Blog – Page 697 – Cyber Mike

N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto

The North Korea-linked threat actor known as UNC4899 has been attributed to attacks targeting two different organizations by approaching their employees via LinkedIn and Telegram.
“Under the guise of freelance opportunities for software development work, UNC4899 leveraged social engineering techniques to successfully convince the targeted employees to execute malicious Docker containers in their

Who’s Really Behind the Mask? Combatting Identity Fraud

Why context, behavioral baselines, and multi-source visibility are the new pillars of identity security in a world where credentials alone no longer cut it.

The post Who’s Really Behind the Mask? Combatting Identity Fraud appeared first on SecurityWeek.

Spikes in malicious activity precede new CVEs in 80% of cases

Researchers have found that in roughly 80% of cases, spikes in malicious activity like network reconnaissance, targeted scanning, and brute-forcing attempts are a precursor to the disclosure of new security vulnerabilities (CVEs) within six weeks. […]

API Security Firm Wallarm Raises $55 Million

Wallarm has raised money in a Series C funding round led by Toba Capital, which brings the total raised by the company to over $70 million.

The post API Security Firm Wallarm Raises $55 Million appeared first on SecurityWeek.

Browser Extensions Pose Serious Threat to Gen-AI Tools Handling Sensitive Data

LayerX has disclosed an AI chatbot hacking method via web browser extensions it has named ‘man-in-the-prompt’.

The post Browser Extensions Pose Serious Threat to Gen-AI Tools Handling Sensitive Data appeared first on SecurityWeek.

CISA Announces Release of Thorium for Malware Analysis

AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals

Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to ensure the endpoint is adequately secured by a platform capable of not just keeping pace, but staying ahead of an ever-evolving threat landscape.

Report Links Chinese Companies to Tools Used by State-Sponsored Hackers

SentinelLabs connects the dots between prolific Chinese state-sponsored hackers and companies developing intrusion tools.

The post Report Links Chinese Companies to Tools Used by State-Sponsored Hackers appeared first on SecurityWeek.

UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud

The financially motivated threat actor known as UNC2891 has been observed targeting Automatic Teller Machine (ATM) infrastructure using a 4G-equipped Raspberry Pi as part of a covert attack.
The cyber-physical attack involved the adversary leveraging their physical access to install the Raspberry Pi device and have it connected directly to the same network switch as the ATM, effectively placing

Proton launches free standalone cross-platform Authenticator app

Proton has launched Proton Authenticator, a free standalone two-factor authentication (2FA) application for Windows, macOS, Linux, Android, and iOS. […]

Cyber News