AttackFeed by Joe Wagner

A new malware campaign has been observed leveraging social engineering tactics to deliver an open-source rootkit called r77. The activity, condemned OBSCURE#BAT by Securonix, enables threat actors to establish persistence and evade detection on compromised systems. It’s currently not known who is behind the campaign. The rootkit “has the ability to cloak or mask any … Read More “OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection  – The Hacker News” »

Tenable Research reveals that AI chatbot DeepSeek R1 can be manipulated to generate keyloggers and ransomware code. While…  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News 

FBI and CISA warn of Medusa ransomware attacks impacting critical infrastructure. Learn about Medusa’s tactics, prevention tips, and…  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News 

The post US must prioritize cybersecurity training for the military’s engineers appeared first on CyberScoop.   – Read More  – CyberScoop 

February 2025 saw a record 126% surge in ransomware attacks, with Cl0p leading the charge. Hackers exploited file…  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News 

A misconfigured database exposed 108.8 GB of sensitive data, including information on over 86,000 healthcare workers affiliated with…  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News 

Has your old Chromecast suddenly developed a problem? You’re not alone it seems. Read more in my article on the Hot for Security blog.  – Read More  – Graham Cluley 

Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking.com using an increasingly popular social engineering technique called ClickFix to deliver credential-stealing malware. The activity, the tech giant said, started in December 2024 and operates with the end goal of conducting financial fraud and theft. … Read More “Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails  – The Hacker News” »

The North Korea-linked threat actor known as ScarCruft is said to have been behind a never-before-seen Android surveillance tool named KoSpy targeting Korean and English-speaking users. Lookout, which shared details of the malware campaign, said the earliest versions date back to March 2022. The most recent samples were flagged in March 2024. It’s not clear … Read More “North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps  – The Hacker News” »

OBSCURE#BAT malware campaign exploits social engineering & fake software downloads to evade detection, steal data and persist on…  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News 

The Medusa ransomware gang continues to present a major threat to the critical infrastructure sector, according to a newly-released – with at least one organisation hit with a “triple-extortion” threat. Read more in my article on the Tripwire State of Security blog.  – Read More  – Graham Cluley 

Two high-severity security flaws have been disclosed in the open-source ruby-saml library that could allow malicious actors to bypass Security Assertion Markup Language (SAML) authentication protections. SAML is an XML-based markup language and open-standard used for exchanging authentication and authorization data between parties, enabling features like single sign-on (SSO), which allows  – Read More  – … Read More “GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks  – The Hacker News” »

Cary, North Carolina, 13th March 2025, CyberNewsWire  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News 

As IT environments grow more complex, IT professionals are facing unprecedented pressure to secure business-critical data. With hybrid work the new standard and cloud adoption on the rise, data is increasingly distributed across different environments, providers and locations, expanding the attack surface for emerging cyberthreats. While the need for a strong data protection strategy has … Read More “Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025  – The Hacker News” »

The Hague, the Netherlands, 13th March 2025, CyberNewsWire  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News 

Browser maker Mozilla is urging users to update their Firefox instances to the latest version to avoid facing issues with using add-ons due to the impending expiration of a root certificate. “On March 14, 2025, a root certificate used to verify signed content and add-ons for various Mozilla projects, including Firefox, will expire,” Mozilla said. … Read More “WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback  – The Hacker News” »

Meta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild. The vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating high severity. Described as an out-of-bounds write flaw, it could be exploited to achieve remote code execution … Read More “Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk  – The Hacker News” »

Dragos reveals Volt Typhoon hackers infiltrated a US electric utility for 300 days, collecting sensitive data. Learn how this cyberattack threatens infrastructure.  – Read More  – Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News