An active campaign is exploiting various vulnerabilities and misconfigurations across cloud environments to deploy cryptominers, according to research from Wiz. The campaign has been dubbed Soco404 due to the attackers embedding payloads in fake 404 error message pages hosted on… Read More "Active Campaign Exploits Cloud Flaws for Cryptomining"
Europol on Monday announced the arrest of the suspected administrator of XSS.is (formerly DaMaGeLaB), a notorious Russian-speaking cybercrime platform. The arrest, which took place in Kyiv, Ukraine, on July 222, 2025, was led by the French Police and Paris Prosecutor,… Read More "Europol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime Marketplace"
“No matter the size of an organization, there should be a seamless process to feed threat intelligence into the defensive technology stack,” Denning says. “This requires the system to be architected, configured, and designed to consume intelligence. Equally important is… Read More "5 challenges CISOs face in using threat intel effectively"
Aus der Zeit gefallen? Sergio Delle Vedove | shutterstock.com Schlechte Angewohnheiten abzustellen (oder bessere zu entwickeln), ist ein Prozess, der Geduld, Selbstbeherrschung und Entschlossenheit erfordert. Das gilt sowohl auf persönlicher als auch auf Security-technischer Ebene. In diesem Artikel haben wir… Read More "7 Security-Praktiken zum Abgewöhnen"
Promote secure-by-design AI technologies and applications: The plan says the US government “has a responsibility to ensure the AI systems it relies on — particularly for national security applications — are protected against spurious or malicious inputs” and that “promoting… Read More "White House AI plan heavy on cyber, light on implementation"
Hundreds of organizations around the world suffered data breaches this week, as an array of hackers rushed to exploit a recently discovered vulnerability in older versions of the Microsoft file-sharing tool known as SharePoint. The string of breaches adds to… Read More "Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage"
Jul 23, 2025Ravie LakshmananMalware / Cryptocurrency The threat actor behind the exploitation of vulnerable Craft Content Management System (CMS) instances has shifted its tactics to target Magento CMS and misconfigured Docker instances. The activity has been attributed to a threat… Read More "Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware"
Despite this, infrastructure operators have been underinvesting in OT security. Based on Lee’s anecdotal experience, about 95% of cyber spend is focused on IT, and just 5% on OT. The latter also have distinct operational demands: Systems often must run… Read More "Warning to feds: US infrastructure is under silent attack"
The US government has warned businesses and critical infrastructure organizations to stay vigilant against wide-ranging attacks from the Interlock ransomware gang. The joint advisory from four government agencies including the FBI and the Department of Health and Human Services (HHS),… Read More "US Government Warns of Wide-Ranging Interlock Attacks"
Jul 23, 2025Ravie LakshmananVulnerability / Software Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security flaws impacting SysAid IT support software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities in… Read More "SysAid Flaws Under Active Attack Enable Remote File Access and SSRF"
