week in security
19
May
2025

A week in security (May 12 – May 18)

Last week on Malwarebytes Labs: Last week on ThreatDown: Stay safe! Our business solutions remove all remnants of ransomware and…

CVE-2025-4389 vulnerability
19
May
2025

Crawlomatic WordPress Plugin Hit By Critical CVE-2025-4389

A severe security vulnerability has been discovered in the popular WordPress plugin, Crawlomatic Multisite Scraper Post Generator, potentially placing thousands…

Exploiting dMSA for Advanced Active Directory Persistence
19
May
2025

Exploiting dMSA for Advanced Active Directory Persistence

Security researchers have identified new methods for achieving persistence in Active Directory environments by exploiting Delegated Managed Service Accounts (dMSAs),…

SEC X Account
19
May
2025

SEC X Account Hacker Gets Prison Time Over Bitcoin ETF Hoax

Eric Council Jr., a 26-year-old from Athens, Alabama, has been sentenced to 14 months in federal prison. He played a…

Abusing dMSA with Advanced Active Directory Persistence Techniques 
19
May
2025

Abusing dMSA with Advanced Active Directory Persistence Techniques 

Delegated Managed Service Accounts (dMSAs), introduced in Windows Server 2025, represent Microsoft’s latest innovation in secure service account management.  While…

Critical glibc Flaw Puts Millions of Linux Systems at Risk
19
May
2025

Critical glibc Flaw Puts Millions of Linux Systems at Risk

Security researchers have disclosed a significant vulnerability in the GNU C Library (glibc), potentially affecting millions of Linux systems worldwide….

Naveen Goud
19
May
2025

How to identify hackers sitting in a computer network

Cybersecurity threats are an ever-present danger in today’s interconnected world, and one of the most insidious types of breaches involves…

Why EU encryption policy needs technical and civil society input
19
May
2025

Why EU encryption policy needs technical and civil society input

In this Help Net Security interview, Full Professor at University of Leuven, unpacks the European Commission’s encryption agenda, urging a…

Naveen Goud
19
May
2025

Scam Messages and emails increase exponentially after M & S Cyber Attack

A recent cyberattack on Marks and Spencer (M&S) has raised significant concerns, revealing that hackers infiltrated the UK-based retailer’s systems…

AI hallucinations and their risk to cybersecurity operations
19
May
2025

AI hallucinations and their risk to cybersecurity operations

AI systems can sometimes produce outputs that are incorrect or misleading, a phenomenon known as hallucinations. These errors can range…

Jane Devry
19
May
2025

Experts React: Coinbase Discloses Breach, Faces Up to $400 Million in Losses

Coinbase, one of the largest cryptocurrency exchanges, has disclosed a significant data breach that exposed sensitive customer information, including government-issued…

Hanko: Open-source authentication and user management
19
May
2025

Hanko: Open-source authentication and user management

Hanko is an open-source, API-first authentication solution purpose-built for the passwordless era. “We focus on helping developers and organizations modernize…