Cyber Security Week in Review: March 14, 2025
In brief: Microsoft, Apple fix zero-days, LockBit ransomware dev extradited to the US, and more.
Cybersecurity News - Page 95
New North Korea-linked Android spyware KoSpy targets Korean and English-speaking users
KoSpy is distributed through fake utility applications, which masquerade as helpful tools.
Chinese hackers Volt Typhoon lurked for nearly a year in systems of US utility company
The breach is believed to be part of a broader cyberespionage effort by China’s government targeting US critical infrastructure.
China-nexus hackers UNC3886 target Juniper MX routers with custom backdoors
The group first gained access to a target network through a terminal server used for managing devices.
Apple rolls out security patches to fix to exploited zero-day vulnerability in WebKit
The vulnerability could be exploited by attackers to break out of WebKit's Web Content sandbox by using maliciously crafted web content.
Microsoft releases security updates for over 50 flaws, including six zero-days
One of zero-days, CVE-2025-24983, has been actively exploited by cybercriminals to install a backdoor called ‘PipeMagic.’
New Ballista botnet targets unpatched TP-Link Archer routers
More than 6,000 devices have already been infected by Ballista.
Critical PHP flaw comes under mass-exploitation
If successfully exploited, the flaw could allow attackers to execute arbitrary code.
Edimax acknowledges exploited vulnerability in IC-7100 cameras, no patch
No security patches or firmware updates will be released because the product was discontinued more than ten years ago.
Blind Eagle APT targeting Colombian entities in ongoing espionage campaign
In the recent campaign, the group has been observed exploiting CVE-2024-43451.
Showing elements 941 - 950