SecurityWeek Briefing.

"In other news:  Critial Chrome bug, Capital One hacker resentencing, Story of expat flaw."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 22 March 2025, 2226 UTC.

Content and Source:  Email subscription via https://feedly.com

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

85K followers44 articles per week

#security#tech

28

Yesterday

In Other News: Critical Chrome Bug, Capital One Hacker Resententencing, Story of Expat Flaw

5 TTPs

•

by SecurityWeek News / 1d

Noteworthy stories that might have slipped under the radar: Capital One hacker’s sentence reversed, Google patches critical Chrome vulnerability, the story of an Expat flaw. The post appeared first on SecurityWeek .

Ransomware Group Claims Attack on Virginia Attorney General’s Office

3 TTPs

•

by Ionut Arghire / 1d

•

Cloak ransomware attacks Virginia Attorney General

The Cloak ransomware group has claimed responsibility for a February cyberattack on Virginia Attorney General’s Office. The post appeared first on SecurityWeek .

New Jailbreak Technique Uses Fictional World to Manipulate AI

AI tools exploited to create malware

•

by Ionut Arghire / 1d

Cato Networks discovers a new LLM jailbreak technique that relies on creating a fictional world to bypass a model’s security controls. The post appeared first on SecurityWeek .

Chinese I-Soon Hackers Hit 7 Organizations in Operation FishMedley

7 TTPs

•

by Ionut Arghire / 1d

•

China's FishMonger APT targets global entities

The FishMonger APT group, a subdivision of Chinese cybersecurity firm I-Soon, compromised seven organizations in a 2022 campaign. The post appeared first on SecurityWeek .

Industry Reactions to Google Buying Wiz: Feedback Friday

Google acquires Wiz for $32B

•

by Eduard Kovacs / 1d

Industry professionals comment on Google acquiring cloud security giant Wiz for $32 billion in cash. The post appeared first on SecurityWeek .

Ransomware Group Claims Attacks on Ascom, Jaguar Land Rover

3 TTPs

•

by Ionut Arghire / 1d

•

Ascom Holding AG hit by ransomware

The Hellcat ransomware group claims to have stolen tens of gigabytes of data from Ascom and Jaguar Land Rover. The post appeared first on SecurityWeek .

Former NFL, Michigan Assistant Coach Matt Weiss Charged With Hacking for Athletes’ Intimate Photos

Coach charged with hacking athletes' accounts

•

by Associated Press / 1d

Former NFL and University of Michigan assistant football coach Matt Weiss hacked into the computer accounts of thousands of college athletes seeking intimate photos and videos. The post appeared first on SecurityWeek .

Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed

6 TTPs

•

by Eduard Kovacs / 1d

•

CVE-2025-30066

More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause. The post appeared first on SecurityWeek .

Mar 20, 2025

Browser Security Under Siege: The Alarming Rise of AI-Powered Phishing

Browser-based phishing attacks surge 140%

•

by Kevin Townsend / 2d

Analysis reveals a 140% increase in browser phishing, including a 130% increase in zero-hour phishing attacks. The post appeared first on SecurityWeek .

Dataminr Raises $85 Million for AI-Powered Information Platform

Dataminr secures 85M funding

•

by Ionut Arghire / 2d

Real-time event and risk detection firm Dataminr has raised $85 million from NightDragon and HSBC to accelerate AI development. The post appeared first on SecurityWeek .

CISA Warns of Exploited Nakivo Vulnerability

3 TTPs

•

by Ionut Arghire / 2d

CISA has added an absolute path traversal bug in Nakivo Backup and Replication to its Known Exploited Vulnerabilities list. The post appeared first on SecurityWeek .

Through the Lens of Music: What Cybersecurity Can Learn From Joni Mitchell

by Joshua Goldfarb / 2d

A Joni Mitchell song from the 1960s can teach us a lot about securing hybrid and multi-cloud environments. The post appeared first on SecurityWeek .

Veeam Patches Critical Vulnerability in Backup & Replication

2 TTPs

•

by Ionut Arghire / 2d

•

CVE-2025-23120

Veeam has released patches for a critical-severity remote code execution vulnerability in Backup & Replication. The post appeared first on SecurityWeek .

500,000 Impacted by Pennsylvania Teachers Union Data Breach

4 TTPs

•

by Ionut Arghire / 2d

•

Pennsylvania State Education Association data

Pennsylvania State Education Association says the personal information of over 500,000 individuals was stolen in a data breach. The post appeared first on SecurityWeek .

Hackers Target Cisco Smart Licensing Utility Vulnerabilities

2 TTPs

•

by Eduard Kovacs / 2d

SANS is seeing attempts to exploit two critical Cisco Smart Licensing Utility vulnerabilities tracked as CVE-2024-20439 and CVE-2024-20440. The post appeared first on SecurityWeek .

Amazon Ends Little-Used Privacy Feature That Let Echo Users Opt Out of Sending Recordings to Company

Amazon disables local voice processing

•

by Associated Press / 2d

Amazon is ending a little-used privacy feature that let some users of its Echo smart speaker prevent their voice commands from going to the company’s cloud. The post appeared first on SecurityWeek .

300 Malicious ‘Vapor’ Apps Hosted on Google Play Had 60 Million Downloads

7 TTPs

•

by Ionut Arghire / 2d

•

Over 300 malicious apps discovered

Over 300 malicious applications displaying intrusive full-screen interstitial video ads amassed more than 60 million downloads on Google Play. The post appeared first on SecurityWeek .

Paragon Spyware Attacks Exploited WhatsApp Zero-Day

WhatsApp patches zero-click vulnerability

•

by Eduard Kovacs / 2d

Attacks involving Paragon’s Graphite spyware involved a WhatsApp zero-day that could be exploited without any user interaction. The post appeared first on SecurityWeek .

Mar 19, 2025

Orion Security Raises $6 Million to Tackle Insider Threats and Data Leaks with AI-Driven DLP

Orion Security secures $6M funding

•

by Kevin Townsend / 3d

Orion protects against data exfiltration by using AI to compare actual data flows against permitted and expected data flows. The post appeared first on SecurityWeek .

March Madness Requires Vigilance on Both an Individual and Corporate Level

by Marc Solomon / 3d

Defending high profile sporting events from adversarial attacks requires a mix of experienced capabilities and a solid threat intelligence program. The post appeared first on SecurityWeek .

Infosys to Pay $17.5 Million in Settlement Over 2023 Data Breach

Infosys settles McCamish lawsuits for $17.5M

•

by Ionut Arghire / 3d

Infosys McCamish System has agreed to pay $17.5 million to settle six class action lawsuits filed over a 2023 data breach. The post appeared first on SecurityWeek .

What’s Behind Google’s $32 Billion Wiz Acquisition?

Google acquires Wiz for $32 billion

•

by Ryan Naraine / 3d

News analysis: Google positions itself to compete with Microsoft for enterprise security dollars. How does this deal affect startup ecosystem? The post appeared first on SecurityWeek .

Watch on Demand: Supply Chain & Third-Party Risk Security Summit

by SecurityWeek News / 3d

Join the virtual event as we explore of the critical nature of software and vendor supply chain security issues. The post appeared first on SecurityWeek .

Chinese Hacking Group MirrorFace Targeting Europe

8 TTPs

•

by Ionut Arghire / 3d

•

China-linked MirrorFace targets EU diplomats

Chinese hacking group MirrorFace has targeted a Central European diplomatic institute with the Anel backdoor and AsyncRAT. The post appeared first on SecurityWeek .

Scareware Combined With Phishing in Attacks Targeting macOS Users

3 TTPs

•

by Ionut Arghire / 3d

A long-running campaign phishing for credentials through scareware recently switched to targeting macOS users. The post appeared first on SecurityWeek .

Microsoft Warns of New StilachiRAT Malware

24 TTPs

•

by Eduard Kovacs / 3d

•

StilachiRAT malware targets crypto wallets

Microsoft has shared details on StilachiRAT, an evasive and persistent piece of malware that facilitates sensitive data theft. The post appeared first on SecurityWeek .

Mar 18, 2025

HP Launches Printers With Quantum Resilient Cryptography

HP launches quantum-resistant printers

•

by Kevin Townsend / 4d

Printers can sit in the corner for ten years or more, while quantum decryption is thought by many to be less than 10 years away. The post appeared first on SecurityWeek .

AI Is Turbocharging Organized Crime, EU Police Agency Warns

Europol reports changing organised crime dynamics

•

by Associated Press / 4d

AI and other technologies “are a catalyst for crime, and drive criminal operations’ efficiency by amplifying their speed, reach, and sophistication,” the report said. The post appeared first on SecurityWeek .

End of feed