SecurityWeek Briefing.

"Vulnerability exploitation possibly behind widespread Dray Tek router robots."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 25 March 2025, 1610 UTC.

Content and Source:  Email subscription via https://feedly.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

85K followers43 articles per week

#security#tech

47

Today

Vulnerability Exploitation Possibly Behind Widespread DrayTek Router Reboots

2 TTPs

•

by Eduard Kovacs / 50min

DrayTek routers around the world are rebooting and the vendor’s statement suggests that it may involve the exploitation of a vulnerability. The post appeared first on SecurityWeek .

VMware Patches Authentication Bypass Flaw in Windows Tools Suite

CVE-2025-22230 & 1 other

•

by SecurityWeek News / 1h

The authentication bypass vulnerability, tagged as CVE-2025-22230, carries a CVSS severity score of 7.8/10. The post appeared first on SecurityWeek .

Microsoft Adds AI Agents to Security Copilot

Microsoft enhances Security Copilot agents

•

by Ionut Arghire / 1h

Microsoft has expanded the capabilities of Security Copilot with AI agents tackling data security, phishing, and identity management. The post appeared first on SecurityWeek .

Charm Security Emerges From Stealth With $8 Million in Funding

Charm Security raises 8M$ for fraud

•

by Ionut Arghire / 2h

Charm Security has emerged from stealth mode with $8 million in funding for AI-powered scams and social engineering prevention. The post appeared first on SecurityWeek .

Numotion Data Breach Impacts Nearly 500,000 People

5 TTPs

•

by Eduard Kovacs / 3h

Email-related data breach suffered by wheelchair and other mobility equipment provider Numotion affects almost 500,000 individuals. The post appeared first on SecurityWeek .

Chinese APT Weaver Ant Targeting Telecom Providers in Asia

18 TTPs

•

by Ionut Arghire / 4h

•

Weaver Ant targets telecoms for espionage

Weaver Ant, a cyberespionage-focused APT operating out of China, is targeting telecom providers for persistent access. The post appeared first on SecurityWeek .

Ransomware Shifts Tactics as Payouts Drop: Critical Infrastructure in the Crosshairs

10 TTPs

•

by Kevin Townsend / 4h

Threats themselves change very little, but the tactics used are continually revised to maximize the criminals’ return on investment and effort. The post appeared first on SecurityWeek .

Hacker Conversations: Frank Trezza – From Phreaker to Pentester

by Kevin Townsend / 5h

Frank Trezza is fairly typical of most hackers. Early pranks sometimes leading to something more serious. The post appeared first on SecurityWeek .

300 Arrested in Crackdown on Cybercrime Rings in Africa

Operation Red Card arrests 306 suspects

•

by Ionut Arghire / 5h

Authorities in seven African countries arrested 300 suspects in an international crackdown on cybercriminal networks targeting businesses. The post appeared first on SecurityWeek .

IngressNightmare Flaws Expose Kubernetes Clusters to Remote Hacking

Execution (Enterprise TA0002)

•

by Eduard Kovacs / 5h

•

Kubernetes Ingress vulnerabilities expose clusters

Critical remote code execution vulnerabilities found by Wiz researchers in Ingress NGINX Controller for Kubernetes. The post appeared first on SecurityWeek .

Yesterday

NIST Still Struggling to Clear Vulnerability Submissions Backlog in NVD

by Ryan Naraine / 23h

The effects of the backlog are already being felt in vulnerability management circles where NVD data promises an enriched source of truth. The post appeared first on SecurityWeek .

Oracle Denies Cloud Breach After Hacker Offers to Sell Data

2 TTPs

•

by Eduard Kovacs / 1d

Oracle has denied that Cloud systems have been breached after a hacker claimed to have stolen millions of records. The post appeared first on SecurityWeek .

Russian Firm Offers $4 Million for Telegram Exploits

Russian firm offers $4M Telegram exploits

•

by Ionut Arghire / 1d

A Russian exploit acquisition firm is offering up to $4 million for a full-chain exploit targeting messaging service Telegram. The post appeared first on SecurityWeek .

Webinar Today: Which Security Testing Approach is Right for You?

by SecurityWeek News / 1d

Which Security Testing Approach is Right for You: BAS, Automated Penetration Testing, or Both? The post appeared first on SecurityWeek .

US Lifts Sanctions Against Crypto Mixer Tornado Cash

Coinbase criticizes Treasury over Tornado Cash

•

by Ionut Arghire / 1d

The US Department of the Treasury has removed sanctions against the fully decentralized cryptocurrency mixer service Tornado Cash. The post appeared first on SecurityWeek .

Despite Rip-and-Replace Efforts, FCC Suspects Banned Chinese Telecom Providers Still Active in US

US investigates Chinese telecom firms

•

by Eduard Kovacs / 1d

The FCC is investigating whether Chinese firms such as Huawei, ZTE and China Telecom are still operating in the US. The post appeared first on SecurityWeek .

Medusa Ransomware Uses Malicious Driver to Disable Security Tools

8 TTPs

•

by Ionut Arghire / 1d

•

ABYSSWORKER driver disrupts EDR systems

The Medusa ransomware relies on a malicious Windows driver to disable the security tools running on the infected systems. The post appeared first on SecurityWeek .

Encrypted Messaging Apps Promise Privacy. Government Transparency Is Often the Price

Government agencies misuse messaging apps

•

by Associated Press / 1d

Public officials and private citizens are consistently warned about hacking and data leaks, but technologies designed to increase privacy often decrease government transparency. The post appeared first on SecurityWeek .

NetSfere Launches Quantum-Resilient Messaging Platform for Enterprise and Government Use

by Kevin Townsend / 1d

NetSfere Integrates ML-KEM and AES into its text, voice and video messaging platform to meet 2027 NSA Quantum Security mandates. The post appeared first on SecurityWeek .

Albabat Ransomware Expands Targets, Abuses GitHub

10 TTPs

•

by Ionut Arghire / 1d

•

Albabat ransomware targets multiple OS

New versions of the Albabat ransomware target Windows, Linux, and macOS, and retrieve configuration files from GitHub. The post appeared first on SecurityWeek .