SecurityWeek Briefing.

"China admitted to Volt Typhoon cyberattacks on US critical infrastructure."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 April 2025, 1346 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

86K followers43 articles per week

#security#tech

53

Most popular

China Admitted to Volt Typhoon Cyberattacks on US Critical Infrastructure: Report

China admits Volt Typhoon cyberattacks

•

83by Eduard Kovacs / 4d

In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure. The post appeared first on SecurityWeek .

China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games

Harbin accuses US of cyber attacks

•

by Associated Press / 2h

China accuses three alleged U.S. NSA operatives of cyberattacks targeting critical infrastructure and the Asian Games in Harbin. The post appeared first on SecurityWeek .

Blockchain, Quantum, and IoT Firms Unite to Secure Satellite Communications Against Quantum Threats

Quantum-secure satellite communication alliance

•

by Kevin Townsend / 2h

Partisia, Squareroot8, and NuSpace join forces in a global partnership to advance quantum-safe communications. The post appeared first on SecurityWeek .

Today

NetRise Raises $10 Million to Grow Software Supply Chain Security Platform

by Ionut Arghire / 3h

The funding round brings the total amount raised by the NetRise to roughly $25 million. The post appeared first on SecurityWeek .

Hertz Discloses Data Breach Linked to Cleo Hack

3 TTPs

•

by Ionut Arghire / 3h

Customers of the Hertz, Thrifty, and Dollar brands had their personal information stolen as a result of the Cleo hack last year. The post appeared first on SecurityWeek .

CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe

by Kevin Townsend / 3h

Van Horenbeeck's career spans some of the biggest companies in tech: Verizon, Microsoft, Google, Amazon, Zendesk, and now SVP and CSO at Adobe. The post appeared first on SecurityWeek .

Yesterday

Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities

8 TTPs

•

by Ryan Naraine / 20h

The flaw, tagged as CVE-2025-30406, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog in early April. The post appeared first on SecurityWeek .

Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed

4 TTPs

•

by Ryan Naraine / 20h

Trend Micro researchers flagging problems with Nvidia’s patch for a critical, code execution vulnerability in the Nvidia Container Toolkit. The post appeared first on SecurityWeek .

Threat Actor Allegedly Selling Fortinet Firewall Zero-Day Exploit

3 TTPs

•

by Ionut Arghire / 23h

A threat actor claims to offer a zero-day exploit for an unauthenticated remote code execution vulnerability in Fortinet firewalls. The post appeared first on SecurityWeek .

New ‘ResolverRAT’ Targeting Healthcare, Pharmaceutical Organizations

17 TTPs

•

by Ionut Arghire / 1d

Organizations in the healthcare and pharmaceutical sectors have been targeted with ResolverRAT, a new malware family with advanced capabilities. The post appeared first on SecurityWeek .

AI Hallucinations Create a New Software Supply Chain Threat

UTSA studies AI risks in coding

•

by Ionut Arghire / 1d

Researchers uncover new software supply chain threat from LLM-generated package hallucinations. The post appeared first on SecurityWeek .

Malicious NPM Packages Target Cryptocurrency, PayPal Users

4 TTPs

•

by Ionut Arghire / 1d

•

Malicious NPM packages target PayPal

Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers. The post appeared first on SecurityWeek .

Apr 11, 2025

Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle

5 TTPs

•

by Ryan Naraine / 3d

The CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices. The post appeared first on SecurityWeek .

Hackers Breach Morocco’s Social Security Database

CNSS denies accuracy of leaked documents

•

by Associated Press / 3d

The hackers who posted the documents on Telegram said the attack was in response to alleged Moroccan “harassment” of Algeria on social media platforms. The post appeared first on SecurityWeek .

Vulnerability in OttoKit WordPress Plugin Exploited in the Wild

3 TTPs

•

by Ionut Arghire / 4d

•

CVE-2025-3102 & 1 other

A vulnerability in the OttoKit WordPress plugin with over 100,000 active installations has been exploited in the wild. The post appeared first on SecurityWeek .

In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions

6 TTPs

•

by SecurityWeek News / 4d

Noteworthy stories that might have slipped under the radar: Scattered Spider still active despite arrests, hacker known as EncryptHub unmasked, Rydox admins extradited to US. The post appeared first on SecurityWeek .

SonicWall Patches High-Severity Vulnerability in NetExtender

5 TTPs

•

by Ionut Arghire / 4d

SonicWall has released fixes for three vulnerabilities in NetExtender for Windows, including a high-severity bug. The post appeared first on SecurityWeek .

1.6 Million People Impacted by Data Breach at Laboratory Services Cooperative

3 TTPs

•

by Ionut Arghire / 4d

Laboratory Services Cooperative says the personal and medical information of 1.6 million was stolen in an October 2024 data breach. The post appeared first on SecurityWeek .

Rising Tides: Bryson Bort on Cyber Entrepreneurship and the Needed Focus on Critical Infrastructure

by Jennifer Leggio / 4d

Very few people in the cybersecurity industry do not know, or know of, Bryson Bort, CEO/Founder of SCYTHE and the co-founder of ICS Village. The post appeared first on SecurityWeek .

Apr 10, 2025

Europol Targets Customers of Smokeloader Pay-Per-Install Botnet

Europol arrests Smokeloader botnet clients

•

by Ionut Arghire / 4d

Law enforcement agencies in multiple countries have announced the arrests of users of the malicious Smokeloader botnet. The post appeared first on SecurityWeek .

Trump Revokes Security Clearance for Ex-CISA Director Chris Krebs

by Ryan Naraine / 4d

Trump orders a termination of any active security clearances held by Krebs and a suspension of clearances held by individuals at SentinelOne. The post appeared first on SecurityWeek .

Juniper Networks Patches Dozens of Junos Vulnerabilities

Process Injection (Enterprise T1055)

•

by Ionut Arghire / 5d

•

CVE-2025-21591 & 1 other

Juniper Networks has patched two dozen vulnerabilities in Junos OS and Junos OS Evolved, and dozens of flaws in Junos Space third-party dependencies. The post appeared first on SecurityWeek .

Study Identifies 20 Most Vulnerable Connected Devices of 2025

5 TTPs

•

by Ionut Arghire / 5d

Routers are the riskiest devices in enterprise networks as they contain the most critical vulnerabilities, a new Forescout report shows. The post appeared first on SecurityWeek .

GitHub Announces General Availability of Security Campaigns

GitHub launches security campaigns

•

by Eduard Kovacs / 5d

GitHub security campaigns make it easier for developers and security teams to collaborate on fixing vulnerabilities in their applications. The post appeared first on SecurityWeek .

Nissan Leaf Hacked for Remote Spying, Physical Takeover

Nissan Leaf remote control vulnerability

•

by Eduard Kovacs / 5d

Researchers find vulnerabilities that can be exploited to remotely take control of a Nissan Leaf’s functions, including physical controls. The post appeared first on SecurityWeek .

Operations of Sensor Giant Sensata Disrupted by Ransomware Attack

3 TTPs

•

by Eduard Kovacs / 5d

•

Sensata experiences ransomware incident

Sensata has informed the SEC that shipping, manufacturing and other operations have been impacted by a ransomware attack. The post appeared first on SecurityWeek .

Apr 9, 2025

‘AkiraBot’ Spammed 80,000 Websites With AI-Generated Messages

4 TTPs

•

by Ionut Arghire / 5d

•

AkiraBot spams websites using AI

CAPTCHA-evading Python framework AkiraBot has spammed over 80,000 websites with AI-generated spam messages. The post appeared first on SecurityWeek .

Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools

Google launches AI agent marketplace

•

by Ryan Naraine / 5d

Google plans to unleash automated AI agents into overtaxed SOCs to reduce the manual workload for cybersecurity investigators. The post appeared first on SecurityWeek .

Groucho’s Wit, Cloud Complexity, and the Case for Consistent Security Policy

by Joshua Goldfarb / 5d

The greatest security policies in the world are useless if enterprises don’t have a reasonable, consistent, and reliable way to implement them. The post appeared first on SecurityWeek .

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows

AI surpasses humans in phishing

•

by Kevin Townsend / 5d

Agentic AI has improved spear phishing effectiveness by 55% since 2023, research shows. The post appeared first on SecurityWeek .

Qevlar AI Raises $10 Million for Autonomous Investigation Platform

Qevlar AI raises 14M$ for cybersecurity

•

by Ionut Arghire / 6d

French cybersecurity startup Qevlar AI has raised $10 million in a funding round led by EQT Ventures and Forgepoint Capital International. The post appeared first on SecurityWeek .

Treasury’s OCC Says Hackers Had Access to 150,000 Emails

Valid Accounts (Enterprise T1078)

•

by Eduard Kovacs / 6d

•

Treasury Department email breach reported

The Office of the Comptroller of the Currency (OCC) has disclosed an email security incident in which 100 accounts were compromised for over a year. The post appeared first on SecurityWeek .

CISA Urges Urgent Patching for Exploited CentreStack, Windows Zero-Days

3 TTPs

•

by Ionut Arghire / 6d

•

CVE-2025-30406

CISA has added fresh CentreStack and Windows CLFS vulnerabilities to the Known Exploited Vulnerabilities catalog. The post appeared first on SecurityWeek .

Vulnerabilities Patched by Ivanti, VMware, Zoom

3 TTPs

•

by Ionut Arghire / 6d

Ivanti, VMware, and Zoom released fixes for dozens of vulnerabilities in their products on April 2025 Patch Tuesday. The post appeared first on SecurityWeek .

Fortinet Patches Critical FortiSwitch Vulnerability

2 TTPs

•

by Ionut Arghire / 6d

Fortinet fixes a critical-severity bug in FortiSwitch that could allow an attacker to modify administrative passwords. The post appeared first on SecurityWeek .

Oracle Faces Mounting Criticism as It Notifies Customers of Hack

Collection (Enterprise TA0009)

•

by Eduard Kovacs / 6d

•

Oracle faces criticism over security incidents

Oracle is sending out written notifications to customers over the recent hack after it initially appeared to completely deny a data breach. The post appeared first on SecurityWeek .

Apr 8, 2025

ICS Patch Tuesday: Vulnerabilities Addressed by Rockwell, ABB, Siemens, Schneider

3 TTPs

•

by Eduard Kovacs / 6d

•

PatchTuesday

Industrial giants Siemens, Rockwell, Schneider and ABB have released their March 2025 Patch Tuesday ICS security advisories. The post appeared first on SecurityWeek .

Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day

3 TTPs

•

by Ryan Naraine / 6d

•

CVE-2025-29824

Patch Tuesday: Microsoft ships urgent cover for another WIndows CLFS vulnerability already exploited in the wild. The post appeared first on SecurityWeek .

Adobe Calls Urgent Attention to Critical ColdFusion Flaws

2 TTPs

•

by Ryan Naraine / 6d

The Adobe Patch Tuesday rollout covers 54 vulnerabilities, including code execution issues in the oft-targeted Adobe ColdFusion software. The post appeared first on SecurityWeek .

Network Access Vendor Portnox Secures $37.5 Million Investment

Portnox secures 375M Series B

•

by SecurityWeek News / 6d

Texas network access control startup closes a Series B round led by Updata Partners and brings the total raised to $60 million. The post appeared first on SecurityWeek .

Octane Raises $6.75M for Smart Contract Security Tech

Octane raises 675M for crypto security

•

by SecurityWeek News / 6d

San Francisco smart contract security startup closes a $6.75 million seed funding round led by Archetype and Winklevoss Capital. The post appeared first on SecurityWeek .

Vulnerability Management Firm Spektion Emerges From Stealth With $5 Million in Funding

by Eduard Kovacs / 6d

Spektion has emerged from stealth mode with $5 million in seed funding for its vulnerability management solution. The post appeared first on SecurityWeek .

DNS: The Secret Weapon CISOs May Be Overlooking in the Fight Against Cyberattacks

16 TTPs

•

by Danelle Au / 6d

While often relegated to a purely functional role, DNS offers unparalleled opportunities for preemptive defense against cyberattacks. The post appeared first on SecurityWeek .

Anecdotes Raises $30 Million for Enterprise GRC Platform

Anecdotes raises 55M$ Series B

•

by Eduard Kovacs / 6d

Anecdotes has raised $55 million in an extended Series B funding round that brings the total raised by the company to $85 million. The post appeared first on SecurityWeek .

SAP Patches Critical Code Injection Vulnerabilities

by Ionut Arghire / 7d

SAP released 20 security notes on April 2025 patch day, including three addressing critical code injection and authentication bypass flaws. The post appeared first on SecurityWeek .

Aurascape Banks Hefty $50 Million to Mitigate ‘Shadow AI’ Risks

by Ryan Naraine / 7d

Silicon Valley startup secures big investment from Menlo Ventures and Mayfield Fund to solve the “shadow AI” security problem. The post appeared first on SecurityWeek .

WhatsApp Vulnerability Could Facilitate Remote Code Execution

2 TTPs

•

by Eduard Kovacs / 7d

An update for the WhatsApp desktop app for Windows patches CVE-2025-30401, a spoofing vulnerability that could be used to trick users. The post appeared first on SecurityWeek .

ESET Vulnerability Exploited for Stealthy Malware Execution

6 TTPs

•

by Ionut Arghire / 7d

•

CVE-2024-11859

A sophisticated APT tracked as ToddyCat has exploited an ESET DLL search order hijacking vulnerability for malware delivery. The post appeared first on SecurityWeek .

Corsha Raises $18 Million to Enhance and Extend Machine-to-Machine Security

by Kevin Townsend / 7d

The new funds will be used to extend Corsha’s reach into critical infrastructure and further improve its own use of AI. The post appeared first on SecurityWeek .

Tailscale Raises $160 Million for Secure Networking Platform

Tailscale valued at 1.5B$

•

by Eduard Kovacs / 7d

Tailscale’s new Series C funding round brings the total raised by the company for its secure networking platform to $275 million. The post appeared first on SecurityWeek .

Exploited Vulnerability Puts 5,000 Ivanti VPN Appliances at Risk

Execution (Enterprise TA0002)

•

by Ionut Arghire / 7d

•

CVE-2025-22457

More than 5,000 Ivanti Connect Secure appliances are vulnerable to attacks exploiting CVE-2025-22457, which has been used by Chinese hackers. The post appeared first on SecurityWeek .

Android Update Patches Two Exploited Vulnerabilities

by Ionut Arghire / 7d

Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs. The post appeared first on SecurityWeek .