While affected teams face months of disruption, organizations leveraging D3 Morpheus can reap the benefits of its vendor-resilient security architecture.
The post The Skybox Fallout: A Business Case for Vendor-Resilient Security Operations appeared first on D3 Security.
The post The Skybox Fallout: A Business Case for Vendor-Resilient Security Operations appeared first on Security Boulevard.
More
attacks targeting cryptocurrency users. Microsoft
has identified a new Remote Access Trojan, named StilachiRAT, that has sophisticated
capabilities to remain stealthy and persistent so it can harvest crypto wallet
credentials via web browsers.
The
malware targets many widely used cryptocurrency wallet browser extensions:
1.
Bitget Wallet (Formerly BitKeep)
2.
Trust Wallet
3.
TronLink
4.
MetaMask (ethereum)
5.
TokenPocket
6.
BNB Chain Wallet
7.
OKX Wallet
8.
Sui Wallet
9.
Braavos – Starknet Wallet
10.
Coinbase Wallet
11.
Leap Cosmos Wallet
12.
Manta Wallet
13.
Keplr
14.
Phantom
15.
Compass Wallet for Sei
16.
Math Wallet
17.
Fractal Wallet
18.
Station Wallet
19.
ConfluxPortal
20.
Plug
If you
use any of these Chrome wallet extensions, be very careful.
As I
outlined in my 2025
Cybersecurity Predictions, I forecast an increased Nation State focus on
the finance sector, with specific emphasis on the cryptocurrency. This year we have already seen a ~$1.5
billion hack of a crypto exchange Bybit.
Microsoft’s
full write-up, including Indicators of Compromise (IoC) can be found in their
security analysis brief:
The post Advanced Malware Targets Cryptocurrency Wallets appeared first on Security Boulevard.
OAuth attacks are increasing, exploiting SaaS blind spots to gain covert access. Learn how these attacks work and why visibility is key to mitigating the risks.
The post The Rise of OAuth Attacks to Access Sensitive Systems | Grip appeared first on Security Boulevard.
Double hell-ix: Personal genomics firm tells customers your data is safe—but few will trust the loss-making biotech pioneer.
The post Spit Happens: 23andMe is Bankrupt — Secure Your DNA Data NOW Already appeared first on Security Boulevard.
Cary, NC, Mar. 24, 2025, CyberNewswire –– INE Security, a global provider of cybersecurity training and certification, today announced its initiative to spotlight the increasing cyber threats targeting healthcare institutions.
In recognition of National Physicians Week 2025, … (more…)
The post News alert: INE Security spotlights healthcare companies facing rising exposure to costly breaches first appeared on The Last Watchdog.
The post News alert: INE Security spotlights healthcare companies facing rising exposure to costly breaches appeared first on Security Boulevard.
Speaker: Bryan Hance
Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite []DEF CON 32]2 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 32 – Recon Village – Bastardo Grande: Hunting the Largest Black Market Bike Fence appeared first on Security Boulevard.
Cary, NC, 24th March 2025, CyberNewsWire
The post Cyber Guardians: INE Security Champions Cybersecurity Training During National Physicians Week 2025 appeared first on Security Boulevard.
A Cato Networks threat researcher with little coding experience was able to convince AI LLMs from DeepSeek, OpenAI, and Microsoft to bypass security guardrails and develop malware that could steal browser passwords from Google Chrome.
The post Cato Uses LLM-Developed Fictional World to Create Jailbreak Technique appeared first on Security Boulevard.
tl;dr: There's no silver bullet for keeping secrets out of logs, but if we put several "lead bullets" in the right places, we have a good chance of success.
The post Keeping Secrets Out of Logs: Strategies That Work appeared first on Security Boulevard.
Too often, we hear engineering teams proudly claim, “We push code commits every day.” It sounds impressive, continuous work, constant output, relentless progress. But here’s...Read More
The post Code Commits Are Not a Measure of Software Success, Customer Delight Is appeared first on ISHIR | Software Development India.
The post Code Commits Are Not a Measure of Software Success, Customer Delight Is appeared first on Security Boulevard.
Today, we're excited to announce that Tonic.ai has raised $35 million in Series B funding led by global venture capital and private equity firm Insight Partners. A milestone that serves as further proof of the value of mimicking production data for development—the value of fake data.
The post We raised a $35M Series B. Here’s what’s next for fake data. appeared first on Security Boulevard.
Global Partner Program empowers partners to deliver top-tier supply chain security solutions to enterprise customers Portland, OR – March 24, 2025 – Eclypsium, a leader in infrastructure supply chain security, is proud to announce that it has been included in the prestigious 2025 CRN® Partner Program Guide. The guide is issued annually by CRN®, a […]
The post Eclypsium Earns Spot on Coveted 2025 CRN Partner Program Guide appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.
The post Eclypsium Earns Spot on Coveted 2025 CRN Partner Program Guide appeared first on Security Boulevard.
This is a news item roundup of privacy or privacy-related news items for 16 MAR 2025 - 22 MAR 2025. Information and summaries provided here are as-is for warranty purposes.
Note: You may see some traditional "security" content mixed-in here due to the close relationship between online privacy and cybersecurity - many things may overlap; for example, major vulnerabilities in popular software, which may compromise the security of user's devices (and therefore pose a threat to their privacy) and large data breaches where significant personal information is exposed.
Items presented here are typically curated with the end user and small groups (such as families and small/micro businesses) in mind. Due to this focus, items primarily affecting enterprises or large organizations may not be included, even if they are widespread or "popular" stories.
TABLE OF CONTENTS
You should at least enable MFA on important/sensitive accounts. While MFA is primarily a security feature, its primary privacy benefit is adding another layer of security to prevent unauthorized access to information contained in particular important or sensitive accounts.
Surveillance Tech in the NewsThis section covers surveillance technology and methods in the news. Specifically, stories and news items where public and/or private organizations have leveraged their capabilities to encroach on user privacy; for example, data brokers using underhanded means to harvest user location data without user knowledge or public organizations using technology without regard for user privacy.
Android Apps Use Bluetooth and WiFi Scanning to Track Users Without GPS
Cyber Insider
Researchers found that 86% of apps they analyzed collect sensitive data, including location data stemming from scanning Wi-Fi network details, and collecting device identifiers. These apps also frequently use Bluetooth data to gather location information and proximity to nearby devices.
This data collection is primarily facilitated by software development kits, which developers may include in apps to bring features without coding things from the ground up - however, they may even be unaware of the privacy implications for their app users.
Judge stops Musk's team from 'unbridled access' to Social Security private data
Reuters
As DOGE continues to push for more access to various systems containing sensitive information of Americans' a judge orders the Social Security Administration to stop sharing data with "DOGE affiliates". Allegedly (and in line with prior reporting), DOGE accessed sensitive SSA data without proper vetting -- similar to when they gained access to US Treasury payment data, which also contains sensitive information of millions of Americans.
Researchers name several countries as potential Paragon spyware customers
TechCrunch
The Citizen Lab, a group of academics and security researchers, recently published a report indicating the governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore are "likely" customers of Israeli spyware maker Paragon Solutions.
Privacy Tools and ServicesPrimarily covers tools and services with a focus on maintaining/improving/respecting user privacy. Generally includes recommended services/tools found on avoidthehack, but also may feature upcoming/other privacy services not necessarily recommended or promoted by avoidthehack.com
Privacy ToolsBitwarden enables biometric unlock on Linux
Bitwarden
Installing Bitwarden through Snapcraft on Linux can use biometrics to unlock the desktop application.
Privacy ServicesCape opens $99/month beta of its privacy-first mobile plan, inks Proton deal, raises $30M
TechCrunch
I usually don't include beta software on in this series (or really on avoidthehack) or early-stage startups because things in those early-stages go through such turbulence... but given the Salt Typhoon breach and the apparent lackluster security practices and culture at just about every American telecommunications company, this was too interesting to ignore.
Cape is a mobile carrier startup claiming to provide a more secure and private service alternative to traditional telecommunications services. They also have appeared to partner with Proton...
Vulnerabilities and MalwarePrimarily includes severe and exploited vulnerabilities in devices or software used by end users (ex: a major router firmware flaw). Malware campaigns covered generally target/affect the end user.
This section will not contain every vulnerability/CVE or malware campaign reported, but will focus on those with the largest potential impact on a wide range of end users.
VulnerabilitiesApple’s Passwords app was vulnerable to phishing attacks for nearly three months after launch
9to5Mac
Mysk security researchers first discovered this vulnerability after noticing the Passwords app had connected to 130 different domains over regular (unencrypted) HTTP. Specifically, it was fetching account icons and defaulted to opening password reset pages over HTTP.
This vulnerability was patched by Apple in December 2024, but they only disclosed it recently.
Cybercriminals Exploit CheckPoint Antivirus Driver in Malicious Campaign
Infosecurity Magazine
Threat actors are leveraging a "bring your own vulnerable driver" (BYOVD) attack to bypass Windows security measures. Once bypassed, threat actors had high-level access and could view information such as user passwords and other stored credentials.
Microsoft isn't fixing 8-year-old shortcut exploit abused for spying
The Register
Nation-state backed threat actors (which includes North Korea, Iran, Russia, and China) have been abusing Windows shortcut files LNK for many years. These threat actors go to lengths to bury the actual commands used in malicious .LNK files which download malware onto the machine.
According to Microsoft, despite this observed trend, it doesn't intend to release a security fix -- but could do so in the future.
MalwareAMOS and Lumma stealers actively spread to Reddit users
MalwareBytes
Reddit posts (directly on reddit.com) by threat actors on subreddits frequented by cryptocurrency traders link to information stealing malware.
New Arcane infostealer infects YouTube, Discord users via game cheats
Bleeping Computer
A campaign spreading information stealer Arcane primarily uses video game cheats as a lure; specifically, the campaign uses YouTube videos promoting game cheats and cracks to trick users into downloading a password-protected archive containing a malware loader script. Once executed, the script fetches the information stealing malware.
The Kaspersky researchers noted the this "Arcane" information stealer has no known links or overlapping code with Arcane Stealer V. Additionally, Arcane steals a wide range of user data, including VPN account credentials, gaming client information, messaging apps, and information stored in various web browsers.
300 Malicious ‘Vapor’ Apps Hosted on Google Play Had 60 Million Downloads
SecurityWeek
Vapor campaign included over 180 malicious apps on Google Play posing as utility, health and fitness, and lifestyle apps designed to deploy "endless, intrusive full-screen interstitial video ads." Apps in the Vapor campaign bypassed the recent protections introduced in the latest...
The post Privacy Roundup: Week 12 of Year 2025 appeared first on Security Boulevard.
Guidance to help organizations reduce their attack surface, implement a stronger defense-in-depth security model, as well as more quickly detect and contain an intrusion by this ever-prevalent threat.
The post Prevent, Detect, Contain: A Guide Against Black Basta Affiliates’ Attacks appeared first on Security Boulevard.
What is the Cyber Resilience Act? The Cyber Resilience Act is a comprehensive regulatory framework introduced by the EU to enhance cybersecurity resilience. Its primary focus is on minimizing vulnerabilities in digital products and ensuring robust cybersecurity measures are implemented throughout their lifecycle. The act applies to both manufacturers and suppliers of software and hardware […]
The post EU Cyber Resilience Act: What You Need to Know appeared first on Centraleyes.
The post EU Cyber Resilience Act: What You Need to Know appeared first on Security Boulevard.
SOCs without AI aren't just behind the curve — they're fundamentally outmatched in the asymmetric battle against sophisticated threat actors.
The post Evaluating AI for Security Operations appeared first on Security Boulevard.
Paris, France, 24th March 2025, CyberNewsWire
The post Arsen Introduces AI-Powered Phishing Tests to Improve Social Engineering Resilience appeared first on Security Boulevard.
Deception is a core component of many cyberattacks, including phishing, scams, social engineering and disinformation campaigns.
The post Intro to Deceptionology: Why Falling for Scams is Human Nature appeared first on Security Boulevard.
Quantum computing’s ability to break today’s encryption may still be years away—but security leaders can’t afford to wait. Forrester’s The Future of Quantum Security makes it clear: the transition to quantum-safe cryptography must start now.
Related: Quantum standards come of … (more…)
The post SHARED INTEL Q&A: Forrester highlights why companies need to strive for ‘cryptoagility’– today first appeared on The Last Watchdog.
The post SHARED INTEL Q&A: Forrester highlights why companies need to strive for ‘cryptoagility’– today appeared first on Security Boulevard.
When security vulnerabilities appear in popular frameworks, they can affect thousands of websites overnight. That’s exactly what’s happening with a newly discovered vulnerability in Next.js – one of the most...
The post CVE-2025-29927 – Understanding the Next.js Middleware Vulnerability appeared first on Strobes Security.
The post CVE-2025-29927 – Understanding the Next.js Middleware Vulnerability appeared first on Security Boulevard.
