SecurityWeek Briefing.

Top cybersecurity, cyber espionage, and cyber crime stories from "SecurityWeek Briefing."

Views expressed in this cybersecurity update are those of the reporters and correspondents.  Accessed on 08 February 2025, 1539 UTC.

Content and Source:  https://www.securityweek.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

84K followers49 articles per week#security#tech

46

Most popular

Hacker Conversations: David Kennedy – an Atypical Typical Hacker

by Kevin Townsend / 3d

David Kennedy is a hacker. There is no doubt about that. He has qualities common among hackers, but also many differences. The post appeared first on SecurityWeek .

Hacker Who Targeted NATO, US Army Arrested in Spain

Spanish hacker arrested for NATO attacks

•

by Eduard Kovacs / 2d

Spanish authorities have arrested an individual who allegedly hacked several high-profile organizations, including NATO and the US army. The post appeared first on SecurityWeek .

430,000 Impacted by Data Breaches at New York, Pennsylvania Healthcare Organizations

by Ionut Arghire / 1d

University Diagnostic Medical Imaging and Allegheny Health Network have disclosed data breaches impacting approximately 430,000 patients. The post appeared first on SecurityWeek .

Yesterday

ThreatMate Raises $3.2 Million for Attack Surface Management Platform

by Ionut Arghire / 22h

ThreatMate has raised $3.2 million in seed funding for its AI-powered attack surface management solution for MSPs. The post appeared first on SecurityWeek .

In Other News: Cybersecurity Salaries, NanoLock Collapse, NSO Transparency Report

by SecurityWeek News / 1d

Noteworthy stories that might have slipped under the radar: NanoLock Security ceases operations, NSO publishes transparency report, cybersecurity salaries data. The post appeared first on SecurityWeek .

Information of 883,000 Stolen in Crippling Attack on Hospital Sisters Health System

Impact (Enterprise TA0040)

•

by Ionut Arghire / 1d

•

HSHS appoints new leadership amid cyberattack

Hospital Sisters Health System says the personal information of 883,000 individuals was compromised in a 2023 crippling cyberattack. The post appeared first on SecurityWeek .

UK Engineering Giant IMI Hit by Cyberattack

2 TTPs

•

by Ionut Arghire / 1d

•

IMI responds to cyber attack

UK engineering firm IMI says it suffered a cyberattack that resulted in unauthorized access to some of its systems. The post appeared first on SecurityWeek .

Ransomware Payments Dropped to $813 Million in 2024

Ransomware payments drop 35%

•

by Eduard Kovacs / 1d

An analysis by Chainalysis shows that ransomware payments dropped to $813 million in 2024, from $1.25 billion in 2023. The post appeared first on SecurityWeek .

Feb 6, 2025

Trimble Cityworks Customers Warned of Zero-Day Exploitation

Execution (Enterprise TA0002)

•

by Eduard Kovacs / 1d

•

CVE-2025-0994

Trimble Cityworks is affected by a zero-day vulnerability that has been exploited in attacks involving the delivery of malware. The post appeared first on SecurityWeek .

House Lawmakers Push to Ban AI App DeepSeek From US Government Devices

Australia bans DeepSeek AI app

•

by Associated Press / 1d

A bipartisan duo in the the U.S. House is proposing legislation to ban the Chinese artificial intelligence app DeepSeek from federal devices. The post appeared first on SecurityWeek .

1,000 Apps Used in Malicious Campaign Targeting Android Users in India

Malicious apps target Android users

•

by Ionut Arghire / 1d

Zimperium warns that threat actors have stolen the information of tens of thousands of Android users in India using over 1,000 malicious applications. The post appeared first on SecurityWeek .

Astra, Invary Raise Millions for AI-Powered Pentesting, Runtime Security

Astra Security raises 2.7M$ funding

•

by Ionut Arghire / 2d

Astra Security and Invary have received new funding to fuel development of their vulnerability scanning and runtime security solutions. The post appeared first on SecurityWeek .

Five Eyes Agencies Release Guidance on Securing Edge Devices

2 TTPs

•

by Ionut Arghire / 2d

Five Eyes cybersecurity agencies have released guidance on securing edge devices against increasing threats. The post appeared first on SecurityWeek .

Security Teams Pay the Price: The Unfair Reality of Cyber Incidents

by Joshua Goldfarb / 2d

The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the inevitable. The post appeared first on SecurityWeek .

Cisco Patches Critical Vulnerabilities in Enterprise Security Product

5 TTPs

•

by Ionut Arghire / 2d

Critical vulnerabilities in Cisco Identity Services Engine could lead to elevation of privileges and system configuration modifications. The post appeared first on SecurityWeek .

Fake DeepSeek Sites Used for Credential Phishing, Crypto Theft, Scams

IoC > 1 domain

•

by Eduard Kovacs / 2d

•

6 TTPs

Researchers see dozens of fake DeepSeek websites used for credential phishing, cryptocurrency theft, and scams. The post appeared first on SecurityWeek .

7AI Launches With $36 Million in Seed Funding for Agentic Security Platform

7AI launches agentic security platform

•

by Eduard Kovacs / 2d

7AI has launched an agentic security platform, which uses AI agents to handle repetitive tasks. The post appeared first on SecurityWeek .

Feb 5, 2025

Semgrep Raises $100M for AI-Powered Code Security Platform

Semgrep raises 100M Series D

•

by SecurityWeek News / 2d

San Francisco application security startup raises $100 million in a Series D funding round led by Menlo Ventures. The post appeared first on SecurityWeek .

Researchers Link DeepSeek’s Blockbuster Chatbot to Chinese Telecom Banned From Doing Business in US

DeepSeek disrupts AI market dynamics

•

by Associated Press / 2d

DeepSeek has computer code that could send some user login information to China Mobile. The post appeared first on SecurityWeek .

How Agentic AI will be Weaponized for Social Engineering Attacks

by Stu Sjouwerman / 2d

With each passing year, social engineering attacks are becoming bigger and bolder thanks to rapid advancements in artificial intelligence. The post appeared first on SecurityWeek .

Cyber Insights 2025: OT Security

by Kevin Townsend / 3d

Just as OT technology differs from IT technology, the threats, likely adversaries, and potential harm also differ. The post appeared first on SecurityWeek .

Cybersecurity M&A Roundup: 45 Deals Announced in January 2025

by Eduard Kovacs / 3d

A significant number of cybersecurity-related merger and acquisition (M&A) deals announced in January 2025. The post appeared first on SecurityWeek .

Riot Raises $30 Million for Employee Cybersecurity Solution

Riot raises 30M for cybersecurity

•

by Ionut Arghire / 3d

Riot has raised $30 million in Series B funding for a platform that helps employees improve their cybersecurity posture. The post appeared first on SecurityWeek .

Abandoned Amazon S3 Buckets Enabled Attacks Against Governments, Big Firms

2 TTPs

•

by Eduard Kovacs / 3d

•

Abandoned S3 buckets pose security risks

150 abandoned Amazon S3 buckets could have been leveraged to deliver malware or backdoors to governments and Fortune companies. The post appeared first on SecurityWeek .

Russian Hackers Exploited 7-Zip Zero-Day Against Ukraine

5 TTPs

•

by Ionut Arghire / 3d

•

CVE-2025-0411

Russian threat groups have been observed exploiting a zero-day vulnerability in 7-Zip against Ukrainian entities. The post appeared first on SecurityWeek .

Chrome 133, Firefox 135 Patch High-Severity Vulnerabilities

4 TTPs

•

by Ionut Arghire / 3d

Chrome 133 and Firefox 135 were released with patches for multiple high-severity memory safety vulnerabilities. The post appeared first on SecurityWeek .

CISA Issues Exploitation Warning for .NET Vulnerability

2 TTPs

•

by Eduard Kovacs / 3d

CISA has added CVE-2024-29059, a flaw affecting Microsoft .NET, to its Known Exploited Vulnerabilities catalog. The post appeared first on SecurityWeek .

Zyxel Issues ‘No Patch’ Warning for Exploited Zero-Days

7 TTPs

•

by Ionut Arghire / 3d

Multiple Zyxel legacy DSL CPE products are affected by exploited zero-day vulnerabilities that will not be patched. The post appeared first on SecurityWeek .

Feb 4, 2025

Sophos Completes Acquisition of Secureworks

Sophos acquires Secureworks for $859M

•

by SecurityWeek News / 3d

Sophos has completed its $859 million all-cash acquisition of SecureWorks. The post appeared first on SecurityWeek .

Exploitation of Over 700 Vulnerabilities Came to Light in 2024

768 CVEs exploited in 2024

•

by Ionut Arghire / 3d

The number of vulnerabilities first reported as exploited surged last year amid a decrease in zero-day reports. The post appeared first on SecurityWeek .

Webinar Today: Defenders on the Frontline – Incident Response and Threat Intel Under the Microscope

by SecurityWeek News / 3d

Join this panel of CISOs and threat-intel professionals for a deep-dive on aligning incident response and threat intelligence with broader business objectives. The post appeared first on SecurityWeek .

22 New Mac Malware Families Seen in 2024

7 TTPs

•

by Eduard Kovacs / 3d

Nearly two dozen new macOS malware families were observed in 2024, including stealers, backdoors, downloaders and ransomware. The post appeared first on SecurityWeek .

AMD Patches CPU Vulnerability That Could Break Confidential Computing Protections

CVE-2024-56161

•

by Ionut Arghire / 4d

AMD has released patches for a microprocessor vulnerability found by Google that could allow an attacker to load malicious microcode. The post appeared first on SecurityWeek .

Personal Information Compromised in GrubHub Data Breach

GrubHub data breach affects users

•

by Eduard Kovacs / 4d

Food delivery firm GrubHub has disclosed a data breach impacting the personal information of drivers and customers. The post appeared first on SecurityWeek .

Cyber Insights 2025: The CISO Outlook

by Kevin Townsend / 4d

There has never been a single job description for the CISO – the role depends upon each company, its maturity, its size and resources, and the risk tolerance of boards. The post appeared first on SecurityWeek .

Developers Targeted With Malware Disguised as DeepSeek Package

2 TTPs

•

by Eduard Kovacs / 4d

•

Malware disguises as DeepSeek tools

Python developers looking to integrate DeepSeek into their projects were targeted with malicious packages delivered through PyPI. The post appeared first on SecurityWeek .

Contec Patient Monitors Not Malicious, but Still Pose Big Risk to Healthcare

4 TTPs

•

by Ionut Arghire / 4d

The Contec CMS8000 patient monitors do not contain a malicious backdoor but are plagued by an insecure and vulnerable design. The post appeared first on SecurityWeek .

Vulnerability Patched in Android Possibly Exploited by Forensic Tools

by Ionut Arghire / 4d

The February 2025 Android patches resolve 46 vulnerabilities, including a Linux kernel bug that has been exploited in the wild. The post appeared first on SecurityWeek .