ESET Research has been monitoring attacks involving the recently discovered ToolShell zero-day vulnerabilities 24 Jul 2025 • , 5 min. read On July 19th, 2025, Microsoft confirmed that a set of zero-day vulnerabilities in SharePoint Server called ToolShell is being… Read More "An all-you-can-eat buffet for threat actors"
Jul 25, 2025Ravie LakshmananMalware / Cloud Security Threat hunters have disclosed two different malware campaigns that have targeted vulnerabilities and misconfigurations across cloud environments to deliver cryptocurrency miners. The threat activity clusters have been codenamed Soco404 and Koske by cloud… Read More "Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks"
Kriminelle setzen Millionen von Bot-Anfragen ein, um an Tickets von Eventim für den Schwarzmarkt zu kommen. T. Schneider – Shutterstock.com Schwarzmarkthändler setzen nach Beobachtung des Ticketanbieters CTS Eventim in großer Zahl Computerprogramme ein, um an Karten zu gelangen. “Wir haben… Read More "Schwarzmarkthändler wollen mit Bots an Tickets kommen"
A prolonged Chinese cyber espionage campaign is targeting VMware appliances to gain access to target networks, according to Sygnia researchers. The campaign has been tracked since early 2025. The attackers, dubbed Fire Ant, have been observed using combinations of sophisticated… Read More "Prolonged Chinese Cyber Espionage Campaign Targets VMware Appliances"
A new ransomware operator called Chaos has launched a wave of intrusions impacting a wide range of sectors, Cisco Talos has reported. Victims have been predominantly based in the US, with some in the UK, New Zealand India, according to… Read More "New Chaos Ransomware Emerges, Launches Wave of Attacks"
The book goes beyond the hype to explore the complexity of augmented decision-making and the unintended consequences we’re already seeing. “Len pulls back the curtain on how humans, not just machines, are being reshaped by AI. His point of view… Read More "The books shaping today’s cybersecurity leaders"
If you want a job at McDonald’s today, there’s a good chance you’ll have to talk to Olivia. Olivia is not, in fact, a human being, but instead an AI chatbot that screens applicants, asks for their contact information and… Read More "McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Using the Password ‘123456’"
Beginning today, millions of adults trying to access pornography in the United Kingdom will be required to prove that they are over the age of 18. Under sweeping new online child safety laws coming into force, self-reporting checkboxes that allow… Read More "The Age-Checked Internet Has Arrived"
Aber: Nur, weil man die Vorschriften einhält, heißt das noch lange nicht, dass man auch sicher ist. Erfahrene Sicherheitsexperten betrachten die Einhaltung von Vorschriften als das absolute Minimum und gehen in ihren Empfehlungen weit über die erforderlichen Komponenten zum Schutz… Read More "Cybersicherheitsvorschriften: So erfüllen Sie Ihre Compliance-Anforderungen"
“Rather than working to compromise one company and being uncertain of the payoff, threat actors can compromise one developer and end up with their malware in hundreds, or even thousands of other companies,” said Gannon. “Even if it takes ten… Read More "Supply chain attack compromises npm packages to spread backdoor malware"
