A highly sophisticated ransomware variant named Medusa has compromised over 300 organizations worldwide from critical infrastructure sectors. The attacks have targeted a wide array of industries including medical, education, legal, insurance, technology, and manufacturing sectors, demonstrating the threat actor’s broad…
New OBSCURE#BAT Manipulates System Processes & Registry Entries To Evade Detection
A sophisticated malware campaign, tracked as OBSCURE#BAT, has been identified using heavily obfuscated batch scripts to install stealthy rootkits, allowing attackers to maintain persistent access to compromised systems while avoiding detection. This campaign uses social engineering tactics and deceptive file…
Fortinet Addresses Multiple Vulnerabilities in FortiSandbox, FortiOS, & Other Products
Fortinet has released a comprehensive security update addressing numerous vulnerabilities across its product portfolio, with particularly significant issues identified in FortiSandbox, FortiOS, and several other enterprise security solutions. These vulnerabilities range from medium to high severity and could potentially allow…
Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand
Feds warn gang still rampant and now cracked 300+ victims around the world A crook who distributes the Medusa ransomware tried to make a victim cough up three payments instead of the usual two, according to a government advisory on…
WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback
Browser maker Mozilla is urging users to update their Firefox instances to the latest version to avoid facing issues with using add-ons due to the impending expiration of a root certificate. “On March 14, 2025, a root certificate used to…
Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk
Meta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild. The vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating high severity.…
Schwerer Ausfall: Dienste von Synology weltweit gestört
Bei Synology gibt es Störungen zweier Systemdienste sowie sämtlicher C2-Dienste. Der Hersteller spricht von einem “schweren Ausfall”. (Synology, Storage) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Schwerer Ausfall: Dienste von Synology weltweit gestört
IT Security News Hourly Summary 2025-03-13 09h : 6 posts
6 posts were published in the last hour 7:32 : Tenda AC7 Vulnerability Lets Hackers Execute Malicious Payloads for Root Access 7:32 : ISAC Executive Order Increases Risk for Small Towns 7:32 : Microsoft patches 57 security flaws, Sola aims…
Tenda AC7 Vulnerability Lets Hackers Execute Malicious Payloads for Root Access
A vulnerability has been discovered in the Tenda AC7 router, firmware version V15.03.06.44, which allows attackers to execute malicious payloads and gain root access. As per a report in Github, the vulnerability, identified through experimental setup and exploitation, revolves around…
ISAC Executive Order Increases Risk for Small Towns
All of the small towns across America will have less time to prepare for and need more time to respond to and recover from threats to and attacks on their election infrastructure. The post ISAC Executive Order Increases Risk for…
Microsoft patches 57 security flaws, Sola aims to build the ‘Stripe for security’, US council wants to counter China threats
Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days US communications regulator to create council to counter China technology threats Signal no longer cooperating with Ukraine on Russian cyberthreats, official says Huge thanks to our sponsor, Vanta Do you…
Estonia-based Blackwall raises €45 million Series B to protect SMBs from malicious online traffic
A huge chunk of online traffic now comes from bots, both good and bad — but AI is boosting the latter. From DDoS attacks to scraping, there’s a renewed barrage of threats that companies have to deal with. According to…
China-Nexus Group Hacked Juniper Networks and Implant Backdoors on Its Routers
In a significant cybersecurity breach discovered in mid-2024, a sophisticated threat actor deployed custom backdoors on Juniper Networks’ Junos OS routers. The intrusion represents an alarming development in the targeting of critical network infrastructure by nation-state actors, with potential implications…
US Charges 12 Chinese Hackers For Hacking National Security Infrastructure
The United States Department of Justice unveiled charges against twelve Chinese nationals on March 5, 2025, accusing them of orchestrating a sophisticated global cyber espionage campaign targeting critical American infrastructure, government agencies, and dissidents. The indictments mark a significant escalation…
Drei Fragen und Antworten: TrapC – speichersicherer Ersatz für C/C++
Programmieren mithilfe von KI-Assistenten benötigt eine C/C++-ähnliche Sprache, die aber speichersicher ist, meint Robin Rowe. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Drei Fragen und Antworten: TrapC – speichersicherer Ersatz für C/C++
Most Secure AI Models for Enterprises
For business leaders around the globe, AI promises an exciting edge in innovation and efficiency. The rapid evolution of AI models – and the agentic AI applications they facilitate – look like a game-changer for companies in all categories. AI…
GitLab Identifies Security Vulnerabilities Enabling Attacker Logins as Valid Users
GitLab announced the release of versions 17.9.2, 17.8.5, and 17.7.7 for both its Community Edition (CE) and Enterprise Edition (EE). These updates include crucial bug and security fixes, urging all self-managed installations to upgrade promptly to protect against several critical…
Security Neglect: Like an Unserviced Car, It’s Only a Matter of Time
Security is like car maintenance – you either keep up with it, or you deal with the consequences. And by the time you see the check engine light, it might already be too late. The post Security Neglect: Like an…
CISOs, are your medical devices secure? Attackers are watching closely
The adoption of connected medical devices, collectively called the Internet of Medical Things (IoMT), has transformed patient care. However, this technological advancement has also introduced cybersecurity challenges to safeguard patient safety and uphold organizational security. Securing IoMT: Prioritizing risks IoMT…
Anzeige: So gelingt die Integration von Microsoft Copilot
Microsoft Copilot eröffnet Unternehmen neue Wege zur Automatisierung und Optimierung von Arbeitsprozessen. Ein Workshop zeigt, wie es effizient in die Microsoft 365 Umgebung integriert werden kann. (Golem Karrierewelt, KI) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den…
US populace should be wary of malware and digital arrest messages on iPhones
In recent days, some residents have reported receiving two types of fraudulent messages, designed by scammers either to steal personal information via malware or to extort victims for a ransom, based on an alleged crime they did not commit. In…
USA introduces a self-deportation app called CBP Home
The US Customs and Border Protection (CBP) has officially launched the new CBP Home app, which includes a self-deportation feature. The new app replaces the… The post USA introduces a self-deportation app called CBP Home appeared first on Panda Security…
Fortinet Addresses Security Issues in FortiSandbox, FortiOS, and Other Products
Fortinet’s Product Security Incident Response Team (PSIRT) announced the resolution of several critical and high-severity security vulnerabilities affecting various Fortinet products, including FortiSandbox and FortiOS. These updates are part of Fortinet’s ongoing efforts to enhance the security and reliability of…
Cisco IOS XR Software Vulnerability Allows Attackers to Execute Commands as Root
Cisco has disclosed a high-severity privilege escalation vulnerability (CVE-2025-20138) in its IOS XR Software. This vulnerability enables authenticated local attackers to execute arbitrary commands as the root user on affected devices. The flaw, with a CVSS score of 8.8, impacts…