Aggregator

Miami, Florida, 18th June 2025, CyberNewsWire

The post Halo Security Honored with 2025 MSP Today Product of the Year Award appeared first on Security Boulevard.

Miami, Florida, 18th June 2025, CyberNewsWire

They weren’t in any hurry, according to Citizen Lab, and used an interesting attack vector. Google Threat Intelligence Group also provided details on the attacks.

The post Unusually patient suspected Russian hackers pose as State Department in ‘sophisticated’ attacks on researchers appeared first on CyberScoop.

North Korean-aligned threat actors from the infamous Famous Chollima group have escalated their cyber operations by deploying a sophisticated new Python-based remote access trojan targeting Windows and macOS users in the cryptocurrency and blockchain sectors. The malware campaign represents a significant evolution of their previously documented GolangGhost RAT, demonstrating the group’s continued adaptation and technical […]

The post Famous Chollima Hackers Attacking Windows and MacOS Users With GolangGhost RAT appeared first on Cyber Security News.

Alleged Leak of Montgomery County, Maryland Government Data

California-based Episource disclosed in filings with the U.S. Department of Health and Human Services that more than 5.4 million people had their information taken in a breach discovered in February.

Вот так теперь выглядит биопсия.

Alleged Sale of GitLab Access to Government Entities Across Multiple Countries

Cyber Jihad Movement Targeted the Website of Bezeq International

A comprehensive security investigation has revealed widespread vulnerabilities in GitHub Actions workflows across major open source repositories, including those maintained by prestigious organizations such as MITRE and Splunk. The discovery highlights a concerning pattern of insecure continuous integration and continuous delivery (CI/CD) configurations that expose these projects to potential supply chain attacks and unauthorized access […]

The post Insecure GitHub Actions in Open Source Projects MITRE and Splunk Exposes Critical Vulnerabilities appeared first on Cyber Security News.

PAFACA Pause Persists: Won’t somebody PLEASE think of the children?

The post Trump’s TikTok Tarry — Yet Again, Ban-Can Kicked Down the Road appeared first on Security Boulevard.

Руководство открыто говорит: одни — на переобучение. Другие — на выход.

A CVSS 8.8 AgentSmith flaw in LangSmith's Prompt Hub exposed AI agents to data theft and LLM manipulation. Learn how malicious AI agents could steal API keys and hijack LLM responses. Fix deployed.

In a concerning development for mobile payment security, cybersecurity experts have identified a sophisticated new malware strain named “SuperCard” that exploits Android devices to steal payment card data. This malicious application, a modified version of the legitimate NFCGate program, intercepts Near Field Communication (NFC) traffic during contactless payments, effectively turning compromised phones into relay devices […]

The post New SuperCard Malware Using Hacked Android Phones to Relay Data from Users Payment Cards to Attackers Device appeared first on Cyber Security News.

从镜像到端口，从配置到还原，一步步揭开容器背后的秘密

数字时代维权的技术利剑与实务指南

Move Raises Possibility Group Isn't Just Marketing Its Malware to Criminals
Up-and-coming ransomware group Anubis has tweaked its malware to irrevocably wipe victims' data - an unusual tactic from hackers whose typical corrupt bargain is restored data in exchange for extortion money. Why would a ransomware attacker seeking leverage in negotiations ever do this?

Several Affected HealthEC Healthcare Clients Are Chipping in to Fund Settlement
A provider of artificial intelligence-enabled hospital cost-cutting software and several of its healthcare clients agreed to $5.48 million to settle proposed class action litigation involving a 2023 hacking incident affecting 4.6 million individuals.

JFrog uncovers multi-stage malware harvesting cloud secrets
Multi-stage malware embedded in a Python package is stealing sensitive cloud infrastructure data, JFrog researchers said Monday. The package steals credentials, configuration files, API tokens and other data from corporate cloud environments. It targets developers using the Chimera sandbox platform.

Research Shows Next-Generation 9-1-1 Ecosystems Lack Critical Cyber Protections
A report from telecom firm Intrado warns that cybersecurity safeguards are lagging behind the rapid deployment of next-generation 911 systems, exposing the emergency ecosystem to attacks ranging from VoIP floods to ransomware amid growing reliance on cloud-based and IP-connected technologies.