TECHZONE™

Feds Sanction Russian Hosting Provider for Supporting LockBit Attacks https://www.darkreading.com/cyber-risk/feds-sanction-russian-hosting-provider-lockbit-attacks

Microsoft: Russia's Sandworm APT Exploits Edge Bugs Globally https://www.darkreading.com/threat-intelligence/microsoft-russian-sandworm-apt-exploits-edge-bugs-globally

Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ Countries https://thehackernews.com/2025/02/microsoft-uncovers-sandworm-subgroups.html A subgroup within the infamous Russian state-sponsored hacking group known as Sandworm has been attributed to a multi-year initial access operation dubbed BadPilot that stretched across the globe. "This subgroup has conducted globally diverse compromises of Internet-facing infrastructure to enable Seashell Blizzard to persist on high-value targets and support tailored network operations," the

Researchers Find New Exploit Bypassing Patched NVIDIA Container Toolkit Vulnerability https://thehackernews.com/2025/02/researchers-find-new-exploit-bypassing.html Cybersecurity researchers have discovered a bypass for a now-patched security vulnerability in the NVIDIA Container Toolkit that could be exploited to break out of a container's isolation protections and gain complete access to the underlying host. The new vulnerability is being tracked as CVE-2025-23359 (CVSS score: 8.3). It affects the following versions - NVIDIA Container Toolkit (All

How to Steer AI Adoption: A CISO Guide https://thehackernews.com/2025/02/how-to-steer-ai-adoption-ciso-guide.html CISOs are finding themselves more involved in AI teams, often leading the cross-functional effort and AI strategy. But there aren’t many resources to guide them on what their role should look like or what they should bring to these meetings.  We’ve pulled together a framework for security leaders to help push AI teams and committees further in their AI adoption—providing them with the

Is AI a Friend or Foe of Healthcare Security? https://www.darkreading.com/vulnerabilities-threats/is-ai-friend-foe-healthcare-security

North Korean Hackers Exploit PowerShell Trick to Hijack Devices in New Cyberattack https://thehackernews.com/2025/02/north-korean-hackers-exploit-powershell.html The North Korea-linked threat actor known as Kimsuky has been observed using a new tactic that involves deceiving targets into running PowerShell as an administrator and then instructing them to paste and run malicious code provided by them. "To execute this tactic, the threat actor masquerades as a South Korean government official and over time builds rapport with a target before sending a

Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation https://thehackernews.com/2025/02/microsofts-patch-tuesday-fixes-63-flaws.html Microsoft on Tuesday released fixes for 63 security flaws impacting its software products, including two vulnerabilities that it said has come under active exploitation in the wild. Of the 63 vulnerabilities, three are rated Critical, 57 are rated Important, one is rated Moderate, and two are rated Low in severity. This is aside from the 23 flaws Microsoft addressed in its Chromium-based Edge

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure – Update Now https://thehackernews.com/2025/02/ivanti-patches-critical-flaws-in.html Ivanti has released security updates to address multiple security flaws impacting Connect Secure (ICS), Policy Secure (IPS), and Cloud Services Application (CSA) that could be exploited to achieve arbitrary code execution. The list of vulnerabilities is below - CVE-2024-38657 (CVSS score: 9.1) - External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy

India's Cybercrime Problems Grow as Nation Digitizes https://www.darkreading.com/cyber-risk/indias-cybercrime-problems-nation-digitizes

Microsoft's February Patch a Lighter Lift Than January's https://www.darkreading.com/application-security/microsofts-february-patch-lighter-lift-januarys

Apple Releases Urgent Patch for USB Vulnerability https://www.darkreading.com/endpoint-security/apple-releases-urgent-patch-usb-vulnerability

CISA Places Election Security Staffers on Leave https://www.darkreading.com/cyber-risk/cisa-election-security-staffers-on-leave

Data Leaks Happen Most Often in These States — Here's Why https://www.darkreading.com/cyber-risk/business-cybersecurity-weakest-states

Salt Typhoon's Impact on the US & Beyond https://www.darkreading.com/cyberattacks-data-breaches/salt-typhoons-impact-us-beyond

Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification https://thehackernews.com/2025/02/google-confirms-android-safetycore.html Google has stepped in to clarify that a newly introduced Android System SafetyCore app does not perform any client-side scanning of content. "Android provides many on-device protections that safeguard users against threats like malware, messaging spam and abuse protections, and phone scam protections, while preserving user privacy and keeping users in control of their data," a spokesperson for

DeepSeek AI Fails Multiple Security Tests, Raising Red Flag for Businesses https://www.darkreading.com/cyber-risk/deepseek-fails-multiple-security-tests-business-use

4 Ways to Keep MFA From Becoming too Much of a Good Thing https://thehackernews.com/2025/02/4-ways-to-keep-mfa-from-becoming-too.html Multi-factor authentication (MFA) has quickly become the standard for securing business accounts. Once a niche security measure, adoption is on the rise across industries. But while it’s undeniably effective at keeping bad actors out, the implementation of MFA solutions can be a tangled mess of competing designs and ideas. For businesses and employees, the reality is that MFA sometimes feels

Ransomware Groups Made Less Money in 2024 https://www.darkreading.com/cybersecurity-operations/ransomware-groups-made-less-money-in-2024

Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions https://thehackernews.com/2025/02/progress-software-patches-high-severity.html Progress Software has addressed multiple high-severity security flaws in its LoadMaster software that could be exploited by malicious actors to execute arbitrary system commands or download any file from the system. Kemp LoadMaster is a high-performance application delivery controller (ADC) and load balancer that provides availability, scalability, performance, and security for business-critical