Aggregator

A threat actor who gained initial access through a SonicWall VPN device was able to escalate their attack by finding Huntress recovery codes saved in a plaintext file on a user’s desktop. This allowed the attacker to log into the client’s security portal, where they attempted to remediate incident reports and uninstall security agents to […]

The post How a Plaintext File On Users’ Desktops Exposed Secrets Leads to Akira Ransomware Attacks appeared first on Cyber Security News.

Experts at Mosyle have uncovered a new strain of malware, named ModStealer, which has proven entirely invisible to

The post ModStealer: The New Stealth Malware That Bypasses Antivirus appeared first on Penetration Testing Tools.

A recently disclosed vulnerability in the Kubernetes C# client library allows attackers to carry out man-in-the-middle (MiTM) attacks against the API server. The flaw stems from improper certificate validation when using custom certificate authorities (CAs). As organizations increasingly rely on Kubernetes for container orchestration, this weakness could enable interception or alteration of critical control-plane traffic, […]

The post Kubernetes C# Client Flaw Exposes API Server to MiTM Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The United Nations has issued a warning about a new trend in the operations of international criminal networks.

The post UN Warns of New Cyberfraud Hub in Timor-Leste appeared first on Penetration Testing Tools.

文章指出SOC团队面临的工作压力和威胁检测挑战，并介绍ANY.RUN如何通过实时沙盒分析、自动化和集成工具帮助团队提高效率，减少响应时间达21分钟。

A vulnerability classified as problematic has been found in Mikro Software House Software Services Computer Industry and Trade Zirve Nova up to 20250131. Affected is an unknown function. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2025-0419. The attack can be initiated remotely. There is not any exploit available.

The cyberattack on Jaguar Land Rover, which has brought the company’s operations to a standstill, has escalated into

The post The Aftermath of the Attack: How a Cyberattack Crippled Jaguar Land Rover appeared first on Penetration Testing Tools.

土耳其的《个人数据保护法》（KVKK）于2016年实施，基于欧盟指令和GDPR。适用于处理土耳其公民数据的所有组织，并由KVKK机构监管。2024年更新引入跨境数据传输新机制，并加强合规要求及处罚措施。

What is Turkey’s Personal Data Protection Law (KVKK)? The Personal Data Protection Law (KVKK), or Kişisel Verileri Koruma Kanunu in Turkish, is Turkey’s primary data privacy law. It came into force on April 7, 2016, and is largely based on the EU’s former Data Protection Directive 95/46/EC, with significant similarities to the GDPR. It is […]

The post Turkey Personal Data Protection Law (KVKK) appeared first on Centraleyes.

The post Turkey Personal Data Protection Law (KVKK) appeared first on Security Boulevard.

Chinese-language users became the target of a new SEO poisoning campaign that spread malware through counterfeit download sites

The post The Silent Threat: How SEO Poisoning Spreads Malware appeared first on Penetration Testing Tools.

A vulnerability described as critical has been identified in WatchGuard Fireware OS up to 11.12.4+541730/12.11.3/2025.1.0. This impacts an unknown function of the component Mobile User VPN/Branch Office VPN. The manipulation results in out-of-bounds write. This vulnerability is known as CVE-2025-9242. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Planet ICG-2510WG-LTE and ICG-2510W-LTE. This affects an unknown function. The manipulation leads to os command injection. This vulnerability is traded as CVE-2025-9972. It is possible to initiate the attack remotely. There is no exploit available.

The High Court in London has overturned the decision to extradite Portuguese national Diogo Santos Coelho to the

The post High Court Halts Extradition of RaidForums Admin to U.S. appeared first on Penetration Testing Tools.

华盛顿州《我的健康我的数据法案》于2023年通过，旨在保护消费者健康数据隐私。该法适用于在华盛顿州开展业务的企业，并要求企业在收集和处理健康数据时获得明确同意，并提供独立隐私政策。消费者享有访问、删除和撤回同意的权利。禁止使用地理围栏技术跟踪寻求医疗服务者。

What is the Washington My Health My Data Act? The Washington My Health My Data Act (MHMDA) is a comprehensive privacy law enacted in 2023. Its purpose is to safeguard a broad category of sensitive information defined as “consumer health data”, which is not fully covered by the federal Health Insurance Portability and Accountability Act […]

The post Washington My Health My Data Act (MHMDA) appeared first on Centraleyes.

The post Washington My Health My Data Act (MHMDA) appeared first on Security Boulevard.

SOCs face constant pressure. Heavy workloads, poor threat visibility, and disconnected tools introduce delays in detection and response, which may lead to financial loss and operational disruptions for the business.  ANY.RUN helps over 15K security teams to solve this challenge by empowering them to quickly detect, analyze, and understand threats, so they can respond faster […]

The post Efficient SOC: How to Detect and Solve Incidents Faster  appeared first on ANY.RUN's Cybersecurity Blog.

Currently trending CVE - Hype Score: 18 - A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those ...

Currently trending CVE - Hype Score: 18 - K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's ...

Хотели «Hello, world» — получили «Hello, worm».

Mozilla 释出了 Firefox v143.0。主要新特性包括：Windows 版本支持将网站作为 Web 应用固定在任务栏；通过拖曳标签页到标签栏的起始位置固定；可选 Microsoft Copilot 作为 AI 聊天助手；当网站请求摄像头访问权限时可在权限对话框中预览；地址栏支持显示重要的日期和事件，目前限于美国、英国、德国、法国和意大利等地区；改进指纹识别保护；自动删除隐私浏览模式下下载的文件（可在设置中修改该行为）；支持 Windows UI Automation，等等。