Data Leak Exposes TopSec’s Role in China’s Censorship-as-a-Service Operations

21/02/2025 0 Comments 0 tags

An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country.

Apple Drops iCloud’s Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands

21/02/2025 0 Comments 0 tags

Apple is removing its Advanced Data Protection (ADP) feature for iCloud from the United Kingdom with immediate effect following government demands for backdoor access to encrypted user data. The development

CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks

21/02/2025 0 Comments 0 tags

A high-severity security flaw impacting the Craft content management system (CMS) has been added by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to its Known Exploited Vulnerabilities (KEV) catalog,

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

21/02/2025 0 Comments 0 tags

Cisco has confirmed that a Chinese threat actor known as Salt Typhoon gained access by likely abusing a known security flaw tracked as CVE-2018-0171, and by obtaining legitimate victim login

North Korean Hackers Target Freelance Developers in Job Scam to Deploy Malware

20/02/2025 0 Comments 0 tags

Freelance software developers are the target of an ongoing campaign that leverages job interview-themed lures to deliver cross-platform malware families known as BeaverTail and InvisibleFerret. The activity, linked to North

Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives

20/02/2025 0 Comments 0 tags

A malware campaign distributing the XLoader malware has been observed using the DLL side-loading technique by making use of a legitimate application associated with the Eclipse Foundation. “The legitimate application

Chinese-Linked Attackers Exploit Check Point Flaw to Deploy ShadowPad and Ransomware

20/02/2025 0 Comments 0 tags

A previously unknown threat activity cluster targeted European organizations, particularly those in the healthcare sector, to deploy PlugX and its successor, ShadowPad, with the intrusions ultimately leading to deployment of

PCI DSS 4.0 Mandates DMARC By 31st March 2025

20/02/2025 0 Comments 0 tags

The payment card industry has set a critical deadline for businesses handling cardholder data or processing payments- by March 31, 2025, DMARC implementation will be mandatory! This requirement highlights the

Microsoft’s End of Support for Exchange 2016 and 2019: What IT Teams Must Do Now

20/02/2025 0 Comments 0 tags

For decades, Microsoft Exchange has been the backbone of business communications, powering emailing, scheduling and collaboration for organizations worldwide. Whether deployed on-premises or in hybrid environments, companies of all sizes

Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability

20/02/2025 0 Comments 0 tags

Microsoft has released security updates to address two Critical-rated flaws impacting Bing and Power Pages, including one that has come under active exploitation in the wild. The vulnerabilities are listed