TECHZONE™

AI in Cybersecurity: What's Effective and What’s Not – Insights from 200 Experts https://thehackernews.com/2025/01/ai-in-cybersecurity-whats-effective-and.html Curious about the buzz around AI in cybersecurity? Wonder if it's just a shiny new toy in the tech world or a serious game changer? Let's unpack this together in a not-to-be-missed webinar that goes beyond the hype to explore the real impact of AI on cybersecurity. Join Ravid Circus, a seasoned pro in cybersecurity and AI, as we peel back the layers of AI in cybersecurity through a revealing

New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits https://thehackernews.com/2025/01/new-slap-flop-attacks-expose-apple-m.html A team of security researchers from Georgia Institute of Technology and Ruhr University Bochum has demonstrated two new side-channel attacks targeting Apple silicon that could be exploited to leak sensitive information from web browsers like Safari and Google Chrome. The attacks have been codenamed Data Speculation Attacks via Load Address Prediction on Apple Silicon (SLAP) and Breaking the

The Old Ways of Vendor Risk Management Are No Longer Good Enough https://www.darkreading.com/vulnerabilities-threats/old-ways-vendor-risk-management-no-longer-good-enough

7 Tips for Strategically Saying "No" in Cybersecurity https://www.darkreading.com/cybersecurity-operations/7-tips-for-strategically-saying-no-in-cybersecurity

CrowdStrike Highlights Magnitude of Insider Risk https://www.darkreading.com/insider-threats/crowdstrike-highlights-magnitude-of-insider-risk

How Interlock Ransomware Infects Healthcare Organizations https://thehackernews.com/2025/01/how-interlock-ransomware-infects.html Ransomware attacks have reached an unprecedented scale in the healthcare sector, exposing vulnerabilities that put millions at risk. Recently, UnitedHealth revealed that 190 million Americans had their personal and healthcare data stolen during the Change Healthcare ransomware attack, a figure that nearly doubles the previously disclosed total.  This breach shows just how deeply ransomware

Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution https://thehackernews.com/2025/01/critical-cacti-security-flaw-cve-2025.html A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attacker to achieve remote code execution on susceptible instances. The flaw, tracked as CVE-2025-22604, carries a CVSS score of 9.1 out of a maximum of 10.0. "Due to a flaw in the multi-line SNMP result parser, authenticated users can inject

UAC-0063 Expands Cyber Attacks to European Embassies Using Stolen Documents https://thehackernews.com/2025/01/uac-0063-expands-cyber-attacks-to.html The advanced persistent threat (APT) group known as UAC-0063 has been observed leveraging legitimate documents obtained by infiltrating one victim to attack another target with the goal of delivering a known malware dubbed HATVIBE. "This research focuses on completing the picture of UAC-0063's operations, particularly documenting their expansion beyond their initial focus on Central Asia,

Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer https://thehackernews.com/2025/01/broadcom-warns-of-high-severity-sql.html Broadcom has alerted of a high-severity security flaw in VMware Avi Load Balancer that could be weaponized by malicious actors to gain entrenched database access. The vulnerability, tracked as CVE-2025-22217 (CVSS score: 8.6), has been described as an unauthenticated blind SQL injection. "A malicious user with network access may be able to use specially crafted SQL queries to gain database

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html Cybersecurity researchers are warning that a critical zero-day vulnerability impacting Zyxel CPE Series devices is seeing active exploitation attempts in the wild. "Attackers can leverage this vulnerability to execute arbitrary commands on affected devices, leading to complete system compromise, data exfiltration, or network infiltration," GreyNoise researcher Glenn Thorpe said in an alert

Lynx Ransomware Group 'Industrializes' Cybercrime With Affiliates https://www.darkreading.com/threat-intelligence/lynx-raas-group-industrializes-cybercrime-with-affiliate-operations

OAuth Flaw Exposed Millions of Airline Users to Account Takeovers https://www.darkreading.com/application-security/oauth-flaw-exposed-millions-airline-users-account-takeovers

Phishing Campaign Baits Hook With Malicious Amazon PDFs https://www.darkreading.com/cyberattacks-data-breaches/phishing-campaign-malicious-amazon-pdfs

Super Bowl LIX Could Be a Magnet for Cyberattacks https://www.darkreading.com/endpoint-security/super-bowl-lix-magnet-cyberattacks

Cryptographic Agility's Legislative Possibilities & Business Benefits https://www.darkreading.com/vulnerabilities-threats/cryptographic-agility-legislative-possibilities-benefits

Actively Exploited Fortinet Zero-Day Gives Attackers Super-Admin Privileges https://www.darkreading.com/cloud-security/actively-exploited-fortinet-zero-day-attackers-super-admin-privileges

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks https://thehackernews.com/2025/01/purecrypter-deploys-agent-tesla-and-new.html A financially motivated threat actor has been linked to an ongoing phishing email campaign that has been ongoing since at least July 2024 specifically targeting users in Poland and Germany. The attacks have led to the deployment of various payloads, such as Agent Tesla, Snake Keylogger, and a previously undocumented backdoor dubbed TorNet that's delivered by means of PureCrypter. TorNet is so

OAuth Redirect Flaw in Airline Travel Integration Exposes Millions to Account Hijacking https://thehackernews.com/2025/01/oauth-redirect-flaw-in-airline-travel.html Cybersecurity researchers have disclosed details of a now-patched account takeover vulnerability affecting a popular online travel service for hotel and car rentals. "By exploiting this flaw, attackers can gain unauthorized access to any user’s account within the system, effectively allowing them to impersonate the victim and perform an array of actions on their behalf – including

AI SOC Analysts: Propelling SecOps into the future https://thehackernews.com/2025/01/ai-soc-analysts-propelling-secops-into.html Triaging and investigating alerts is central to security operations. As SOC teams strive to keep up with ever-increasing alert volumes and complexity, modernizing SOC automation strategies with AI has emerged as a critical solution. This blog explores how an AI SOC Analyst transforms alert management, addressing key SOC challenges while enabling faster investigations and responses. Security

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations https://thehackernews.com/2025/01/ransomware-targets-esxi-systems-via.html Cybersecurity researchers have found that ransomware attacks targeting ESXi systems are also leveraging the access to repurpose the appliances as a conduit to tunnel traffic to command-and-control (C2) infrastructure and stay under the radar. "ESXi appliances, which are unmonitored, are increasingly exploited as a persistence mechanism and gateway to access corporate networks widely," Sygnia