Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates
21
Mar
2025

Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates

Mar 21, 2025Ravie LakshmananRansomware / BYOVD The threat actors behind the Medusa ransomware-as-a-service (RaaS) operation have been observed using a…

Steam pulls game demo infecting Windows with info-stealing malware
21
Mar
2025

Steam pulls game demo infecting Windows with info-stealing malware

Valve has removed from its Steam store the game title ‘Sniper: Phantom’s Resolution’ following multiple users reporting that the demo…

MEDUSA Ransomware Deploys Malicious ABYSSWORKER Driver to Disable EDR
21
Mar
2025

MEDUSA Ransomware Deploys Malicious ABYSSWORKER Driver to Disable EDR

In a recent analysis by Elastic Security Labs, a malicious driver known as ABYSSWORKER has been identified as a key…

Top 10 Most Common Social Engineering Attacks
21
Mar
2025

Top 10 Most Common Social Engineering Attacks

21 Mar Small Business Alert: Top 10 Most Common Social Engineering Attacks Posted at 09:01h in Blogs by Taylor Fox…

Over 150 US Government Database Servers Vulnerable to Internet Exposure
21
Mar
2025

Over 150 US Government Database Servers Vulnerable to Internet Exposure

A recent open-source investigation has uncovered one of the largest exposures of US government data to cyber threats. More than…

New Attacks Exploit Year-Old ServiceNow Flaws - Israel Hit Hardest
21
Mar
2025

New Attacks Exploit Year-Old ServiceNow Flaws

ServiceNow vulnerability alert: Hackers are actively exploiting year-old flaws (CVE-2024-4879, CVE-2024-5217, CVE-2024-5178) for database access. Learn how to protect your…

Malicious ads target Semrush users to steal Google account credentials
21
Mar
2025

Malicious ads target Semrush users to steal Google account credentials

Cyber crooks are exploiting users’ interest in Semrush, a popular SEO, advertising, and market research SaaS platform, to steal their…

RansomHub affiliate uses custom backdoor Betruger
21
Mar
2025

RansomHub affiliate uses custom backdoor Betruger

RansomHub affiliate uses custom backdoor Betruger Pierluigi Paganini March 21, 2025 Symantec researchers linked a custom backdoor, called Betruger, found…

UAT-5918 Hackers Exploit N-Day Vulnerabilities in Exposed Web and Application Servers
21
Mar
2025

UAT-5918 Hackers Exploit N-Day Vulnerabilities in Exposed Web and Application Servers

A recent cybersecurity threat, identified as UAT-5918, has been actively targeting entities in Taiwan, particularly those in critical infrastructure sectors…

Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers
21
Mar
2025

Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers

Mar 21, 2025Ravie LakshmananMalware / Cyber Attack Two known threat activity clusters codenamed Head Mare and Twelve have likely joined…

Hackers Actively Exploit Apache Tomcat Servers via CVE-2025-24813 – Patch Now
21
Mar
2025

Hackers Actively Exploit Apache Tomcat Servers via CVE-2025-24813 – Patch Now

A concerning development has emerged with the active exploitation of Apache Tomcat servers through the recently disclosed vulnerability, CVE-2025-24813. This…

China-Linked APT
21
Mar
2025

10-Month Campaign, 7 Global Targets, 5 Malware Families

Mar 21, 2025Ravie LakshmananCybercrime / Cyber Espionage The China-linked advanced persistent threat (APT) group. known as Aquatic Panda has been…