π Major Online Platform for Child Exploitation Dismantled π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
An international law enforcement operation has shut down Kidflix, a platform for child sexual exploitation with 1.8m registered users.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Major Online Platform for Child Exploitation Dismantled
An international law enforcement operation has shut down Kidflix, a platform for child sexual exploitation with 1.8m registered users
π CrushFTP Vulnerability Exploited Following Disclosure Issues π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
CrushFTP Vulnerability Exploited Following Disclosure Issues
A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process
π Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
The cybercriminal uses the service of Proton66, an infamous Russianbased bulletproof hosting provider, to deploy malware.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware
The cybercriminal uses the service of Proton66, an infamous Russian-based bulletproof hosting provider, to deploy malware
π Sensitive Data Breached in Highline Schools Ransomware Incident π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the September 2024 incident.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Sensitive Data Breached in Highline Schools Ransomware Incident
Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the 2024 incident
π Over Half of Attacks on Electricity and Water Firms Are Destructive π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Semperis claims 62 of water and electricity providers were hit by cyberattacks in the past year.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Over Half of Attacks on Electricity and Water Firms Are Destructive
Semperis claims 62% of water and electricity providers were hit by cyber-attacks in the past year
π Nearly 600 Phishing Domains Emerge Following Bybit Heist π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
BforeAI researchers discover 596 suspicious Bybitthemed domains designed to defraud visitors.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Nearly 600 Phishing Domains Emerge Following Bybit Heist
BforeAI researchers discover 596 suspicious Bybit-themed domains designed to defraud visitors
π1
π¦
Ransomware Attack Levels Remain High as Major Change Looms π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble Ransomware Attack Levels Remain High as Major Change Looms " dataimagecaption"Cyble Ransomware Attack Levels Remain High as Major Change Looms " datamediumfile"httpscyble.comwpcontentuploads202504CybleBlogsRansomwareAttacksRaaS300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202504CybleBlogsRansomwareAttacksRaaS.jpg" title"Ransomware Attack Levels Remain High as Major Change Looms 1" March saw notable events, including a potential change at the top of the ransomware world, persistently high attacks, and the emergence of new groups. March 2025 ended on a surprising note when the onionbased data leak site DLS of RansomHub the largest ransomware group over the last year went offline, fueling speculation of a possible takeover. A few days later, rival DragonForce claimed ...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
Ransomware Attacks Still SoaringβBig Change Ahead
March saw a potential leadership shift in ransomware attacks, sustained high attack volumes, and the rise of new threat groups.
π΅οΈββοΈ Medusa Rides Momentum From Ransomware-as-a-Service Pivot π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Shifting to a RaaS business model has accelerated the group's growth, and targeting critical industries like healthcare, legal, and manufacturing hasn't hurt either.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Medusa Rides Momentum From Ransomware-as-a-Service Pivot
Shifting to a RaaS business model has accelerated the group's growth, and targeting critical industries like healthcare, legal, and manufacturing hasn't hurt either.
π’ Verizon Call Filter API flaw couldβve exposed millions of Americansβ call records π’
π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
A security flaw in Verizon's Call Filter app couldve allowed threat actors to access details of incoming calls for another user, a security researcher has found.π Read more.
π Via "ITPro"
----------
ποΈ Seen on @cibsecurity
IT Pro
Verizon Call Filter API flaw couldβve exposed millions of Americansβ call records
The Verizon flaw couldβve had wide-reaching implications if exploited by malicious actors
π¦Ώ DDoS Attacks Now Key Weapons in Geopolitical Conflicts, NETSCOUT Warns π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
Hackers now use AI and botnets to launch powerful DDoS attacks, bypassing security and overwhelming servers as law enforcement struggles to keep up.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
DDoS Attacks Now Key Weapons in Geopolitical Conflicts, NETSCOUT Warns
Hackers now use AI and botnets to launch powerful DDoS attacks, bypassing security and overwhelming servers as law enforcement struggles to keep up.
π΅οΈββοΈ Minnesota Tribe Struggles After Ransomware Attack π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Hotel and casino operations for the Lower Sioux Indians have been canceled or postponed, and the local health center is redirecting those needing medical or dental care.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Minnesota Tribe Struggles After Ransomware Attack
Hotel and casino operations for the Lower Sioux Indians have been canceled or postponed, and the local health center is redirecting those needing medical or dental care.
βοΈ Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe βοΈ
π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation FBI. Legal experts say the inquiry could be grounds to reopen a number of adjudicated cases in which the expert's testimony may have been pivotal.π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
Krebs on Security
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe
A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation (FBI). Legal expertsβ¦
π΅οΈββοΈ Gmail Is Not a Secure Way to Send Sensitive Comms: A Friendly Reminder π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
New endtoend Gmail encryption alone isn't secure enough for an enterprise's most sensitive and prized data, experts say.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Gmail for Sensitive Comms: What's the Risk?
Is the new end-to-end Google Workspace Gmail encryption secure enough for an enterprise's most sensitive and prized data? Our experts weigh in.
π1
π΅οΈββοΈ CISA Warns: Old DNS Trick 'Fast Flux' Is Still Thriving π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
An old DNS switcheroo technique is still helping attackers keep their infrastructure alive. But is it really a pressing issue in 2025?.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
CISA Warns: Old DNS Trick 'Fast Flux' Is Still Thriving
An old DNS switcheroo technique is still helping attackers keep their infrastructure alive. But is it really a pressing issue in 2025?
π1
π¦
IT Vulnerability Report: VMware, Microsoft Fixes Urged by Cyble π¦
π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble IT Vulnerability Report VMware, Microsoft Fixes Urged by Cyble " dataimagecaption"Cyble IT Vulnerability Report VMware, Microsoft Fixes Urged by Cyble " datamediumfile"httpscyble.comwpcontentuploads202504CybleBlogsITVulnerabilityReport300x150.jpg" datalargefile"httpscyble.comwpcontentuploads202504CybleBlogsITVulnerabilityReport.jpg" title"IT Vulnerability Report VMware, Microsoft Fixes Urged by Cyble 1" Overview Cybles vulnerability intelligence unit examined 30 vulnerabilities and 14 dark web exploit claims in recent reports to clients and flagged eight of the vulnerabilities as meriting highpriority attention by security teams. Cyble said the eight vulnerabilities found in products from Microsoft, VMware, Apple, Google, and others can lead to system compromise, data bre...π Read more.
π Via "CYBLE"
----------
ποΈ Seen on @cibsecurity
Cyble
IT Vulnerability Report: VMware, Microsoft Urged To Fix
After investigating recent IT vulnerability, Cyble threat researchers identified eight high-priority fixes for security teams.
π¦Ώ Googleβs Sec-Gemini v1 Takes on Hackers & Outperforms Rivals by 11% π¦Ώ
π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
SecGemini v1 has access to realtime cybersecurity data from trusted sources including Google Threat Intelligence, Mandiants attack reports, and the Open Source Vulnerabilities database.π Read more.
π Via "Tech Republic"
----------
ποΈ Seen on @cibsecurity
TechRepublic
Googleβs Sec-Gemini v1 Takes on Hackers & Outperforms Rivals by 11%
Sec-Gemini v1 has access to real-time cybersecurity data from trusted sources including Google Threat Intelligence, Mandiantβs attack reports, and the Open Source Vulnerabilities database.
π What Is Cyber Threat Hunting? π
π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
Cyber threat hunting is a proactive approach of searching networks, endpoints, and datasets to uncover hidden cyber threats that have bypassed traditional security measures. Threat hunting in cybersecurity is not just about reacting to alerts its about actively seeking out malicious activities and advanced persistent threats that lurk beneath the surface, potentially causing significant damage The post What Is Cyber Threat Hunting? appeared first on UnderDefense.π Read more.
π Via "UnderDefense"
----------
ποΈ Seen on @cibsecurity
UnderDefense
What Is Threat Hunting?
Cyber threat hunting is the practice of identifying malicious activity within a system, network, and cloud before it disrupts your business.
ποΈ CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
Cybersecurity agencies from Australia, Canada, New Zealand, and the United States have published a joint advisory about the risks associated with a technique called fast flux that has been adopted by threat actors to obscure a commandandcontrol C2 channel. "'Fast flux' is a technique used to obfuscate the locations of malicious servers through rapidly changing Domain Name System DNS.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsofts lightweight sourcecode editor.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign
Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsoftβs lightweight source-code editor
π Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsofts lightweight sourcecode editor.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign
Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsoftβs lightweight source-code editor
π Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsofts lightweight sourcecode editor.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Malicious Microsoft VS Code Extensions Used in Cryptojacking Campaign
Security researchers from ExtensionTotal have found nine malicious extensions in Visual Studio Code, Microsoftβs lightweight source-code editor