Aggregator

Technology Giant Accused of Using 'Wordplay' to Previously Deny Breach Reports
Cybersecurity experts have slammed Oracle's handling of a large data breach that it's reportedly confirming to 140,000 affected cloud infrastructure clients - but only verbally, and not in writing - following nearly two weeks of it having denied that any such breach occurred.

Also: SEC Drops Kraken, Consensys and Cumberland DRW Lawsuits
This week, hack stats, Hamas crypto funds seizure, conclusion of Kraken, Consensys and Cumberland DRW lawsuits, Kentucky dropped its Coinbase suit, Trump pardoned BitMex co-founders, Lazarus's new tactics, and Crocodilus malware's crypto targets.

Enthusiasm for AI Development Is Outpacing Discussions on Safety
Google DeepMind executives outlined an approach to artificial general intelligence safety, warning of "severe harm" that can "permanently destroy humanity" if safeguards are not put in place before advanced artificial intelligence systems emerge. AGI could arrive by 2030, they predict.

Фосфид ниобия может заменить медь, обеспечивая лучшую производительность в электронике.

A suspected Chinese APT group has exploited CVE-2025-22457 – a buffer overflow bug that was previously thought not to be exploitable – to compromise appliances running Ivanti Connect Secure (ICS) 22.7R2.5 or earlier or Pulse Connect Secure 9.1x. The vulnerability was patched by Ivanti in ICS 22.7R2.6, released on February 11, 2025. But, apparently, the threat actor studied the patch and “uncovered through a complicated process, [that] it was possible to exploit 22.7R2.5 and earlier … More →

The post Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457) appeared first on Help Net Security.

Гибкий сенсор за секунды определит: в организме что-то пошло не по плану.

Ivanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a China-linked espionage actor to deploy malware since at least mid-March 2025. [...]

Dark Storm Team Targeted the Website of LastPass

Microsoft is warning of several phishing campaigns that are leveraging tax-related themes to deploy malware and steal credentials. "These campaigns notably use redirection methods such as URL shorteners and QR codes contained in malicious attachments and abuse legitimate services like file-hosting services and business profile pages to avoid detection," Microsoft said in a report shared with The

Een Chinook-transporthelikopter is zojuist opgestegen voor het blussen van een grote natuurbrand. Die is eerder vandaag uitgebroken ten noorden van Ede, niet ver van de Ginkelse Heide. Het vuur verspreidt zich snel. De brandweer heeft het vuur nog niet onder controle. Defensie schiet daarom te hulp. Inmiddels is duidelijk dat de brand is ontstaan door een oefenende eenheid van de Koninklijke Landmacht. De Koninklijke Marechaussee doet nader onderzoek.

Почему девочки страдают сильнее и как искоренить проблему?

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Rock Identification’ appeared first on Security Boulevard.

Secure Ideas, a premier provider of penetration testing and security consulting services, proudly announces its recent achievements of CREST accreditation and CMMC Level 1 compliance, reinforcing its commitment to delivering the highest standards of security assessment and regulatory compliance for its clients. With these certifications, Secure Ideas strengthens its ability to deliver globally recognized, standards-based […]

The post Secure Ideas Achieves CREST Accreditation and CMMC Level 1 Compliance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Двухслойный пирог из сульфида хрома изменит будущее электроники.

Symantec has recently identified a sophisticated phishing campaign targeting users of Monex Securities (マネックス証券), a prominent online securities company in Japan formed through the merger of Monex, Inc. and Nikko Beans, Inc. The company provides individual investors with a range of financial services, making it an attractive target for cybercriminals. The phishing operation involves the […]

The post New Phishing Campaign Targets Investors to Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a concerning development, CERT-UA, Ukraine’s Computer Emergency Response Team, has reported a series of cyberattacks attributed to the hacker group identified as UAC-0219. These attacks, which have been ongoing since the fall of 2024, utilize an advanced PowerShell-based malware tool named WRECKSTEEL to infiltrate computers and extract sensitive data. The primary targets include government […]

The post UAC-0219 Hackers Leverage WRECKSTEEL PowerShell Stealer to Extract Data from Computers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The malware, first discovered in 2016, has been updated over the years, and the latest version is now hiding in the firmware of counterfeit mobile phones.

Hunters International, a ransomware group suspected to be a rebrand of the infamous Hive ransomware, has been linked to widespread attacks targeting Windows, Linux, FreeBSD, SunOS, and ESXi systems. Emerging in October 2023, the group has gained notoriety for its sophisticated techniques in data exfiltration and extortion. Cybersecurity researchers have noted similarities between Hunters International’s […]

The post Hunters International Linked to Hive Ransomware in Attacks on Windows, Linux, and ESXi Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a recent cyberattack attributed to the Qilin ransomware group, threat actors successfully compromised a Managed Service Provider (MSP) by mimicking the login page of ScreenConnect, a popular Remote Monitoring and Management (RMM) tool. The attack, which occurred in January 2025, highlights the growing sophistication of phishing campaigns targeting MSPs to exploit downstream customers. Sophos’ […]

The post Qilin Operators Imitate ScreenConnect Login Page to Deploy Ransomware and Gain Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly uncovered cyber-espionage campaign, dubbed Operation HollowQuill, has been identified as targeting academic, governmental, and defense-related networks in Russia using weaponized PDF documents. The operation, tracked by SEQRITE Labs APT-Team, leverages decoy research invitations to infiltrate systems associated with the Baltic State Technical University (BSTU “VOENMEKH”), a key institution for defense and aerospace research […]

The post Operation HollowQuill Uses Malicious PDFs to Target Academic and Government Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.