Category: Security News

The modern Security Operations Center (SOC) faces an ever-growing tide of data, fueled by the explosion of connected devices, cloud migration, and increasingly sophisticated cyberattacks while the growing impact of…
The post The Evolution of SOC: Harnessing Data, AI and Automation appeared first on Cyber Defense Magazine.

The Russian state-sponsored threat actor known as APT29 has been linked to an advanced phishing campaign that’s targeting diplomatic entities across Europe with a new variant of WINELOADER and a previously unreported malware loader codenamed GRAPELOADER.
“While the improved WINELOADER variant is still a modular backdoor used in later stages, GRAPELOADER is a newly observed initial-stage tool

Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities.
The packages in question are listed below –

node-telegram-utils (132 downloads)
node-telegram-bots-api (82 downloads)
node-telegram-util (73 downloads)

According to supply chain

With incidences of ransomware on the rise, nobody should even be thinking that an attack is something that couldn’t happen to them, let alone speak those words into existence. And…
The post Have The Last Word Against Ransomware with Immutable Backup appeared first on Cyber Defense Magazine.

1.1 Emerging Cybersecurity Technologies As we move into 2025, AI and machine learning are expected to play an even larger role in cybersecurity. These technologies will be used to enhance…
The post Multi-channel Secure Communication appeared first on Cyber Defense Magazine.

ASUS has disclosed a critical security flaw impacting routers with AiCloud enabled that could permit remote attackers to perform unauthorized execution of functions on susceptible devices.
The vulnerability, tracked as CVE-2025-2492, has a CVSS score of 9.2 out of a maximum of 10.0.

“An improper authentication control vulnerability exists in certain ASUS router firmware series,”

Drupal 11.x-dev – Full Path Disclosure

FoxCMS 1.2.5 – Remote Code Execution (RCE)

As artificial intelligence (AI) continues to revolutionize the business landscape, midsized organizations find themselves at a crossroads, balancing the transformative potential of AI against the heightened risks it introduces. While…
The post Cyber Risks Associated with Adoption of Generative AI Tools appeared first on Cyber Defense Magazine.

Cybersecurity researchers are warning of a “widespread and ongoing” SMS phishing campaign that’s been targeting toll road users in the United States for financial theft since mid-October 2024.
“The toll road smishing attacks are being carried out by multiple financially motivated threat actors using the smishing kit developed by ‘Wang Duo Yu,'” Cisco Talos researchers Azim Khodjibaev, Chetan