DPRK 'IT Workers' Pivot to Europe for Employment Scams
By using fake references and building connections with recruiters, some North Korean nationals are landing six-figure jobs that replenish DPRK coffers.
SecurityHungry.com - Cybersecurity News and Updates
In Salt Typhoon's Wake, Congress Mulls Potential Options
While the House Committee on Government Reform was looking for retaliatory options, cybersecurity experts pointed them toward building better defenses.
Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse
Cybersecurity researchers have disclosed details of a now-patched privilege escalation vulnerability in Google Cloud Platform (GCP) Cloud Run that could have allowed a malicious actor to access container images and even inject malicious code."The vulnerability could have allowed such an identity to abuse its Google Cloud Run revision edit permissions in order to pull private Google Artifact
Genetic data site openSNP to close and delete data over privacy concerns
The openSNP project, a platform for sharing genetic and phenotypic data, will shut down on April 30, 2025, and delete all user submissions over privacy concerns and the risk of misuse by authoritarian governments. [...]
Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers
IntroductionAs the cybersecurity landscape evolves, service providers play an increasingly vital role in safeguarding sensitive data and maintaining compliance with industry regulations. The National Institute of Standards and Technology (NIST) offers a comprehensive set of frameworks that provide a clear path to achieving robust cybersecurity practices.For service providers, adhering to NIST
Serial Entrepreneurs Raise $43M to Counter AI Deepfakes, Social Engineering
<p>Adaptive is pitching a security platform designed to replicate real-world attack scenarios through AI-generated deepfake simulations. </p><p>The post <a href="https://www.securityweek.com/serial-entrepreneurs-raise-43m-to-counter-ai-deepfakes-social-engineering/">Serial Entrepreneurs Raise $43M to Counter AI Deepfakes, Social Engineering</a> appeared first on <a href="https://www.securityweek.com">SecurityWeek</a>.</p>
Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining botnet called Outlaw (aka Dota) that's known for targeting SSH servers with weak credentials."Outlaw is a Linux malware that relies on SSH brute-force attacks, cryptocurrency mining, and worm-like propagation to infect and maintain control over systems," Elastic Security Labs said in a new analysis
Vulnerabilities Expose Jan AI Systems to Remote Manipulation
<p>Vulnerabilities in open source ChatGPT alternative Jan AI expose systems to remote, unauthenticated manipulation.</p><p>The post <a href="https://www.securityweek.com/vulnerabilities-expose-jan-ai-systems-to-remote-manipulation/">Vulnerabilities Expose Jan AI Systems to Remote Manipulation</a> appeared first on <a href="https://www.securityweek.com">SecurityWeek</a>.</p>
Verizon Call Filter API flaw exposed customers' incoming call history
A vulnerability in Verizon's Call Filter feature allowed customers to access the incoming call logs for another Verizon Wireless number through an unsecured API request. [...]
How SSL Misconfigurations Impact Your Attack Surface
When assessing an organization’s external attack surface, encryption-related issues (especially SSL misconfigurations) receive special attention. Why? Their widespread use, configuration complexity, and visibility to attackers as well as users make them more likely to be exploited. This highlights how important your SSL configurations are in maintaining your web application security and
Cyberhaven Banks $100 Million in Series D, Valuation Hits $1 Billion
<p>Cyberhaven bags $100 million in funding at a billion-dollar valuation, a sign that investors remain bullish on data security startups.</p><p>The post <a href="https://www.securityweek.com/cyberhaven-banks-100-million-in-series-d-valuation-hits-1-billion/">Cyberhaven Banks $100 Million in Series D, Valuation Hits $1 Billion</a> appeared first on <a href="https://www.securityweek.com">SecurityWeek</a>.</p>
GitHub expands security tools after 39 million secrets leaked in 2024
Over 39 million secrets like API keys and account credentials were leaked on GitHub throughout 2024, exposing organizations and users to significant security risks. [...]
AI Giving Rise of the ‘Zero-Knowledge’ Threat Actor
<p>The rise of zero-knowledge threat actors powered by AI marks a turning point in the business of cybercrime where sophisticated attacks are no longer confined to skilled attackers.</p><p>The post <a href="https://www.securityweek.com/ai-giving-rise-of-the-zero-knowledge-threat-actor/">AI Giving Rise of the ‘Zero-Knowledge’ Threat Actor</a> appeared first on <a href="https://www.securityweek.com">SecurityWeek</a>.</p>
Microsoft adds hotpatching support to Windows 11 Enterprise
Microsoft has announced that hotpatch updates are now available for business customers using Windows 11 Enterprise 24H2 on x64 (AMD/Intel) systems, starting today. [...]
How an Interdiction Mindset Can Help Win War on Cyberattacks
The US military and law enforcement learned to outthink insurgents. It's time for cybersecurity to learn to outsmart and outmaneuver threat actors with the same framework.
Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses
<p>DeepMind found that current AI frameworks are ad hoc, not systematic, and fail to provide defenders with useful insights.</p><p>The post <a href="https://www.securityweek.com/google-deepmind-unveils-framework-to-exploit-ais-cyber-weaknesses/">Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses</a> appeared first on <a href="https://www.securityweek.com">SecurityWeek</a>.</p>
North Korea’s IT Operatives Are Exploiting Remote Work Globally
<p>The global rise of North Korean IT worker infiltration poses a serious cybersecurity risk—using fake identities, remote access, and extortion to compromise organizations.</p><p>The post <a href="https://www.securityweek.com/north-koreas-it-operatives-are-exploiting-remote-work-globally/">North Korea’s IT Operatives Are Exploiting Remote Work Globally</a> appeared first on <a href="https://www.securityweek.com">SecurityWeek</a>.</p>
Gootloader Malware Resurfaces in Google Ads for Legal Docs
Attackers target a familiar industry, law professionals, by hiding the infostealer in ads delivered via Google-based malvertising.
Royal Mail investigates data leak claims, no impact on operations
Royal Mail is investigating claims of a security breach after a threat actor leaked over 144GB of data allegedly stolen from the company's systems. [...]
FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites
The financially motivated threat actor known as FIN7 has been linked to a Python-based backdoor called Anubis (not to be confused with an Android banking trojan of the same name) that can grant them remote access to compromised Windows systems."This malware allows attackers to execute remote shell commands and other system operations, giving them full control over an infected machine," Swiss