TECHZONE™

Laurie Anderson: Building an ARK | Starmus highlights https://www.welivesecurity.com/en/we-live-science/laurie-anderson-building-ark-starmus-highlights/ The pioneering multi-media artist reveals the creative process behind her stage show called ARK, which challenges audiences to reflect on some of the most pressing issues of our times

AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam, Bypassing CAPTCHA Protections https://thehackernews.com/2025/04/akirabot-targets-420000-sites-with.html Cybersecurity researchers have disclosed details of an artificial intelligence (AI) powered platform called AkiraBot that's used to spam website chats, comment sections, and contact forms to promote dubious search engine optimization (SEO) services such as Akira and ServicewrapGO. "AkiraBot has targeted more than 400,000 websites and successfully spammed at least 80,000 websites since September

Lovable AI Found Most Vulnerable to VibeScamming — Enabling Anyone to Build Live Scam Pages https://thehackernews.com/2025/04/lovable-ai-found-most-vulnerable-to.html Lovable, a generative artificial intelligence (AI) powered platform that allows for creating full-stack web applications using text-based prompts, has been found to be the most susceptible to jailbreak attacks, allowing novice and aspiring cybercrooks to set up lookalike credential harvesting pages. "As a purpose-built tool for creating and deploying web apps, its capabilities line up perfectly

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner https://thehackernews.com/2025/04/new-tcesb-malware-found-in-active.html A Chinese-affiliated threat actor known for its cyber-attacks in Asia has been observed exploiting a security flaw in security software from ESET to deliver a previously undocumented malware codenamed TCESB. "Previously unseen in ToddyCat attacks, [TCESB] is designed to stealthily execute payloads in circumvention of protection and monitoring tools installed on the device," Kaspersky said in an

Explosive Growth of Non-Human Identities Creating Massive Security Blind Spots https://thehackernews.com/2025/04/explosive-growth-of-non-human.html GitGuardian's State of Secrets Sprawl report for 2025 reveals the alarming scale of secrets exposure in modern software environments. Driving this is the rapid growth of non-human identities (NHIs), which have been outnumbering human users for years. We need to get ahead of it and prepare security measures and governance for these machine identities as they continue to be deployed, creating an

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware https://thehackernews.com/2025/04/pipemagic-trojan-exploits-windows-clfs.html Microsoft has revealed that a now-patched security flaw impacting the Windows Common Log File System (CLFS) was exploited as a zero-day in ransomware attacks aimed at a small number of targets. "The targets include organizations in the information technology (IT) and real estate sectors of the United States, the financial sector in Venezuela, a Spanish software company, and the retail sector in

CISA Warns of CentreStack's Hard-Coded MachineKey Vulnerability Enabling RCE Attacks https://thehackernews.com/2025/04/cisa-warns-of-centrestacks-hard-coded.html The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Gladinet CentreStack to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerability, tracked as CVE-2025-30406 (CVSS score: 9.0), concerns a case of a hard-coded cryptographic key that could be abused to achieve remote

Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS Vulnerability https://thehackernews.com/2025/04/microsoft-patches-126-flaws-including.html Microsoft has released security fixes to address a massive set of 126 flaws affecting its software products, including one vulnerability that it said has been actively exploited in the wild. Of the 126 vulnerabilities, 11 are rated Critical, 112 are rated Important, and two are rated Low in severity. Forty-nine of these vulnerabilities are classified as privilege escalation, 34 as remote code

Adobe Patches 11 Critical ColdFusion Flaws Amid 30 Total Vulnerabilities Discovered https://thehackernews.com/2025/04/adobe-patches-11-critical-coldfusion.html Adobe has released security updates to fix a fresh set of security flaws, including multiple critical-severity bugs in ColdFusion versions 2025, 2023 and 2021 that could result in arbitrary file read and code execution. Of the 30 flaws in the product, 11 are rated Critical in severity - CVE-2025-24446 (CVSS score: 9.1) - An improper input validation vulnerability that could result in an

Fortinet Urges FortiSwitch Upgrades to Patch Critical Admin Password Change Flaw https://thehackernews.com/2025/04/fortinet-urges-fortiswitch-upgrades-to.html Fortinet has released security updates to address a critical security flaw impacting FortiSwitch that could permit an attacker to make unauthorized password changes. The vulnerability, tracked as CVE-2024-48887, carries a CVSS score of 9.3 out of a maximum of 10.0. "An unverified password change vulnerability [CWE-620] in FortiSwitch GUI may allow a remote unauthenticated attacker to modify

Amazon EC2 SSM Agent Flaw Patched After Privilege Escalation via Path Traversal https://thehackernews.com/2025/04/amazon-ec2-ssm-agent-flaw-patched-after.html Cybersecurity researchers have disclosed details of a now-patched security flaw in the Amazon EC2 Simple Systems Manager (SSM) Agent that, if successfully exploited, could permit an attacker to achieve privilege escalation and code execution. The vulnerability could permit an attacker to create directories in unintended locations on the filesystem, execute arbitrary scripts with root privileges,

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings https://thehackernews.com/2025/04/cryptocurrency-miner-and-clipper.html Threat actors have been observed distributing malicious payloads such as cryptocurrency miner and clipper malware via SourceForge, a popular software hosting service, under the guise of cracked versions of legitimate applications like Microsoft Office. "One such project, officepackage, on the main website sourceforge.net, appears harmless enough, containing Microsoft Office add-ins copied from a

UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine https://thehackernews.com/2025/04/uac-0226-deploys-giftedcrook-stealer.html The Computer Emergency Response Team of Ukraine (CERT-UA) has revealed a new set of cyber attacks targeting Ukrainian institutions with information-stealing malware. The activity is aimed at military formations, law enforcement agencies, and local self-government bodies, particularly those located near Ukraine's eastern border, the agency said. The attacks involve distributing phishing emails

Agentic AI in the SOC - Dawn of Autonomous Alert Triage https://thehackernews.com/2025/04/agentic-ai-in-soc-dawn-of-autonomous.html Security Operations Centers (SOCs) today face unprecedented alert volumes and increasingly sophisticated threats. Triaging and investigating these alerts are costly, cumbersome, and increases analyst fatigue, burnout, and attrition. While artificial intelligence has emerged as a go-to solution, the term “AI” often blurs crucial distinctions. Not all AI is built equal, especially in the SOC. Many

CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation https://thehackernews.com/2025/04/cisa-adds-crushftp-vulnerability-to-kev.html A recently disclosed critical security flaw impacting CrushFTP has been added by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to its Known Exploited Vulnerabilities (KEV) catalog after reports emerged of active exploitation in the wild. The vulnerability is a case of authentication bypass that could permit an unauthenticated attacker to take over susceptible instances. It has

Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities https://thehackernews.com/2025/04/google-releases-android-update-to-patch.html Google has shipped patches for 62 vulnerabilities, two of which it said have been exploited in the wild. The two high-severity vulnerabilities are listed below - CVE-2024-53150 (CVSS score: 7.8) - An out-of-bounds flaw in the USB sub-component of Kernel that could result in information disclosure CVE-2024-53197 (CVSS score: 7.8) - A privilege escalation flaw in the USB sub-component of Kernel

CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks https://thehackernews.com/2025/04/cisa-and-fbi-warn-fast-flux-is-powering.html Cybersecurity agencies from Australia, Canada, New Zealand, and the United States have published a joint advisory about the risks associated with a technique called fast flux that has been adopted by threat actors to obscure a command-and-control (C2) channel. "'Fast flux' is a technique used to obfuscate the locations of malicious servers through rapidly changing Domain Name System (DNS)

⚡ Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Comeback and More https://thehackernews.com/2025/04/weekly-recap-vpn-exploits-oracles.html Today, every unpatched system, leaked password, and overlooked plugin is a doorway for attackers. Supply chains stretch deep into the code we trust, and malware hides not just in shady apps — but in job offers, hardware, and cloud services we rely on every day. Hackers don’t need sophisticated exploits anymore. Sometimes, your credentials and a little social engineering are enough. This week,

Security Theater: Vanity Metrics Keep You Busy - and Exposed https://thehackernews.com/2025/04/security-theater-vanity-metrics-keep.html After more than 25 years of mitigating risks, ensuring compliance, and building robust security programs for Fortune 500 companies, I’ve learned that looking busy isn’t the same as being secure.  It’s an easy trap for busy cybersecurity leaders to fall into. We rely on metrics that tell a story of the tremendous efforts we’re expending - how many vulnerabilities we patched, how fast we

PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks https://thehackernews.com/2025/04/poisonseed-exploits-crm-accounts-to.html A malicious campaign dubbed PoisonSeed is leveraging compromised credentials associated with customer relationship management (CRM) tools and bulk email providers to send spam messages containing cryptocurrency seed phrases in an attempt to drain victims' digital wallets. "Recipients of the bulk spam are targeted with a cryptocurrency seed phrase poisoning attack," Silent Push said in an