Trap for Lumma thief
22
May
2025

Lumma information stealer infrastructure disrupted

The US Department of Justice (DOJ) and Microsoft have disrupted the infrastructure of the Lumma information stealer (infostealer). Lumma Stealer,…

Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program
22
May
2025

Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program

May 22, 2025The Hacker NewsSecurity Framework / Cyber Defense It’s not enough to be secure. In today’s legal climate, you…

Security Theater or Real Defense? The KPIs That Tell the Truth
22
May
2025

Security Theater or Real Defense? The KPIs That Tell the Truth

A critical step in maturing any cybersecurity program is the ability to measure and report on its performance. Yet measuring…

GoDaddy
22
May
2025

FTC finalizes order requiring GoDaddy to secure hosting services

The U.S. Federal Trade Commission (FTC) has finalized an order requiring web hosting giant GoDaddy to secure its services to…

Linux kernel SMB 0-Day Vulnerability Uncovered Using ChatGPT
22
May
2025

Linux kernel SMB 0-Day Vulnerability Uncovered Using ChatGPT

Security researcher Sean has successfully identified a zero-day vulnerability in the Linux kernel using OpenAI’s o3 model. The discovery, designated…

Grafana Zero-Day Vulnerability Allows Attackers to Redirect Users to Malicious Sites
22
May
2025

Grafana Zero-Day Vulnerability Allows Attackers to Redirect Users to Malicious Sites

The High-severity cross-site scripting (XSS) vulnerability has been discovered in Grafana, prompting the immediate release of security patches across all…

Man in the dark wearing a hat
22
May
2025

Stalkerware apps go dark after data breach

A stalkerware company that recently leaked millions of users’ personal information online has taken all of its assets offline without…

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks
22
May
2025

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks

May 22, 2025Ravie LakshmananEnterprise Security / Malware A recently patched pair of security flaws affecting Ivanti Endpoint Manager Mobile (EPMM)…

Healthcare data breach
22
May
2025

Marlboro-Chesterfield Pathology Data Breach Impacts 235,000 People

Marlboro-Chesterfield Pathology (MCP), a full service anatomic pathology lab in North Carolina, was recently targeted in a ransomware attack that…

Cisco Identity Services RADIUS Vulnerability Allows Attackers to Trigger Denial of Service Condition
22
May
2025

Cisco Identity Services RADIUS Vulnerability Allows Attackers to Trigger Denial of Service Condition

Cisco has disclosed a significant security vulnerability in its Identity Services Engine (ISE) that could enable unauthenticated remote attackers to…

College Student Pleads Guilty in PowerSchool Data Breach Extortion
22
May
2025

19-Year-Old Admits to PowerSchool Data Breach Extortion

A 19-year-old college student faces charges after pleading guilty to cyber extortion targeting PowerSchool, exposing data of 60 million+ students…

Marks&Spencer cyberattack
22
May
2025

Marks & Spencer Expects Ransomware Attack to Cost $400 Million

UK retailer Marks & Spencer (MKS.L) has shared another update on the impact of the recent cyberattack, and the company…