Lohrman on Security
FEBRUARY 2, 2025
The past week has been full of headlines regarding DeepSeek AI. So what lessons can we learn from this whirlwind of media stories and the corresponding reactions from governments and Wall Street?
Security Affairs
FEBRUARY 2, 2025
Meta announced the disruption of a malware campaign via WhatsApp that targeted journalists with the Paragon spyware. Meta announced that discovered and dismantled a malware campaign via WhatsApp that targeted journalists and civil society members with the Paragon spyware (aka Graphite). The hacking campaign targeted 90 users and was disrupted in December, WhatsApp already alerted them of a possible compromise of their devices.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
The Hacker News
FEBRUARY 2, 2025
A Russian-speaking cybercrime gang known as Crazy Evil has been linked to over 10 active social media scams that leverage a wide range of tailored lures to deceive victims and trick them into installing malware such as StealC, Atomic macOS Stealer (aka AMOS), and Angel Drainer.
Penetration Testing
FEBRUARY 2, 2025
D-Link has updated a security advisory warning of a critical buffer overflow vulnerability affecting several end-of-life routers. The The post CVE-2024-57376: End-of-Life D-Link Routers Vulnerable to Unauthenticated RCE appeared first on Cybersecurity News.
Advertisement
Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.
Zero Day
FEBRUARY 2, 2025
From Apple and Samsung to Oura and Withings, the health tech space is changing to not only deliver insights into a person's health but also connect them with medical professionals.
Security Affairs
FEBRUARY 2, 2025
U.S. and Dutch authorities seized 39 domains and servers linked to the HeartSender cybercrime group based in Pakistan. A joint law enforcement operation led to the seizure of 39 domains tied to a Pakistan-based HeartSender cybercrime group (aka Saim Raza and Manipulators Team) known for selling hacking and fraud tools. U.S. and Dutch authorities participated in the operation, the police seized the domains on January 29, 2025.
Cyber Security Informer brings together the best content for cyber security professionals from the widest variety of industry thought leaders.
Penetration Testing
FEBRUARY 2, 2025
A newly discovered race condition in Apples macOS kernel (XNU) could allow attackers to escalate privileges, corrupt memory, The post PoC Exploit Released for macOS Kernel Vulnerability CVE-2025-24118 (CVSS 9.8) appeared first on Cybersecurity News.
Security Affairs
FEBRUARY 2, 2025
Texas bans DeepSeek and RedNote on government devices to block Chinese data-harvesting AI, citing security risks. Texas Governor Greg Abbott banned Chinese AI company DeepSeek and Chinese-owned social media apps Xiaohongshu (RedNote) and Lemon8 from all state-issued devices. The AI-powered chatbot, recently launched globally, has rapidly gained popularity reaching millions of users.
Penetration Testing
FEBRUARY 2, 2025
A newly discovered vulnerability in the Deep Java Library (DJL) has been found to leave systems open to The post CVE-2025-0851 (CVSS 9.8): Deep Java Library Vulnerability Allows Path Traversal Exploits appeared first on Cybersecurity News.
Security Affairs
FEBRUARY 2, 2025
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. ESXi Ransomware Attacks: Stealthy Persistence through SSH Tunneling MintsLoader: StealC and BOINC Delivery Cloud Ransomware Developments | The Risks of Customer-Managed Keys New TorNet backdoor seen in widespread campaign Active Exploitation: New Aquabot Variant Phones Home How we kept the Google Play & Android app ecosystems safe in 2024 Solana Pump.
Advertisement
Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.
Zero Day
FEBRUARY 2, 2025
The SwitchBot Air Purifier Table would sound like a gimmick if it didn't actually work so well.
Penetration Testing
FEBRUARY 2, 2025
Industrial automation giant Rockwell Automation has issued a security advisory addressing multiple critical vulnerabilities in its FactoryTalk AssetCentre The post CVE-2025-0477 (CVSS 9.8): Critical Security Flaw in Rockwell Automations FactoryTalk AssetCentre appeared first on Cybersecurity News.
Security Boulevard
FEBRUARY 2, 2025
Veriti Research has uncovered a potentially growing cyber threat campaign surrounding the release of the declassified JFK, RFK, and MLK files. Attackers are capitalizing on public interest in these historical documents to launch potential malware campaigns, phishing schemes, and exploit attempts. Our research indicates that cybercriminals are quick to react to major public events, and [] The post Hackers Hijack JFK File Release: Malware & Phishing Surge appeared first on VERITI.
Penetration Testing
FEBRUARY 2, 2025
Since its initial release on GitHub in 2022 by user XZB-1248, SparkRAT has evolved into a widely used The post SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond appeared first on Cybersecurity News.
Advertisement
After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!
Trend Micro
FEBRUARY 2, 2025
Native sensors vs. integrations in XDR: Native sensors offer faster deployment, real-time detection, and deeper visibility, while integrations may add complexity and delays. Learn how to optimize your XDR strategy for improved security.
Penetration Testing
FEBRUARY 2, 2025
In a move that’s sure to raise eyebrows and questions about its commitment to user privacy, Microsoft has The post Microsoft to Kill its 365 VPN: What You Need to Know appeared first on Cybersecurity News.
Security Boulevard
FEBRUARY 2, 2025
Authors/Presenters: M. Weigand, S. Wagner Our sincere appreciation to DEF CON , and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conferences events located at the Las Vegas Convention Center ; and via the organizations YouTube channel. Permalink The post DEF CON 32 - Navigating the Turbulent Skies of Aviation Cyber Regulation appeared first on Security Boulevard.
Penetration Testing
FEBRUARY 2, 2025
Cybersecurity researchers at Socket have uncovered a new supply chain attack orchestrated by Lazarus Group, the notorious North The post North Korean APT Lazarus Uses Malicious npm Package to Target Developers appeared first on Cybersecurity News.
Advertisement
Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.
Security Boulevard
FEBRUARY 2, 2025
In this episode, we explore the rollout of digital drivers licenses in states like Illinois and the potential privacy issues that come with them. Can digital IDs truly enhance convenience without compromising your privacy? We also discuss the new Chinese AI model, DeepSeek, which is affecting U.S. tech companies stock prices. Join us as we [] The post Privacy Concerns with Digital Drivers Licenses, The Rise of DeepSeek AI appeared first on Shared Security Podcast.
Penetration Testing
FEBRUARY 2, 2025
The open-source world, built on collaboration and shared code, faces a growing challenge: navigating the complex landscape of The post Sanctions Risk in Open Source: Linux Foundation Offers Guidance appeared first on Cybersecurity News.
SecureBlitz
FEBRUARY 2, 2025
Learn how to turn your truck bed into the perfect workstation. A truck bed can be more than simply a location to store cargo; it can also serve as an efficient and adaptable office. Creating a successful truck bed workstation requires careful planning, the right equipment, and imaginative design, whether for everyday business, mechanical maintenance, […] The post How to Turn Your Truck Bed into the Perfect Workstation appeared first on SecureBlitz Cybersecurity.
Penetration Testing
FEBRUARY 2, 2025
A recent report by CloudSEK’s BeVigil reveals how a common web misconfiguration, namely enabled directory listings, led to The post Unrestricted Access: A Simple Web Misconfiguration Exposes Critical Data appeared first on Cybersecurity News.
Advertisement
Tech leaders today are facing shrinking budgets and investment concerns. This whitepaper provides insights from over 1,000 tech leaders on how to stay secure and attract top cybersecurity talent, all while doing more with less. Download today to learn more!
Security Affairs
FEBRUARY 2, 2025
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A ransomware attack forced New York Blood Center to reschedule appointments Contec CMS8000 patient monitors contain a hidden backdoor Community Health Center data breach impacted over 1 million patients Italy’s data protection authority Garante bloc
Penetration Testing
FEBRUARY 2, 2025
A recent Cofense Intelligence report has uncovered a troubling trend: threat actors are increasingly abusing.gov top-level domains The post.Gov No More: Government Domains Weaponized in Phishing Surge appeared first on Cybersecurity News.
Penetration Testing
FEBRUARY 2, 2025
In the cybersecurity world, analysts often focus on the adversarys tactics, techniques, and procedures (TTPs), but what happens The post The Hidden Cyber Trap: How Compromised Websites and Malicious AdTech Manipulate Users appeared first on Cybersecurity News.
Penetration Testing
FEBRUARY 2, 2025
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security alert regarding the Contec CMS8000, a The post CISA Warns of Hidden Backdoor in Contec CMS8000 Patient Monitors appeared first on Cybersecurity News.
Advertisement
Explore how enterprises can enhance developer productivity and onboarding by adopting self-hosted Cloud Development Environments (CDEs). This whitepaper highlights the simplicity and flexibility of cloud-based development over traditional setups, demonstrating how large teams can leverage economies of scale to boost efficiency and developer satisfaction.
Penetration Testing
FEBRUARY 2, 2025
Security researcher Daniel Kelley at SlashNext has unveiled a new threat to cybersecurity: Devil-Traff, a bulk SMS platform The post Devil-Traff: The New SMS Phishing Platform Exploited by Cybercriminals appeared first on Cybersecurity News.
Expert insights. Personalized for you.
232 
Let's personalize your content