CyberAlerts

IPany VPN breached in supply-chain attack to push custom malware

Description: South Korean VPN provider IPany was breached in a supply chain attack by the "PlushDaemon" China-aligned hacking group, who compromised the company's VPN installer to deploy the custom 'SlowStepper' malware. [...]

Source: BleepingComputer

January 22nd, 2025 (6 months ago)

Will 2025 See a Rise of NHI Attacks?

Description: The flurry of non-human identity attacks at the end of 2024 demonstrates extremely strong momentum heading into the new year. That does not bode well.

Source: Dark Reading

January 22nd, 2025 (6 months ago)

Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025

Description: On the first day of Pwn2Own Automotive 2025, security researchers exploited 16 unique zero-days and collected $382,750 in cash awards. [...]

Source: BleepingComputer

January 22nd, 2025 (6 months ago)

Podcast: TikTok and the Tech Oligarchy

Description: Why it's more important than ever to have decentralized social networks; the geolocation AI tool being marketed to cops; and Nokia's newly discovered archive of whacky ideas.

Source: 404 Media

January 22nd, 2025 (6 months ago)

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

Description: Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-service (DDoS) attacks. According to QiAnXin XLab, the attacks have leveraged the security flaw since June 2024. Additional details about the shortcomings have been withheld to prevent further abuse. Some

Source: TheHackerNews

January 22nd, 2025 (6 months ago)

Infosec was literally the last item in Trump's policy plan, yet major changes are likely on his watch

Source: TheRegister

January 22nd, 2025 (6 months ago)

President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison

Description: U.S. President Donald Trump on Tuesday granted a "full and unconditional pardon" to Ross Ulbricht, the creator of the infamous Silk Road drug marketplace, after spending 11 years behind bars. "I just called the mother of Ross William Ulbricht to let her know that in honor of her and the Libertarian Movement, which supported me so strongly, it was my pleasure to have just signed a full and

Source: TheHackerNews

January 22nd, 2025 (6 months ago)

Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks

Description: As GenAI tools and SaaS platforms become a staple component in the employee toolkit, the risks associated with data exposure, identity vulnerabilities, and unmonitored browsing behavior have skyrocketed. Forward-thinking security teams are looking for security controls and strategies to address these risks, but they do not always know which risks to prioritize. In some cases, they might have

Source: TheHackerNews

January 22nd, 2025 (6 months ago)

ASUS Adds AdGuard DNS to Wi-Fi 7 Routers for Ad Blocking

Description: ASUS has announced the integration of AdGuard DNS as a built-in feature in its Wi-Fi 7-compatible routers, a move aimed at bolstering user security and privacy. The integration allows ASUS users to access AdGuard's ad-blocking and anti-tracking services at the router level, potentially reducing online threats and improving browsing experiences. The decision to integrate AdGuard … The post ASUS Adds AdGuard DNS to Wi-Fi 7 Routers for Ad Blocking appeared first on CyberInsider.

Source: CyberInsider

January 22nd, 2025 (6 months ago)

Ransomware scum make it personal for Reg readers by impersonating tech support

Source: TheRegister

January 22nd, 2025 (6 months ago)

Threat and Vulnerability Intelligence Database

Example Searches:

	IPany VPN breached in supply-chain attack to push custom malware Description: South Korean VPN provider IPany was breached in a supply chain attack by the "PlushDaemon" China-aligned hacking group, who compromised the company's VPN installer to deploy the custom 'SlowStepper' malware. [...] Source: BleepingComputer January 22nd, 2025 (6 months ago)
	Will 2025 See a Rise of NHI Attacks? Description: The flurry of non-human identity attacks at the end of 2024 demonstrates extremely strong momentum heading into the new year. That does not bode well. Source: Dark Reading January 22nd, 2025 (6 months ago)
	Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025 Description: On the first day of Pwn2Own Automotive 2025, security researchers exploited 16 unique zero-days and collected $382,750 in cash awards. [...] Source: BleepingComputer January 22nd, 2025 (6 months ago)
	Podcast: TikTok and the Tech Oligarchy Description: Why it's more important than ever to have decentralized social networks; the geolocation AI tool being marketed to cops; and Nokia's newly discovered archive of whacky ideas. Source: 404 Media January 22nd, 2025 (6 months ago)
	Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet Description: Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-service (DDoS) attacks. According to QiAnXin XLab, the attacks have leveraged the security flaw since June 2024. Additional details about the shortcomings have been withheld to prevent further abuse. Some Source: TheHackerNews January 22nd, 2025 (6 months ago)
	Infosec was literally the last item in Trump's policy plan, yet major changes are likely on his watch Source: TheRegister January 22nd, 2025 (6 months ago)
	President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison Description: U.S. President Donald Trump on Tuesday granted a "full and unconditional pardon" to Ross Ulbricht, the creator of the infamous Silk Road drug marketplace, after spending 11 years behind bars. "I just called the mother of Ross William Ulbricht to let her know that in honor of her and the Libertarian Movement, which supported me so strongly, it was my pleasure to have just signed a full and Source: TheHackerNews January 22nd, 2025 (6 months ago)
	Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks Description: As GenAI tools and SaaS platforms become a staple component in the employee toolkit, the risks associated with data exposure, identity vulnerabilities, and unmonitored browsing behavior have skyrocketed. Forward-thinking security teams are looking for security controls and strategies to address these risks, but they do not always know which risks to prioritize. In some cases, they might have Source: TheHackerNews January 22nd, 2025 (6 months ago)
	ASUS Adds AdGuard DNS to Wi-Fi 7 Routers for Ad Blocking Description: ASUS has announced the integration of AdGuard DNS as a built-in feature in its Wi-Fi 7-compatible routers, a move aimed at bolstering user security and privacy. The integration allows ASUS users to access AdGuard's ad-blocking and anti-tracking services at the router level, potentially reducing online threats and improving browsing experiences. The decision to integrate AdGuard … The post ASUS Adds AdGuard DNS to Wi-Fi 7 Routers for Ad Blocking appeared first on CyberInsider. Source: CyberInsider January 22nd, 2025 (6 months ago)
	Ransomware scum make it personal for Reg readers by impersonating tech support Source: TheRegister January 22nd, 2025 (6 months ago)