The Rising Threat of API Attacks: How to Secure Your APIs in 2025

API attacks are constantly on the rise, with a recent alarming study showing that 59% of organizations give…

Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – ​Read More

Newly Patched Windows Zero-Day Exploited for Two Years

Microsoft on Tuesday patched a zero-day vulnerability in the Windows Win32 kernel that has been exploited since March 2023.

The post Newly Patched Windows Zero-Day Exploited for Two Years appeared first on SecurityWeek.

SecurityWeek – ​Read More

March 2025 Patch Tuesday: Microsoft Fixes 57 Vulnerabilities, 7 Zero-Days

Microsoft’s March 2025 Patch Tuesday fixes six actively exploited zero-day vulnerabilities, including critical RCE and privilege escalation flaws. Learn how these vulnerabilities impact Windows systems and why immediate patching is essential.

Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – ​Read More

US Hasn’t Determined Who Was Behind Cyberattack That Caused Outage on Musk’s X

US officials have not determined who was behind an apparent cyberattack on the social media site X that limited access to the platform for thousands of users.

The post US Hasn’t Determined Who Was Behind Cyberattack That Caused Outage on Musk’s X appeared first on SecurityWeek.

SecurityWeek – ​Read More

ICS Patch Tuesday: Advisories Published by CISA, Schneider Electric, Siemens 

Industrial giants Siemens and Schneider Electric have released March 2025 Patch Tuesday ICS security advisories.

The post ICS Patch Tuesday: Advisories Published by CISA, Schneider Electric, Siemens  appeared first on SecurityWeek.

SecurityWeek – ​Read More

North Korean government hackers snuck spyware on Android app store

Cybersecurity firm Lookout found several samples of a North Korean spyware it calls KoSpy.

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More

Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks

Apple on Tuesday released a security update to address a zero-day flaw that it said has been exploited in “extremely sophisticated” attacks.
The vulnerability has been assigned the CVE identifier CVE-2025-24201 and is rooted in the WebKit web browser engine component.
It has been described as an out-of-bounds write issue that could allow an attacker to craft malicious web content such that it

The Hacker News – ​Read More

Tata Technologies’ data leaked by ransomware gang

A ransomware gang has leaked internal Tata Technologies data, a month after the company confirmed a ransomware attack.

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More

Are Threat Groups Belsen and ZeroSevenGroup Related?

Kela admits that its evidence for a connection between Belsen and ZeroSevenGroup is largely circumstantial, primarily based on styles.

The post Are Threat Groups Belsen and ZeroSevenGroup Related? appeared first on SecurityWeek.

SecurityWeek – ​Read More

Lazarus Group Hid Backdoor in Fake npm Packages in Latest Attack

Lazarus Group targets developers with malicious npm packages, stealing credentials, crypto, and installing backdoor. Stay alert to protect your projects.

Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News – ​Read More