A new joint government advisory has urged organizations to prioritize the implementation of Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platforms. The guidance, issued by government agencies in the US, UK, Australia, Canada and… Read More "Governments Urge Organizations to Prioritize SIEM/SOAR Adoption"
May 27, 2025Ravie LakshmananCloud Security / Threat Intelligence Misconfigured Docker API instances have become the target of a new malware campaign that transforms them into a cryptocurrency mining botnet. The attacks, designed to mine for Dero currency, is notable for… Read More "New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency"
Masquerading as harmless plugins and utilities, the malicious packages carried destructive payloads meant to corrupt data, wipe critical files, and crash systems. Since their upload, they’ve picked up over 6200 downloads, escaping detection and slipping into unsuspecting developer environments. “The… Read More "Hackers drop 60 npm bombs in less than two weeks to recon dev machines"
National Cyber Security Centre (NCSC) Director of Operations Paul Chichester and former UK government minister Rory Stewart have been announced as keynote speakers at Infosecurity Europe 2025. The pair will give keynote talks on the first two days, with the… Read More "Rory Stewart and Paul Chichester to Headline at Infosecurity Europe"
Artificial intelligence is driving a massive shift in enterprise productivity, from GitHub Copilot’s code completions to chatbots that mine internal knowledge bases for instant answers. Each new agent must authenticate to other services, quietly swelling the population of non‑human identities (NHIs)… Read More "How to Deploy AI More Securely at Scale"
Nachdem die Hackergruppe Scattered Spider unter britischen Einzelhändlern gewütet hat, verstärkt sie ihre Kooperation mit RaaS und weitet ihr Jagdgebiet aus. enzozo – shutterstock.com Der britische Einzelhändler Marks & Spencer wurde Ende April durch eine Cyberattacke erheblich in seinem Geschäftsbetrieb… Read More "Wer landet im Netz der Cyber-Spinne?"
A targeted cyber-attack exploiting a managed service provider’s (MSP) remote monitoring and management tool has resulted in ransomware deployment and data theft across several client networks. The incident, identified and partly contained by Sophos Managed Detection and Response (MDR), involved… Read More "DragonForce Ransomware Leveraged in MSP Attack Using RMM Tool"
Microsoft has shed light on a previously undocumented cluster of threat activity originating from a Russia-affiliated threat actor dubbed Void Blizzard (aka Laundry Bear) that it said is attributed to “worldwide cloud abuse.” Active since at least April 2024, the… Read More "Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra Pages"
Die Fortschritte in der Quantentechnologie beschleunigen sich rasant. Seit Peter Shor 1994 bekannt gab, dass Quantencomputer theoretisch RSA knacken könnten, sind die Ressourcenschätzungen drastisch gesunken – von einer Milliarde Qubits im Jahr 2012 auf nur noch eine Million heute. Narayan… Read More "Quantencomputer knacken RSA-Verschlüsselungen noch schneller"
A new campaign exploiting machine learning (ML) models via the Python Package Index (PyPI) has been observed by cybersecurity researchers. ReversingLabs said threat actors are using the Pickle file format to conceal malware inside seemingly legitimate AI-related software packages. In… Read More "Malicious Machine Learning Model Attack Discovered on PyPI"
