Critical Apache Tomcat RCE vulnerability exploited
Dive Brief: Researchers from GreyNoise on Thursday reported active exploitation of CVE-2025-24813, a critical remote code execution vulnerability in Apache Tomcat web server software. The path…
Latest Cybersecurity News — Page 3030
View all →
A new chapter in UEFI threats
ESET researchers make a discovery that signals a shift on the UEFI threat landscape and underscores the need for vigilance against future threats 27 Nov…
Hackers Using Fake Semrush Ads to Steal Google Accounts Login Credentials
A sophisticated phishing campaign targeting Google account credentials through fake Semrush advertisements has emerged, posing a significant threat to digital marketers and SEO professionals. Cybercriminals…
North Korea establish Military Cyber Center to conduct espionage
In recent years, intelligence agencies in Western countries have reached a troubling conclusion: North Korea, led by Kim Jong Un, has been orchestrating cyber-attacks to…
3 Victims, $5K Entry Fee, Multi-OS, and Double Extortion Tactics
Mar 24, 2025Ravie LakshmananMalware / Ransomware A ransomware-as-a-service (RaaS) operation called VanHelsing has already claimed three victims since it launched on March 7, 2025. “The…
CIO interview: Sean Green, Birkbeck, University of London
Sean Green, interim CIO at Birkbeck, University of London, tells Computer Weekly that the promise of the university of the future requires a challenging journey…
Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools
Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools Pierluigi Paganini March 24, 2025 Medusa ransomware uses a malicious Windows driver ABYSSWORKER to…
Scams to look out for this holiday season
As the mercury starts to dip and the Halloween decorations are cleared away, it can mean only one thing: the countdown to Christmas has begun.…
Pocket Card Users Under Attack Via Sophisticated Phishing Campaign
A highly targeted phishing campaign is currently exploiting Pocket Card users through elaborately crafted emails that appear to originate from the legitimate financial service provider.…
Advances In Quantum Computing Signal an Urgent Post-Quantum Cryptography (PQC) Imperative for Enterprises
Estimates among experts vary on the timetable for the arrival of “Q-Day” – the day when quantum computers are powerful enough to crack current encryption…
VanHelsingRaaS Emerges, Targeting Linux, BSD, ARM, and ESXi Systems
VanHelsingRaaS, a newly launched ransomware-as-a-service (RaaS) program, has quickly gained traction in the cybercrime ecosystem. Introduced on March 7, 2025, this RaaS platform offers affiliates…
Month in security with Tony Anscombe – November 2024 edition
Zero days under attack, a new advisory from ‘Five Eyes’, thousands of ICS units left exposed, and mandatory MFA for all – it’s a wrap…