South Korean VPN provider IPany was breached in a supply chain attack by the “PlushDaemon” China-aligned hacking group, who compromised the company’s VPN installer to deploy the custom ‘SlowStepper’ malware. […]
Use this AI chatbot prompt to create a password-exclusion list
Creating a custom password-exclusion list can help prevent employees from using passwords that are likely to be guessed. Learn from Specops Software on using AI to generate password dictionary for securing your organization’s credentials. […]
Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025
On the first day of Pwn2Own Automotive 2025, security researchers exploited 16 unique zero-days and collected $382,750 in cash awards. […]
Call for Presentations Open for SecurityWeek’s 2025 Supply Chain Security & Third-Party Risk Summit
Join Us in Shaping the Future of Supply Chain Security – Don’t miss this chance to be part of the conversation addressing one of the most pressing cybersecurity challenges .
The post Call for Presentations Open for SecurityWeek’s 2025 Supply Chain Security & Third-Party Risk Summit appeared first on SecurityWeek.
Cyber Insights 2025: APIs – The Threat Continues
APIs are easy to develop, simple to implement, and frequently attacked. They are prime and lucrative targets for cybercriminals.
The post Cyber Insights 2025: APIs – The Threat Continues appeared first on SecurityWeek.
Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet
Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-service (DDoS) attacks.
According to QiAnXin XLab, the attacks have leveraged the security flaw since June 2024. Additional details about the shortcomings have been withheld to prevent further abuse.
Some
According to QiAnXin XLab, the attacks have leveraged the security flaw since June 2024. Additional details about the shortcomings have been withheld to prevent further abuse.
Some
Over $380,000 Paid Out on First Day of Pwn2Own Automotive 2025
$380,000 paid out on the first day of Pwn2Own Automotive 2025 for exploits targeting car infotainment units, operating systems, and chargers.
The post Over $380,000 Paid Out on First Day of Pwn2Own Automotive 2025 appeared first on SecurityWeek.
Murdoc Botnet Ensnaring Avtech, Huawei Devices
The Mirai-based Murdoc botnet has been actively targeting Avtech and Huawei devices for roughly half a year.
The post Murdoc Botnet Ensnaring Avtech, Huawei Devices appeared first on SecurityWeek.
Oracle Patches 200 Vulnerabilities With January 2025 CPU
Oracle has released 318 new security patches to address roughly 200 unique CVEs as part of its January 2025 Critical Patch Update.
The post Oracle Patches 200 Vulnerabilities With January 2025 CPU appeared first on SecurityWeek.
Record-Breaking DDoS Attack Reached 5.6 Tbps
Cloudflare saw a 53% increase in DDoS attack frequency last year, when it blocked a record-breaking 5.6 Tbps attack.
The post Record-Breaking DDoS Attack Reached 5.6 Tbps appeared first on SecurityWeek.