Cyberattacks targeting IT vendors intensify, causing bigger losses
Dive Brief: Cyberattacks targeting third-party vendors are causing more financial damage than ever before, cyber risk management firm Resilience said in a recent report. Nearly…
Month: March 2025
Malicious Chrome extensions can spoof password managers in new attack
A newly devised “polymorphic” attack allows malicious Chrome extensions to morph into browser extensions, including password managers, crypto wallets, and banking apps, to steal sensitive information.…
Researchers Bypassed CrowdStrike Falcon Sensor to Execute Malicious Applications
Security researchers at SEC Consult have discovered a significant vulnerability in CrowdStrike’s Falcon Sensor that allowed attackers to bypass detection mechanisms and execute malicious applications.…
The US Army Is Using ‘CamoGPT’ to Purge DEI From Training Materials
The United States Army is employing a prototype generative artificial intelligence tool to identify references to diversity, equity, inclusion, and accessibility (DEIA) for removal from…
SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension
Palo Alto, Singapore, March 6th, 2025, CyberNewsWire With recent attack disclosures like Browser Syncjacking and extension infostealers, browser extensions have become a primary security concern…
SquareX Unveils Polymorphic Extensions that Morph Infostealers into Any Browser Extension – Password Managers, Wallets at Risk
Palo Alto, Singapore, March 6th, 2025, CyberNewsWire With recent attack disclosures like Browser Syncjacking and extension infostealers, browser extensions have become a primary security concern…
Best 100 Cybercrime Podcasts
MillionPodcasts, who calls itself the ultimate destination for podcast media contacts, recently released a list of the best 100 cybercrime podcasts. The Cybercrime Magazine Podcast, listed at…
EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
Mar 06, 2025Ravie LakshmananMalware / Ransomware The financially motivated threat actor known as EncryptHub has been observed orchestrating sophisticated phishing campaigns to deploy information stealers…
Two Hackers Arrested For ATM Jackpotting by Deploying Malware
Federal prosecutors unsealed criminal complaints today against David Jose Gomez Cegarra, 24, and Jesus Segundo Hernandez-Gil, 19, members of the Tren de Aragua Gang, for…
Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution
Mar 06, 2025Ravie LakshmananData Security / Software Security Elastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization…
Why did IT suppliers allow Birmingham City Council to go live with Oracle?
Birmingham City Council’s Oracle system woes have continued into 2025, with concerns being raised in Monday’s meeting of the council to set the annual budget,…
Google Announces AI-Powered Scam Detector For Android Users
In its latest Android security update, Google has unveiled a dual-layer defense system combining AI-powered scam detection for both text messages and voice calls. The…