Security Boulevard

FEBRUARY 2, 2025

Veriti Research has uncovered a potentially growing cyber threat campaign surrounding the release of the declassified JFK, RFK, and MLK files. Attackers are capitalizing on public interest in these historical documents to launch potential malware campaigns, phishing schemes, and exploit attempts.

Phishing 72

Phishing Malware Cyber threats 72

Security Affairs

JUNE 11, 2025

Between January and April 2025, INTERPOL led Operation Secure, a global effort that took down over 20,000 malicious IPs and domains linked to information-stealing malware. INTERPOL continues to support practical, collaborative action against global cyber threats. said Neal Jetton, INTERPOL’s Director of Cybercrime.

Cybercrime 114

Cybercrime Data collection Scams Cyber threats 114

Security Affairs

FEBRUARY 4, 2025

Threat actors target Brazilian users by stealing financial data, the malware can harvest sensitive information from over 70 financial applications and numerous websites. The researchers analyzed the LNK files’ metadata, including Machine ID and MAC addresses, to trace infections linked to the same threat actor.

Banking 121

Banking Malware Antivirus Cyber threats 121

Joseph Steinberg

JANUARY 7, 2021

While much of the security-oriented focus regarding the storming of the Capitol building by protesters yesterday has rightfully been on the failure of the Capitol Police to prevent the breach of security, the country also faces a potentially serious cyber-threat as a result of the incident.

Malware 363

Malware Cyber threats Risk Cybersecurity 363

Digital Shadows

MARCH 12, 2025

Lets dive into the key findings from this period and explore how organizations in this sector can strengthen their defenses against rising cyber threats. Another 5% of phishing emails carried malware, often infostealers that extract saved credentials from browsers.

Cyber threats 65

Cyber threats Cryptocurrency IoT Ransomware 65

Security Affairs

DECEMBER 1, 2024

From generating deepfakes to enhancing phishing campaigns, GAI is evolving into a tool for large-scale cyber offenses GAI has captured the attention of researchers and investors for its transformative potential across industries. Unfortunately, its misuse by malicious actors is altering the cyber threat landscape.

Artificial Intelligence 136

Artificial Intelligence Phishing Media Cyber threats 136

Penetration Testing

MAY 11, 2025

Cyber threat actors tied to North Korea are expanding their global reach with an updated strain of malware The post WaterPlums OtterCookie Malware Upgrades to v4 with Credential Theft and Sandbox Detection Features appeared first on Daily CyberSecurity.

Malware 60

Malware Cyber threats Cybersecurity Cryptocurrency 60

Tech Republic Security

OCTOBER 16, 2024

Zscaler ThreatLabz report reveals a 2024 surge in mobile, IoT, and OT cyberattacks, highlighting key trends and the need for zero trust security.

IoT 193

IoT Mobile Cyber threats Internet 193

Digital Shadows

NOVEMBER 12, 2024

By containing a threat as quickly as possible, organizations drastically limit incident impact, preventing damaging consequences such as data exfiltration, malware deployment, lateral movement, and operational downtime. On average, companies in the construction industry contain a threat within about 5 hours.

Ransomware 111

Ransomware Phishing Cyber threats Malware 111

Security Affairs

APRIL 4, 2025

. “The Ukrainian government’s computer emergency response team, CERT-UA, is taking systematic measures to accumulate and analyze data on cyber incidents in order to provide up-to-date information on cyber threats.” ” Since fall 2024, threat actor used compromised accounts to send emails with links (e.g.,

Malware 76

Malware Cyber threats Government Hacking 76

Webroot

FEBRUARY 21, 2025

Cyber threats are no longer just the occasional virus or suspicious email. It combines multiple security capabilities into one easy-to-use package that includes: Antivirus protection Detects and neutralizes viruses, malware , spyware , and ransomware. Viruses and malware programs harm your devices or steal your data.

Antivirus 84

Antivirus Identity Theft Cyber threats Phishing 84

SecureWorld News

JUNE 6, 2025

The Honeywell 2025 Cyber Threat Report delivers a sobering snapshot of today's industrial cybersecurity landscape: cyberattacks targeting operational technology (OT) environments are no longer rare or speculative—they're persistent, highly targeted, and increasingly sophisticated. OT defenders must plan for: Hybrid threats (e.g.,

Media 87

Media Social Engineering Malware Engineering 87

Security Affairs

MARCH 8, 2025

The Akira ransomware attack reveals the risks of overlooked IoT devices, evolving cyber threats, and EDR limitations. 1] Akira was subsequently able to encrypt files across the victims network.” ” reads the report published by the S-RM team. “Preventing and remediating novel attacks like this one can be challenging.

Ransomware 133

Ransomware IoT Encryption Passwords 133

Jane Frankland

MAY 18, 2025

On one side, defenders are using AI to predict, prevent, and respond to cyber threats with precision. This has given rise to Cybercrime-as-a-Service (CaaS) and Hacking-as-a-Service (HaaS)turnkey offerings that provide everything from ransomware kits to AI-generated malware and phishing campaigns.

Cybersecurity 130

Cybersecurity Backups Ransomware Firewall 130

SecureWorld News

FEBRUARY 25, 2025

AI-powered threat detection is enabling organizations to identify and neutralize attacks faster, but adversarial AI is also supercharging cyber threats. According to the report: "AI can analyze vast amounts of security data in real time, identifying anomalies and potential threats faster than traditional methods.

Cybersecurity 95

Cybersecurity Social Engineering Artificial Intelligence Cyber threats 95

Penetration Testing

APRIL 10, 2025

The cyber threat landscape is in constant flux, with threat actors continuously refining their techniques to breach defenses and achieve their malicious objectives.

Cyber threats 122

Cyber threats Cybersecurity Phishing Malware 122

SecureWorld News

JUNE 3, 2025

Fowler's analysis suggests that the data was harvested using InfoStealer malware, a malicious software designed to extract sensitive information from infected systems. This malware can siphon off credentials, autofill data, cookies, and even crypto wallet details, often without the user's knowledge.

Malware 65

Malware Passwords Identity Theft Phishing 65

The Last Watchdog

FEBRUARY 4, 2025

SpyCloud , a leading identity threat protection company, announced key innovations in its portfolio, pioneering the shift to holistic identity threat protection. This allows security teams to neutralize threats in less than 15 minutes of discovery, reducing risk without straining resources or operational bandwidth.

Cybercrime 124

Cybercrime Phishing Accountability Malware 124

SecureWorld News

FEBRUARY 26, 2025

Dubai-based exchange Bybit was targeted in a malware-driven attack that resulted in the theft of approximately $1.46 The Bybit theft resulted from malware-driven manipulation of cold wallet transactions, exploiting multi-signature vulnerabilities," Soroko said. billion in crypto assets.

Hacking 82

Hacking Cryptocurrency Cyber threats Malware 82

Security Affairs

NOVEMBER 17, 2024

CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog Hackers target critical flaw CVE-2024-10914 in EOL D-Link NAS Devices China-linked threat actors compromised multiple telecos and spied on a limited number of U.S.

Cryptocurrency 114

Cryptocurrency Malware Hacking Ransomware 114

Security Affairs

APRIL 30, 2025

Their campaigns involve multi-phase intrusions, initial access, privilege escalation, and data exfiltration, using modular malware, LOTL techniques, and evasive C2 infrastructure. The APT group uses RomCom malware in multi-stage attacks. Tools like WinRAR and Plink are deployed, with data exfiltrated from c:userspublicmusic.

Encryption 104

Encryption Ransomware Malware Phishing 104

SecureWorld News

JANUARY 21, 2025

Keeping pests out of your home and keeping cyber threats out of your organization might seem worlds apart, but there are surprising parallels between the two. CISO takeaway: Cyber threats evolve constantly, with attackers using sophisticated tactics like ransomware-as-a-service or AI-driven malware.

CISO 111

CISO Cybersecurity Cyber threats Education 111

Security Boulevard

MAY 8, 2025

A survey by CrowdStrike finds the gap between SMB awareness of cyber threats and efforts by them to protect themselves is widening, with not enough of them spending the money needed on AI and other tools to defend against ransomware and other attacks.

Risk 113

Risk Cyber threats Ransomware Data privacy 113

SecureWorld News

APRIL 13, 2025

Cyber threats evolve daily, often outpacing traditional security measures. On defense, AI analyzes network traffic, detects anomalies, and responds to threats in real time. Unlike traditional signature-based systems, AI excels at identifying new and unknown cyber threats, making security stronger and more adaptive.

Cybersecurity 94

Cybersecurity Artificial Intelligence Threat Detection Cyber threats 94

Security Affairs

FEBRUARY 3, 2025

The Russian-speaking Crazy Evil group runs over 10 social media scams, tricking victims into installing StealC, AMOS, and Angel Drainer malware. Since 2021, the Crazy Evil gang has become a major cybercriminal group, using phishing, identity fraud, and malware to steal cryptocurrency. These factors make it a persistent cyber threat.

Scams 87

Scams Media Cryptocurrency Cybercrime 87

SecureWorld News

DECEMBER 4, 2024

The United States retail sector faced an especially aggressive wave of cyber threats, with phishing attacks mimicking major holiday brands [3] including Walmart, Target, and Best Buy increasing by more than 2,000% during peak shopping periods. Here are five tips to help businesses protect themselves and their customers.

Retail 116

Retail Scams Phishing Cyber threats 116

Security Boulevard

JANUARY 20, 2025

Vulnerabilities and Malware Primarily includes severe and exploited vulnerabilities in devices or software used by end users (ex: a major router firmware flaw). Malware campaigns covered generally target/affect the end user. Approximately 70% of observed malware cases in 2024 derived from browser-based malware.

Surveillance 97

Surveillance Malware Data breaches Scams 97

IT Security Guru

JANUARY 30, 2025

So, lets explore how spread betting platforms are rising to this challenge and ensuring that their platforms are cyber risk-free. Cyber Risks Facing Spread Betting Platforms Cyber threats are becoming more dangerous than ever, and spread betting platforms are a major target for most of these cyberattacks.

Cyber Risk 95

Cyber Risk Risk Penetration Testing Accountability 95

Krebs on Security

DECEMBER 10, 2020

But the company says the malware did not jeopardize card data, and that the incident was limited to administrative areas of its business. Payment card processing giant TSYS suffered a ransomware attack earlier this month. Headquartered in Columbus, Ga., Total System Services Inc.

Ransomware 359

Ransomware Financial Services Cyber threats Banking 359

Jane Frankland

MAY 3, 2025

Allegedly orchestrated by the same group known as Scattered Spider, these attacks highlight the significant challenges even the most respected and established brands face in defending against modern cyber threats. Then, the focus of cyber attacks on retailers, and what lessons must be learned by business leaders and customers.

Cyber Attacks 100

Cyber Attacks Retail Cyber threats Backups 100

Schneier on Security

DECEMBER 9, 2020

These tools mimic the behavior of many cyber threat actors and enable FireEye to provide essential diagnostic security services to our customers. FireEye’s Red Team tools are essentially built from malware that the company has seen used in a wide range of attacks. None of the tools contain zero-day exploits. Reuters article.

Hacking 358

Hacking Government Cyber threats Malware 358

Security Affairs

NOVEMBER 27, 2024

. “Operation Serengeti (2 September – 31 October) targeted criminals behind ransomware, business email compromise (BEC), digital extortion and online scams – all identified as prominent threats in the 2024 Africa Cyber Threat Assessment Report.” ” reads the press release published by INTERPOL.

Scams 123

Scams Cybercrime Ransomware Cyber threats 123

Krebs on Security

MAY 9, 2023

“Local Privilege escalation vulnerabilities are a key part of attackers’ objectives,” said Kevin Breen , director of cyber threat research at Immersive Labs. However, as the SANS Internet Storm Center points out , the attack vector for this bug is local. “Therefore, the relatively low CVSSv3 base score of 6.7

Malware 296

Malware Software Internet Internet 296

Security Affairs

MAY 24, 2025

“The cyber threat actor Silent Ransom Group (SRG), also known as Luna Moth, Chatty Spider, and UNC3753, is targeting law firms using information technology (IT) themed social engineering calls, and callback phishing emails, to gain remote access to systems or devices and steal sensitive data to extort the victims.”

Social Engineering 116

Social Engineering Antivirus Phishing Engineering 116

The Last Watchdog

DECEMBER 18, 2024

While fully agentic AI malware remains years away, the industry must prepare now. The growing sophistication of cyber threats demands robust identity assurance solutions that include multifactor authentication, risk monitoring and adaptive verification collectively forming multi-factor verification (MFV.)

Risk 173

Risk Threat Detection Technology Phishing 173

IT Security Guru

MARCH 14, 2025

It also has a malware scanner that checks your site for viruses and suspicious code. The plugin also scans your website for malware and removes it if necessary. Conclusion Cyber threats are increasing, and UK businesses must take website security seriously.

Cybersecurity 74

Cybersecurity Firewall Cyber Attacks Passwords 74

Krebs on Security

APRIL 13, 2022

Nine of the updates pushed this week address problems Microsoft considers “critical,” meaning the flaws they fix could be abused by malware or malcontents to seize total, remote access to a Windows system without any help from the user. . “Go patch your systems before that situation changes.”. 10 being the worst). .”

DNS 332

DNS Internet Internet Firewall 332