84/68 Monday, March 3, 2025 Microsoft has issued a warning that ransomware groups are actively exploiting a zero-day vulnerability in the BioNTdrv.sys driver of Paragon Partition Manager to attack systems and escalate privileges to SYSTEM level. The vulnerability, identified as CVE-2025-0289, is one of five security flaws found in driver versions older than 2.0.0. Hackers […]
83/68 Monday, March 3, 2025 The cybercriminal group Qilin has claimed responsibility for a cyberattack on Lee Enterprises, a major U.S. media company, on February 3. The attack disrupted the company’s operations, and the hackers have threatened to release the stolen data on March 5 unless a ransom is paid. The leaked data reportedly includes […]
82/68 Friday, February 28, 2025 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities—CVE-2023-34192 in Synacor Zimbra Collaboration Suite (ZCS) and CVE-2024-49035 in Microsoft Partner Center—to its Known Exploited Vulnerabilities (KEV) catalog. Details of these vulnerabilities are as follows: To mitigate risks associated with these vulnerabilities, agencies under the Federal Civilian Executive […]
81/68 Friday, February 28, 2025 Researchers from Palo Alto Networks Unit 42 have discovered a previously undocumented Linux malware named Auto-Color, which has been targeting universities and government organizations in North America and Asia between November and December 2024. This malware allows attackers to gain full remote access to infected systems, making its removal extremely […]
80/68 Thursday, February 27, 2025 The Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities—CVE-2017-3066 in Adobe ColdFusion and CVE-2024-20953 in Oracle Agile Product Lifecycle Management (PLM)—to its Known Exploited Vulnerabilities (KEV) catalog. The details of these vulnerabilities are as follows: To mitigate the risks associated with these vulnerabilities, Federal Civilian Executive Branch (FCEB) […]
79/68 Thursday, February 27, 2025 Have I Been Pwned (HIBP), a data breach notification service, has added over 284 million stolen accounts to its database after discovering the data being shared on a Telegram channel named “ALIEN TXTBASE”—a repository for credentials stolen by info-stealing malware. Troy Hunt, the founder of HIBP, revealed that the dataset […]
78/68 Wednesday, February 26, 2025 Researchers from CYFIRMA have discovered a malicious app called “Finance Simplified” on Google Play, which is infected with the SpyLend malware. This malware targets users in India, masquerading as a financial calculator while actually functioning as an illegal loan app. It exploits users’ personal data for blackmail and extortion. Within […]
77/68 Wednesday, February 26, 2025 Security researchers from SecurityScorecard have discovered that over 130,000 compromised devices are being used in a large-scale password-spraying attack targeting Microsoft 365 accounts. The attackers leverage a technique called “Non-Interactive Sign-Ins”, which bypasses multi-factor authentication (MFA), making it easier to evade security defenses. Additionally, they utilize stolen credentials obtained from […]
75/68 Tuesday, February 25, 2025 Google Cloud has announced the launch of digital signatures designed to protect against quantum computer attacks within its Cloud Key Management Service (Cloud KMS), now available for trial. This initiative is part of Google’s effort to prepare for future threats, as quantum computers may potentially break traditional encryption methods. The […]
74/68 Monday, February 24, 2025 The crypto exchange platform Bybit experienced the largest hack in history, with hackers stealing over $1.5 billion worth of cryptocurrency from the company’s cold wallets. The hackers used a technique to spoof the signing interface, redirecting transactions to untraceable addresses. This incident surpasses previous major hacks such as Ronin Network […]
