Schneier on Security

FEBRUARY 13, 2025

DOGE personnel are also reported to be feeding Education Department data into artificial intelligence software, and they have also started working at the Department of Energy. But given that DOGE workers have already copied data and possibly installed and modified software, it’s unclear how this fixes anything.

Government 363

Government Artificial Intelligence Banking Software 363

Schneier on Security

NOVEMBER 27, 2024

Legal documents released in ongoing US litigation between NSO Group and WhatsApp have revealed for the first time that the Israeli cyberweapons maker ­ and not its government customers ­ is the party that “installs and extracts” information from mobile phones targeted by the company’s hacking software.

Government 319

Government Spyware Mobile Hacking 319

Krebs on Security

FEBRUARY 28, 2025

Security experts say the Russia-based service provider Prospero OOO (the triple O is the Russian version of “LLC”) has long been a persistent source of malicious software, botnet controllers, and a torrent of phishing websites. federal agencies from using Kaspersky software, mandating its removal within 90 days.

Malware 242

Malware Antivirus Software DDOS 242

Malwarebytes

APRIL 14, 2025

Horn tooting time: We’re excited to say we’ve earned a coveted spot in PCMags Best Antivirus Software for 2025 list, and been recognized as the Best Malware Removal Service 2025 by CNET. All Rights Reserved.

Antivirus 91

Antivirus Software Malware Accountability 91

Schneier on Security

DECEMBER 17, 2024

. […] Because the vulnerability that allowed him to rewrite the plates’ firmware exists at the hardware level—in Reviver’s chips themselves—Rodriguez says there’s no way for Reviver to patch the issue with a mere software update. Instead, it would have to replace those chips in each display.

Firmware 273

Firmware Hacking Software 273

Schneier on Security

FEBRUARY 3, 2025

Like other spyware makers, Paragon’s hacking software is used by government clients and WhatsApp said it had not been able to identify the clients who ordered the alleged attacks. ” It is not clear who was behind the attack.

Spyware 270

Spyware Government Hacking Software 270

Adam Shostack

JANUARY 2, 2025

Software on Microsoft Windows uses an application programming interface (API) called "CreateFile" to access files. Ransomware works by going through files, one by one, and replacing their content with an encrypted version. Sometimes it also sends copies elsewhere, but that turns out to be slow, and sometimes sets off alarms.)

Ransomware 246

Ransomware Encryption Software 246

Schneier on Security

JANUARY 16, 2025

It was that very server that allowed the FBI to finally kill this pesky bit of malicious software. According to the FBI , at least 45,000 IP addresses in the US had back-and-forths with the command-and-control server since September 2023.

Malware 244

Malware Hacking Software 244

The Last Watchdog

OCTOBER 23, 2024

INE Security advises businesses to secure their network by using firewalls, encrypting data, and regularly updating security software. Tip 4: Regularly Updating and Patching Systems Keeping software and systems up to date is crucial in protecting against vulnerabilities. Many cyber attacks exploit vulnerabilities in outdated software.

Small Business 162

Small Business Data breaches Backups Passwords 162

Krebs on Security

FEBRUARY 11, 2025

Microsoft today issued security updates to fix at least 56 vulnerabilities in its Windows operating systems and supported software, including two zero-day flaws that are being actively exploited. Windows enterprise administrators would do well to keep an eye on askwoody.com , which often has the scoop on any patches causing problems.

Artificial Intelligence 197

Artificial Intelligence Engineering Software Internet 197

Krebs on Security

NOVEMBER 19, 2024

Finastra, which provides software and services to 45 of the world’s top 50 banks, notified customers of the security incident after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company. However, it did reference many of the same banks called out as Finastra customers in the Nov.

Data breaches 293

Data breaches Banking Cybercrime Advertising 293

Krebs on Security

DECEMBER 19, 2024

The cracked software is being resold as a cloud-based attack tool by at least two different services, one of which KrebsOnSecurity traced to an information technology firm based in Turkey. Araneida Scanner. LinkedIn finds this same altugsara[.]com Neither Altug Sara nor Bilitro Yazilim responded to requests for comment.

Hacking 232

Hacking Cybercrime Advertising Data breaches 232

Schneier on Security

JULY 25, 2024

As we experienced last week, a single problem in a small piece of software can take large swaths of the internet and global economy offline. Each piece of software depends on dozens of others, typically written by other engineering teams sometimes years earlier on the other side of the planet. These failures can take many forms.

Marketing 354

Marketing Software Internet Internet 354

Krebs on Security

JANUARY 31, 2025

The “fud” bit stands for “Fully Un-Detectable,” and it refers to cybercrime resources that will evade detection by security tools like antivirus software or anti-spam appliances. “The Cybercrime Team is on the trail of a number of buyers of the tools,” the Dutch national police said. ” U.S.

Phishing 252

Phishing Cybercrime Advertising Malware 252

Security Affairs

APRIL 1, 2025

Threat actors are exploiting a critical authentication bypass vulnerability, tracked as CVE-2025-2825 , in the CrushFTP file transfer software. The file transfer software maker CrushFTP urge customers to take immediate action to address the vulnerability. The vulnerability impacts CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0,

Authentication 117

Authentication Software Ransomware Hacking 117

Penetration Testing

NOVEMBER 25, 2024

Palo Alto Networks has issued a security advisory warning of a vulnerability in its GlobalProtect app that could allow attackers to install malicious software on endpoints.

Software 137

Software Cybersecurity 137

Penetration Testing

DECEMBER 3, 2024

Veeam Software, a prominent provider of backup and disaster recovery solutions, has released urgent security updates to address two critical vulnerabilities in its Service Provider Console (VSPC). One of these... The post CVE-2024-42448 (CVSS 9.9): Critical RCE Vulnerability in Veeam VSPC appeared first on Cybersecurity News.

Backups 137

Backups Software Cybersecurity 137

Security Affairs

MARCH 30, 2025

This week, Cl0p ransomware group listed Sams Club among the victims of its December Cleo software exploit , accusing it of ignoring security. ” Ransomware gang Cl0p leaked files from Rackspace Technology and listed ~170 companies allegedly hacked via zero-day vulnerabilities in Cleos file-transfer software. are still exploitable.

Ransomware 106

Ransomware Data breaches Software Hacking 106

Penetration Testing

DECEMBER 17, 2024

The Apache Software Foundation has released important security updates to address two vulnerabilities in Apache Tomcat, a widely-used open-source web server, and servlet container.

Software 124

Software Cybersecurity 124

Malwarebytes

NOVEMBER 15, 2024

Coper is a Malware-as-a-Service which “customers” can spread as they see fit, but they pay for the use of the malicious software and the underlying infrastructure. And QR codes get typically read by mobile devices, which—unfortunately—still get overlooked when it comes to installing security software.

Malware 137

Malware Banking Mobile Software 137

Penetration Testing

DECEMBER 22, 2024

The Apache Software Foundation recently released a critical security update to address a remote code execution (RCE) vulnerability in Apache Tomcat, identified as CVE-2024-56337.

Software 141

Software Cybersecurity 141

Security Affairs

NOVEMBER 9, 2024

.” The research targeted a CMU unit manufactured by Visteon, with software initially developed by Johnson Controls Inc. The study focused on the latest software version (74.00.324A), but experts believe that earlier versions (at least 70.x) x) may also be vulnerable.

Hacking 128

Hacking Firmware Software Manufacturing 128

Security Affairs

DECEMBER 3, 2024

The vulnerability resides in the WebVPN login page of Cisco Adaptive Security Appliance (ASA) Software, an unauthenticated, remote attacker could exploit the flaw to conduct a cross-site scripting (XSS) attack against a user of WebVPN on the Cisco ASA. ” reads the advisory. ” continues the advisory.

Software 119

Software Hacking Information Security 119

Penetration Testing

APRIL 10, 2025

Owing to its impressive capabilities in software development, Cursor AI has […] The post Google Firebase Studio Launches as AI-Powered IDE Rival to Cursor AI appeared first on Daily CyberSecurity. Remarkably, even individuals without any programming background can leverage the platform to build functional applications.

Artificial Intelligence 103

Artificial Intelligence Software Cybersecurity Technology 103

Krebs on Security

APRIL 8, 2025

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. As ever, please consider backing up your data and or devices prior to updating, which makes it far less complicated to undo a software update gone awry.

Software 169

Software Media Internet Internet 169

Security Boulevard

OCTOBER 24, 2024

Unmanaged software as a service (SaaS) applications and AI tools within organizations are posing a growing security risk as vulnerabilities increase, according to a report from Grip Security. The post Majority of SaaS Applications, AI Tools Unmanaged appeared first on Security Boulevard.

Software 121

Software Risk Security Awareness Cybersecurity 121

Krebs on Security

NOVEMBER 12, 2024

Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November’s patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.

Authentication 259

Authentication Engineering Malware Passwords 259

Security Boulevard

JANUARY 10, 2025

Giant education software provider PowerSchool reported that hackers using compromised credentials access a database and stole student and teacher data in an attack that the company said was not ransomware, though a ransom apparently was paid. Affected K-12 school districts are scrambling to alert parents and staffs.

Education 115

Education Ransomware Software Data privacy 115

Adam Shostack

JANUARY 2, 2025

CISA has released their secure software attestation form , which means the 90 day clock is ticking. Application Security Interesting post: The most important goal in designing software is understandability. Semplici framework di sicurezza del software da integrare nei propri sistemi. Press release , technical report.)

Software 130

Software Advertising Hacking 130

Schneier on Security

APRIL 15, 2025

As AI coding assistants invent nonexistent software libraries to download and use, enterprising attackers create and upload libraries with those names—laced with malware, of course.

Malware 246

Malware Software 246