –
VC firms invested 35% more in cybersecurity startups in North America and Europe in Q4 2024 than a year previously – Read More –
UK ICO Fires GDPR “Warning Shot” Over Use of Children’s Data –
The UK’s information commissioner has warned that all digital firms using children’s data must follow the GDPR – Read More –
Modat launches premier product, Modat Magnify for Cybersecurity Professionals – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
The Hague, the Netherlands, 13th March 2025, CyberNewsWire – Read More – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Security, complexity and Huawei; protecting the UK’s telecoms networks – NCSC Feed
With 5G set to transform mobile services, Ian Levy explains how the UK has approached telecoms security, and what that means for the future. – Read More – NCSC Feed
Supplier assurance: having confidence in your suppliers – NCSC Feed
Questions to ask your suppliers that will help you gain confidence in their cyber security. – Read More – NCSC Feed
WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback – The Hacker News
Browser maker Mozilla is urging users to update their Firefox instances to the latest version to avoid facing issues with using add-ons due to the impending expiration of a root certificate. “On March 14, 2025, a root certificate used to verify signed content and add-ons for various Mozilla projects, including Firefox, will expire,” Mozilla said. “Without updating to Firefox –...
Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk – The Hacker News
Meta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild. The vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating high severity. Described as an out-of-bounds write flaw, it could be exploited to achieve remote code execution when parsing certain font –...
Researching the hard problems in hardware security – NCSC Feed
Introducing the next chapter of the NCSC research problem book, which aims to inspire research on the biggest impact topics in hardware cyber security. – Read More – NCSC Feed
RITICS: Securing cyber-physical systems – NCSC Feed
Discover the Research Institute in Trustworthy Inter-connected Cyber-physical Systems. – Read More – NCSC Feed
Protecting how you administer cloud services – NCSC Feed
New advice on implementing high-risk and ‘break-glass’ accesses in cloud services. – Read More – NCSC Feed
Protect your management interfaces – NCSC Feed
Why it’s important to protect the interfaces used to manage your infrastructure, and some recommendations on how you might do this. – Read More – NCSC Feed
Post-quantum cryptography: what comes next? – NCSC Feed
Jeremy B explains how the NCSC will help organisations plan their migration to PQC. – Read More – NCSC Feed
Preparing for the long haul: the cyber threat from Russia – NCSC Feed
Although the UK has not experienced severe cyber attacks in relation to Russia’s invasion of Ukraine, now is not the time for complacency. – Read More – NCSC Feed
Principles and how they can help us with assurance – NCSC Feed
Explaining the forthcoming NCSC Technology Assurance Principles. – Read More – NCSC Feed
Products on your perimeter considered harmful (until proven otherwise) – NCSC Feed
As attackers’ tactics change, so must network defenders’. – Read More – NCSC Feed
Chinese Volt Typhoon Hackers Infiltrated US Electric Utility for Nearly a Year – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Dragos reveals Volt Typhoon hackers infiltrated a US electric utility for 300 days, collecting sensitive data. Learn how this cyberattack threatens infrastructure. – Read More – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Smashing Security podcast #408: A gag order backfires, and a snail mail ransom demand – Graham Cluley
What happens when a healthcare giant’s legal threats ignite a Streisand Effect wildfire… while a ransomware gang appears to ditch the dark web for postage stamps? Find out about this, and more, in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault. – Read More – Graham Cluley
Lazarus Group deceives developers with 6 new malicious npm packages – CyberScoop
Lazarus Group has burrowed deeper into the npm registry and planted six new malicious packages designed to deceive software developers and disrupt their workflows, researchers at cybersecurity firm Socket said in a Monday blog post. The North Korea-linked threat group embedded BeaverTail malware into the npm packages to install backdoors and steal credentials and data in cryptocurrency wallets, according to...
Legislative push for child online safety runs afoul of encryption advocates (again) – CyberScoop
Two members of the Senate Judiciary Committee are preparing to introduce a bipartisan bill that would mandate tech companies to more swiftly report and remove child sexual abuse material hosted on their platforms, but critics warn it could result in the weakening or elimination of encrypted messaging services that many Americans rely on. The Stop CSAM Act, first introduced in...
Picklescan Vulnerabilities Could Let Hackers Bypass AI Security Checks – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Sonatype researchers uncover critical vulnerabilities in picklescan. Learn how these flaws impact AI model security, Hugging Face, and… – Read More – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Chinese Cyber Espionage Group UNC3886 Backdoored Juniper Routers – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
UNC3886 hackers target Juniper routers with custom backdoor malware, exploiting outdated systems for stealthy access and espionage. Learn how to stay protected. – Read More – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
ISACA London Chapter’s E-Voting System Comes Under Scrutiny –
ISACA London Chapter members demand e-voting system investigation over security and privacy concerns – Read More –
iOS 18.3.2 Patches Actively Exploited WebKit Vulnerability –
iOS 18.3.2 patches actively exploited WebKit flaw, addressing critical security risks for users – Read More –
Trump Administration Shakes Up CISA with Staff and Funding Cuts –
In a new round of cuts since Donald Trump became president, 100 people working with the US Cybersecurity and Infrastructure Agency saw their contracts terminated – Read More –
Man found guilty of planting infinite loop logic bomb on ex-employer’s system – Graham Cluley
Davis Lu had planted malicious Java code onto his employer’s network that would cause “infinite loops” that would ultimate result in the server crashing or hanging. Read more in my article on the Hot for Security blog. – Read More – Graham Cluley
Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits – The Hacker News
The China-nexus cyber espionage group tracked as UNC3886 has been observed targeting end-of-life MX routers from Juniper Networks as part of a campaign designed to deploy custom backdoors, highlighting their ability to focus on internal networking infrastructure. “The backdoors had varying custom capabilities, including active and passive backdoor functions, as well as an embedded script that – Read More –...
Aptori Now on Google Cloud Marketplace for AI-Powered Security and Automated Risk Remediation – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News
San Jose, United States / California, 12th March 2025, CyberNewsWire – Read More – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News