US government’s vaccine website defaced with AI-generated content
The content of a vaccines information website owned by the U.S. Department of Health and Human Services was swapped with gay-themed spam.
Security News | TechCrunch – Read More
Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 Attacks
Former members tied to the Black Basta ransomware operation have been observed sticking to their tried-and-tested approach of email bombing and Microsoft Teams phishing to establish persistent access to target networks.
“Recently, attackers have introduced Python script execution alongside these techniques, using cURL requests to fetch and deploy malicious payloads,” ReliaQuest said in a report
The Hacker News – Read More
Google Bug Allowed Brute-Forcing of Any User Phone Number
The weakness in Google’s password-recovery page, discovered by a researcher called Brutecat, exposed private user contact information to attackers, opening the door to phishing, SIM-swapping, and other attacks.
darkreading – Read More
Securonix Acquires Threat Intelligence Firm ThreatQuotient
Cybersecurity heavyweight Securonix acquires ThreatQuotient to boost plans to build an all-in-one security operations stack.
The post Securonix Acquires Threat Intelligence Firm ThreatQuotient appeared first on SecurityWeek.
SecurityWeek – Read More
Dozens arrested across Asia in global infostealer malware crackdown
A global law enforcement crackdown on information-stealing malware led to the arrest of 32 suspects and the dismantling of more than 20,000 malicious IP addresses and domains linked to cybercrime.
The Record from Recorded Future News – Read More
Singapore leads multinational operation to shutter scam centers tied to $225 million in thefts
Nearly 2,000 people were arrested and millions of dollars in illicit funds were seized in an operation coordinated by Singapore police against Asian scam operations.
The Record from Recorded Future News – Read More
Maze Banks $25M to Tackle Cloud Security with AI Agents
Maze and its investors are betting on finding profits in software that uses AI-powered agents to automate critical parts of the process.
The post Maze Banks $25M to Tackle Cloud Security with AI Agents appeared first on SecurityWeek.
SecurityWeek – Read More
Flaw in Industrial Computer Maker’s UEFI Apps Enables Secure Boot Bypass on Many Devices
Vulnerable DTResearch UEFI firmware applications can be used in BYOVD attacks to bypass Secure Boot.
The post Flaw in Industrial Computer Maker’s UEFI Apps Enables Secure Boot Bypass on Many Devices appeared first on SecurityWeek.
SecurityWeek – Read More
Install this Windows patch ASAP before bootkit malware takes over your PC – here’s how
The flaw is able to skirt past your usual security protection and evade detection, but Microsoft has a patch.
Latest stories for ZDNET in Security – Read More