🖋️ North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A threat actor with ties to the Democratic People's Republic of Korea aka North Korea has been observed leveraging the EtherHiding technique to distribute malware and enable cryptocurrency theft, marking the first time a statesponsored hacking group has embraced the method. The activity has been attributed by Google Threat Intelligence Group GTIG to a threat cluster it tracks as UNC5342,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A threat actor with ties to the Democratic People's Republic of Korea aka North Korea has been observed leveraging the EtherHiding technique to distribute malware and enable cryptocurrency theft, marking the first time a statesponsored hacking group has embraced the method. The activity has been attributed by Google Threat Intelligence Group GTIG to a threat cluster it tracks as UNC5342,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A financially motivated threat actor codenamed UNC5142 has been observed abusing blockchain smart contracts as a way to facilitate the distribution of information stealers such as Atomic AMOS, Lumma, Rhadamanthys aka RADTHIEF, and Vidar, targeting both Windows and Apple macOS systems. "UNC5142 is characterized by its use of compromised WordPress websites and 'EtherHiding,' a technique used.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
An investigation into the compromise of an Amazon Web Services AWShosted infrastructure has led to the discovery of a new GNULinux rootkit dubbed LinkPro, according to findings from Synacktiv. "This backdoor features functionalities relying on the installation of two eBPF extended Berkeley Packet Filter modules, on the one hand to conceal itself, and on the other hand to be remotely.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Architectures, Risks, and Adoption: How to Assess and Choose the Right AI-SOC Platform 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Scaling the SOC with AI Why now? Security Operations Centers SOCs are under unprecedented pressure. According to SACRs AISOC Market Landscape 2025, the average organization now faces around 960 alerts per day, while large enterprises manage more than 3,000 alerts daily from an average of 28 different tools. Nearly 40 of those alerts go uninvestigated, and 61 of security teams admit.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in "Zero Disco' Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have disclosed details of a new campaign that exploited a recently disclosed security flaw impacting Cisco IOS Software and IOS XE Software to deploy Linux rootkits on older, unprotected systems. The activity, codenamed Operation Zero Disco by Trend Micro, involves the weaponization of CVE202520352 CVSS score 7.7, a stack overflow vulnerability in the Simple.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Beware the Hidden Costs of Pen Testing 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Penetration testing helps organizations ensure IT systems are secure, but it should never be treated in a onesizefitsall approach. Traditional approaches can be rigid and cost your organization time and money while producing inferior results. The benefits of pen testing are clear. By empowering white hat hackers to attempt to breach your system using similar tools and techniques to.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion-Dollar Smishing, Android RATs & More 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The online world is changing fast. Every week, new scams, hacks, and tricks show how easy its become to turn everyday technology into a weapon. Tools made to help us work, connect, and stay safe are now being used to steal, spy, and deceive. Hackers dont always break systems anymore they use them. They hide inside trusted apps, copy real websites, and trick people into giving up control.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ CISA Flags Adobe AEM Flaw with Perfect 10.0 Score — Already Under Active Attack 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE202554253 CVSS score 10.0, a maximumseverity misconfiguration bug that could result in arbitrary code execution.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Microsoft on Thursday disclosed that it revoked more than 200 certificates used by a threat actor it tracks as Vanilla Tempest to fraudulently sign malicious binaries in ransomware attacks. The certificates were "used in fake Teams setup files to deliver the Oyster backdoor and ultimately deploy Rhysida ransomware," the Microsoft Threat Intelligence team said in a post shared on X. The tech.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📢 Thousands of exposed civil servant passwords are up for grabs online 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
While the password security failures are concerning, they pale in comparison to other nations.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Thousands of exposed civil servant passwords are up for grabs online
While the password security failures are concerning, they pale in comparison to other nations
🦿 Microsoft’s Patch Tuesday: 172 Flaws Fixed 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
The tech titan is addressing 172 security flaws, including six zeroday vulnerabilities. Among these, eight are rated Critical, consisting of five remote code execution bugs and three elevation of privilege issues. The post Microsofts Patch Tuesday 172 Flaws Fixed appeared first on TechRepublic.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Microsoft’s Patch Tuesday: 172 Flaws Fixed
The tech titan is addressing 172 security flaws, including six zero-day vulnerabilities.
♟️ Email Bombs Exploit Lax Authentication in Zendesk ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Email Bombs Exploit Lax Authentication in Zendesk
Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously.
🖋️ Identity Security: Your First and Last Line of Defense 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The danger isnt that AI agents have bad days its that they never do. They execute faithfully, even when what theyre executing is a mistake. A single misstep in logic or access can turn flawless automation into a flawless catastrophe. This isn't some dystopian fantasyit's Tuesday at the office now. We've entered a new phase where autonomous AI agents act with serious system privileges. They.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have disclosed details of a recently patched critical security flaw in WatchGuard Fireware that could allow unauthenticated attackers to execute arbitrary code. The vulnerability, tracked as CVE20259242 CVSS score 9.3, is described as an outofbounds write vulnerability affecting Fireware OS 11.10.2 up to and including 11.12.4Update1, 12.0 up to and including.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Prosper Data Breach Exposes 17 Million Customers' Personal Info 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The US lending platform said early investigations found no evidence of unauthorized account access or fund theft.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Prosper Data Breach Exposes 17 Million Customers’ Personal Info
The US lending platform said early investigations found no evidence of unauthorized account access or fund theft
📔 Security Teams Must Deploy Anti-Infostealer Defenses Now 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
At ISACA Europe 2025, cybersecurity consultant Tony Gee shared some technical measures security teams could implement to fight against the infostealer scourge.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Security Teams Must Deploy Anti-Infostealer Defenses Now
At ISACA Europe 2025, cybersecurity consultant Tony Gee shared some technical measures security teams could implement to fight against the infostealer scourge
📔 North Korean Hackers Use EtherHiding to Steal Crypto 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Google reveals North Korean hackers are using EtherHiding, a blockchainbased technique, to deliver malware and steal cryptocurrency.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
North Korean Hackers Use EtherHiding to Steal Crypto
Google reveals North Korean hackers are using EtherHiding, a blockchain-based technique, to deliver malware and steal cryptocurrency
🦅 The Week in Vulnerabilities: Cyble Urges Adobe, Microsoft Fixes 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble Vulnerability Intelligence researchers tracked 996 vulnerabilities in the last week, and more than 140 already have a publicly available ProofofConcept PoC, raising the likelihood of realworld attacks. A total of 74 vulnerabilities were rated as critical under the CVSS v3.1 scoring system, while 18 received a critical severity rating based on the newer CVSS v4.0 scoring system. Here are some of the more significant IT and ICS vulnerabilities flagged by Cyble threat intelligence researchers in recent reports to clients. The Weeks Top IT Vulnerabilities CVE202549553 is a critical DOMbased CrossSite Scripting XSS vulnerability affecting Adobe Connect versions 12.9 and earlier. The vulnerability could potentially allow an attacker to execute arbitrary malicious scripts i...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
🖋️ North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality of two of its malware programs, indicating that the hacking group is actively refining its toolset. That's according to new findings from Cisco Talos, which said recent campaigns undertaken by the hacking group have seen the functions of BeaverTail and OtterCookie coming.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Teen Tied to Russian Hackers in Dutch Cyber Espionage Probe 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Dutch prosecutors suspect three teens of aiding a foreign power, with one allegedly linked to a Russianaffiliated hacker group.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Teen Tied to Russian Hackers in Dutch Cyber Espionage Probe
Dutch prosecutors suspect three teens of aiding a foreign power, with one allegedly linked to a Russian-affiliated hacker group