Category Security

Feb 10, 2025Ravie LakshmananMalware / Payment Security Threat actors have been observed leveraging Google Tag Manager (GTM) to deliver credit card skimmer malware targeting Magento-based e-commerce websites. Website security company Sucuri said the code, while appearing to be a typical…

Memorial Hospital and Manor has informed approximately 120,000 individuals that their sensitive information was compromised in a ransomware attack that occurred in November 2024. The rural medical facility in Bainbridge, Georgia, made the breach public in early November, stating that…

Feb 10, 2025The Hacker NewsIdentity Security / Data Protection Given Okta’s role as a critical part of identity infrastructure, strengthening Okta security is essential. This article covers six key Okta security settings that provide a strong starting point, along with…

Europe’s financial services sector must begin planning now for the transition to quantum-safe cryptography, as the risk of “store now decrypt later” (SNDL) attacks grows, Europol has warned. The policing group issued the calls at its Quantum Safe Financial Forum…

Feb 10, 2025Ravie LakshmananCybersecurity / Weekly Recap In cybersecurity, the smallest crack can lead to the biggest breaches. A leaked encryption key, an unpatched software bug, or an abandoned cloud storage bucket—each one seems minor until it becomes the entry…

The UK military is fast-tracking the recruitment of specialist cybersecurity roles, offering candidates one of the highest starting salaries in the armed forces. Cyber recruits will receive a starting salary of over £40,000, with opportunities for additional skills-based pay as…

Feb 10, 2025Ravie LakshmananMalware / Web Security Threat actors have been observed targeting Internet Information Services (IIS) servers in Asia as part of a search engine optimization (SEO) manipulation campaign designed to install BadIIS malware. “It is likely that the…

Privacy rights groups and security experts have slammed a reported demand from the British government to access end-to-end encrypted (E2EE) data stored in Apple’s iCloud service. The Home Office demand, which by law cannot be publicized, is most likely to…

Feb 10, 2025Ravie LakshmananVulnerability / Data Protection Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in information disclosure under certain conditions. The vulnerability, tracked as CVE-2025-25064, carries a…

Feb 10, 2025Ravie LakshmananVulnerability / Malware Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX and Advantive VeraCore, to drop reverse shells and web shells, and maintain persistent remote…