ConnectWise to Rotate Code-Signing Certificates
The move is unrelated to a recent nation-state attack the vendor endured but stems from a report by a third-party researcher.
darkreading – Read More
Infostealer Ring Bust-up Takes Down 20,000 Malicious IPs
Interpol’s Operation Secure arrested more than 20 suspects across Vietnam, Sri Lanka, and Naru, and seized 117 command-and-control servers allegedly used to run widespread phishing, business email compromise, and other cyber scams.
darkreading – Read More
CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers
The US CISA reports critical vulnerabilities in SinoTrack GPS devices that could let attackers remotely control vehicles and track locations. Discover the vulnerabilities and essential steps to secure your device.
Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – Read More
Agentic AI Takes Over Gartner’s SRM Summit
Agentic AI was everywhere at Gartner’s Security & Risk Management Summit in Washington, DC, this year, as the AI security product engine chugs ahead at full speed.
darkreading – Read More
How Waymo Handles Footage From Events Like the LA Immigration Protests
Waymo driverless taxis capture troves of video footage in order to operate, but the company reveals very little about how much data is stored—and for how long.
Security Latest – Read More
US government’s vaccine website defaced with AI-generated content
The content of a vaccines information website owned by the U.S. Department of Health and Human Services was swapped with gay-themed spam.
Security News | TechCrunch – Read More
Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 Attacks
Former members tied to the Black Basta ransomware operation have been observed sticking to their tried-and-tested approach of email bombing and Microsoft Teams phishing to establish persistent access to target networks.
“Recently, attackers have introduced Python script execution alongside these techniques, using cURL requests to fetch and deploy malicious payloads,” ReliaQuest said in a report
The Hacker News – Read More
Google Bug Allowed Brute-Forcing of Any User Phone Number
The weakness in Google’s password-recovery page, discovered by a researcher called Brutecat, exposed private user contact information to attackers, opening the door to phishing, SIM-swapping, and other attacks.
darkreading – Read More
Securonix Acquires Threat Intelligence Firm ThreatQuotient
Cybersecurity heavyweight Securonix acquires ThreatQuotient to boost plans to build an all-in-one security operations stack.
The post Securonix Acquires Threat Intelligence Firm ThreatQuotient appeared first on SecurityWeek.
SecurityWeek – Read More