SecureWorld News

FEBRUARY 17, 2025

AI-enabled threats: Attackers are using AI to automate phishing, generate deepfakes, and bypass traditional security measures. Privacy and ethics: Balancing employee monitoring with privacy rights in an era of increasing workplace surveillance. Where is cybersecurity governance going? Below are key trends shaping the future.

Government

Security Affairs

DECEMBER 4, 2024

Organizations should adopt secure password storage, phishing-resistant MFA, session token limits, and Role-Based Access Control (RBAC). The Salt Typhoon group targeted surveillance systems used by the US government to investigate crimes and threats to national security, including activities carried out by nation-state actors.

Telecommunications

Security Affairs

JUNE 24, 2025

The CAO approved Microsoft Teams, Wickr, Signal, iMessage, and FaceTime as WhatsApp alternatives and warned staff to avoid phishing and unknown texts. The Meta-owned company linked the hacking campaign to Paragon, an Israeli commercial surveillance vendor acquired by AE Industrial Partners for $900 million in December 2024.

Government

SecureWorld News

APRIL 13, 2025

These platforms can automatically recognize and classify threatening behavior such as suspicious network activity, phishing attacks, and transmission of malware. Here's an example that shows how Google performs phishing detection. In addition to these digital measures, robust physical security policies and measures are also crucial.

Cybersecurity

Security Boulevard

MARCH 24, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Due to this focus, items primarily affecting enterprises or large organizations may not be included, even if they are widespread or "popular" stories.

Surveillance

SecureWorld News

JULY 22, 2025

This integrates AUVs, USVs, ROVs with aerial drones, aircraft, and satellite data, forming a "seabed to space" surveillance capability. for example, has launched the RFA Proteus, a Multi-Role Ocean Surveillance Ship designed to repair cables and act as a mothership for UUVs. Dedicated Vessels: The U.K.,

Surveillance

SecureWorld News

MAY 5, 2025

Phishing emails get through because people stop reading carefully. They're timing their phishing campaigns around stressful company periods: fiscal year ends, product launches, mergers, layoffs. They don't escalate strange logins, unexpected network activity, or gaps in video surveillance monitoring because fatigue clouds judgment.

Ransomware

Security Affairs

JANUARY 19, 2025

CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog Inexperienced actors developed the FunkSec ransomware using AI tools Credit Card Skimmer campaign targets WordPress via database injection Microsoft took legal action against crooks who developed a tool to abuse its AI-based services Pro-Russia hackers (..)

Spyware

Security Boulevard

MARCH 31, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Private search engines generally avoid connecting users to their searches.

VPN

SecureList

NOVEMBER 28, 2024

Based on limited telemetry, we believe with medium to low confidence that some of the initial infections were spear-phishing emails. In this most recent campaign, the actor uses spear-phishing emails, embedding a JavaScript loader as the initial infection vector.

Malware

Penetration Testing

JULY 9, 2025

A recent update embeds a persistent backdoor, turning what was once a hit-and-run data thief into a long-term intruder capable of remote command execution, system surveillance, and re-infection. Originally known for its data exfiltration from browser extensions and cold wallets, AMOS now goes beyond theft.

Malware

Security Boulevard

FEBRUARY 17, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Due to this focus, items primarily affecting enterprises or large organizations may not be included, even if they are widespread or "popular" stories. Tips for finding old accounts.

Surveillance

Security Affairs

OCTOBER 27, 2024

CISA adds ScienceLogic SL1 flaw to its Known Exploited Vulnerabilities catalog VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812 Cisco states that data published on cybercrime forum was taken from public-facing DevHub environment Internet Archive was breached twice in a month Unknown threat actors exploit Roundcube Webmail flaw (..)

Data breaches

Malwarebytes

MARCH 3, 2025

Last week on Malwarebytes Labs: Millions of stalkerware users exposed again PayPals “no-code checkout” abused by scammers Countries and companies are fighting at the expense of our data privacy Roblox called “real-life nightmare for children” as Roblox and Discord sued Android happy to check your nudes before you forward them (..)

Surveillance

Krebs on Security

NOVEMBER 5, 2024

Sources familiar with the investigation told KrebsOnSecurity that Binns was so paranoid about possible surveillance on him by American and Turkish intelligence agencies that his erratic behavior and online communications actually brought about the very government snooping that he feared. banks, ISPs, and mobile phone providers.

Cybercrime

Jane Frankland

JANUARY 12, 2025

Sophisticated social engineering tactics, phishing campaigns, or financial incentives make it easier for cybercriminals to use insiders as tools for gaining access and maintaining their foothold in systems rather than hacking in. Cyber threats often exploit human errors, whether through phishing attacks, weak passwords, or lapses in protocol.

Cybersecurity

Security Affairs

FEBRUARY 9, 2025

US Justice Department says cybercrime forum allegedly affected 17 million Americans Cybercrime is increasingly complex.

Spyware

Security Boulevard

MARCH 17, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Due to this focus, items primarily affecting enterprises or large organizations may not be included, even if they are widespread or "popular" stories.

Surveillance

NetSpi Executives

JULY 7, 2025

They focus on securing customer data and intellectual property, conducting phishing awareness training, implementing multi-factor authentication, and ensuring proper password rotation policies. Most security professionals dedicate their efforts to protecting what they can see and control within their organization’s perimeter.

Social Engineering

Zero Day

JUNE 22, 2025

And while financial costs may be a factor, individual victims may face targeted phishing campaigns, social engineering schemes, identity theft, and damage to credit. The attacker may conduct surveillance first, mapping a network to find the most valuable resources or to discover potential pathways to jump into other systems.

Passwords

Security Boulevard

APRIL 22, 2025

Your screen is shared throughout the exam, youre under near-continuous video surveillance, and you must perform a 360-degree scan of your workspace to confirm that no unauthorized devices or individuals are present. On a final note, its important to acknowledge that OffSec exams involve a high degree of monitoring.

Penetration Testing

Security Affairs

MARCH 11, 2025

Hackers deploy various techniques, such as man-in-the-middle attacks, ransomware, phishing schemes, and supply chain compromises, to intercept, manipulate, or steal sensitive data.

Cybersecurity

Centraleyes

MARCH 10, 2025

Security Awareness Training Security awareness training educates employees on recognizing and preventing threats like phishing and ransomware. To implement this, organizations can conduct annual training sessions, use gamified platforms like KnowBe4, and simulate phishing attacks to measure employee response.

Backups

eSecurity Planet

JUNE 25, 2025

EXTRA SAFE E2EE, no data retention, blockchain tech, no registration, browser-based ephemeral chats Web (native apps in development) No data available Messenger E2EE, AI assistant, spam/phishing detection Android, iOS, Web, Windows, macOS Over 1.04 Briar Briar is built for when traditional networks fail, or surveillance is everywhere.

Encryption

Security Affairs

NOVEMBER 24, 2024

A cyberattack on gambling giant IGT disrupted portions of its IT systems China-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBane Microsoft seized 240 sites used by the ONNX phishing service U.S.

Cybercrime

SecureWorld News

JUNE 18, 2025

Unlike "traditional" cyberattacks—like malware or phishing that target software bugs or network vulnerabilities—adversarial AI exploits the decision-making logic of AI models. Adversarial machine learning (AML) involves attacks on AI/ML systems , aiming to degrade their performance or make them behave incorrectly.

Cybersecurity

eSecurity Planet

JUNE 25, 2025

EXTRA SAFE E2EE, no data retention, blockchain tech, no registration, browser-based ephemeral chats Web (native apps in development) No data available Messenger E2EE, AI assistant, spam/phishing detection Android, iOS, Web, Windows, macOS Over 1.04 Briar Briar is built for when traditional networks fail, or surveillance is everywhere.

Encryption

Krebs on Security

NOVEMBER 26, 2024

A surveillance photo of Connor Riley Moucka, a.k.a. In a SIM-swap, fraudsters use credentials that are phished or stolen from mobile phone company employees to divert a target’s phone calls and text messages to a device they control.

DDOS

Security Boulevard

MARCH 3, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. The surveillance tech waiting for workers as they return to the office ArsTechnica RTO continues to pick up steam. In pursuit of "more productivity," some employers are leaning heavily into surveillance tech.

Surveillance

Malwarebytes

NOVEMBER 11, 2024

Our business solutions remove all remnants of ransomware and prevent you from getting reinfected.

Small Business

Zero Day

JUNE 20, 2025

And while financial costs may be a factor, individual victims may face targeted phishing campaigns, social engineering schemes, identity theft, and damage to credit. The attacker may conduct surveillance first, mapping a network to find the most valuable resources or to discover potential pathways to jump into other systems.

Passwords

Thales Cloud Protection & Licensing

MAY 28, 2025

Foreign Intelligence Surveillance Act (FISA) 702 and Clarifying Lawful Overseas Use of Data (CLOUD) Act in detail FISA 702 FISA Section 702 now authorizes U.S. From the moment a user signs up, we verify their identity, then ensure secure and continuous access through phishing-resistant MFA and single sign-on (SSO). Why, you ask?

Authentication

Security Affairs

MARCH 2, 2025

from Bybit, it is the largest cryptocurrency heist ever International Press Newsletter Cybercrime Mining Company NioCorp Loses $500,000 in BEC Hack Inside Black Bastas Exposed Internal Chat Logs: A Firsthand Look The Bleeding Edge of Phishing: darcula-suite 3.0

Cybercrime

Security Affairs

DECEMBER 22, 2024

CISA adds Microsoft Windows Kernel-Mode Driver and Adobe ColdFusion flaws to its Known Exploited Vulnerabilities catalog ConnectOnCall data breach impacted over 900,000 individuals Report claims that Serbian authorities abused Cellebrite tool to install NoviSpy spyware Multiple flaws in Volkswagen Group’s infotainment unit allow for vehicle compromise (..)

Data breaches

The Last Watchdog

MAY 29, 2025

Were not just talking about phishing or credential theft. These include breached travel logs, exposed home records, and more.The goal is to surveil, profile, and target high-value individuals. For a full drill down, please give the accompanying podcast a listen. Todays adversaries are exploiting digital breadcrumbs.

Cyber Risk

Schneier on Security

APRIL 10, 2023

Here’s an experiment being run by undergraduate computer science students everywhere: Ask ChatGPT to generate phishing emails, and test whether these are better at persuading victims to respond or click on the link than the usual spam. There will also be a change in the sophistication of these attacks.

Phishing

The Hacker News

MARCH 25, 2024

The Iran-affiliated threat actor tracked as MuddyWater (aka Mango Sandstorm or TA450) has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management (RMM) solution called Atera.

Phishing