SecurityWeek Briefing.

"Serial entrepreneurs raise $40M to counter AI deep fakes, social engineering."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 02 April 2025, 2129 UTC.

Content and Source:  Email subscription via https://feedly.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

 SecurityWeek

86K followers48 articles per week

#security#tech

28

Today

Serial Entrepreneurs Raise $43M to Counter AI Deepfakes, Social Engineering

by Ryan Naraine / 4h

Adaptive is pitching a security platform designed to replicate real-world attack scenarios through AI-generated deepfake simulations. The post appeared first on SecurityWeek .

Vulnerabilities Expose Jan AI Systems to Remote Manipulation

3 TTPs

•

by Ionut Arghire / 5h

Vulnerabilities in open source ChatGPT alternative Jan AI expose systems to remote, unauthenticated manipulation. The post appeared first on SecurityWeek .

Cyberhaven Banks $100 Million in Series D, Valuation Hits $1 Billion

Cyberhaven raises 100M Series D

•

by Ryan Naraine / 6h

Cyberhaven bags $100 million in funding at a billion-dollar valuation, a sign that investors remain bullish on data security startups. The post appeared first on SecurityWeek .

AI Giving Rise of the ‘Zero-Knowledge’ Threat Actor

by Etay Maor / 7h

The rise of zero-knowledge threat actors powered by AI marks a turning point in the business of cybercrime where sophisticated attacks are no longer confined to skilled attackers. The post appeared first on SecurityWeek .

Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses

by Kevin Townsend / 7h

DeepMind found that current AI frameworks are ad hoc, not systematic, and fail to provide defenders with useful insights. The post appeared first on SecurityWeek .

North Korea’s IT Operatives Are Exploiting Remote Work Globally

North Korean IT workers expand operations

•

by Kevin Townsend / 8h

The global rise of North Korean IT worker infiltration poses a serious cybersecurity risk—using fake identities, remote access, and extortion to compromise organizations. The post appeared first on SecurityWeek .

ImageRunner Flaw Exposed Sensitive Information in Google Cloud

3 TTPs

•

by Eduard Kovacs / 9h

Google has patched a Cloud Run vulnerability dubbed ImageRunner that could have been exploited to gain access to sensitive data. The post appeared first on SecurityWeek .

Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks

8 TTPs

•

by Eduard Kovacs / 10h

•

Lazarus Group targets crypto job seekers

North Korea’s Lazarus hackers are using the ClickFix technique for malware deployment in fresh attacks targeting the cryptocurrency ecosystem. The post appeared first on SecurityWeek .

Questions Remain Over Attacks Causing DrayTek Router Reboots

2 TTPs

•

by Eduard Kovacs / 10h

DrayTek has shared some clarifications regarding the recent attacks causing router reboots, but some questions remain unanswered. The post appeared first on SecurityWeek .

Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users

Gmail introduces end-to-end encryption

•

by Ionut Arghire / 11h

Gmail now allows enterprise users to send end-to-end encrypted emails to colleagues, and will soon allow sending to any inbox. The post appeared first on SecurityWeek .

Yesterday

Chrome 135, Firefox 137 Patch High-Severity Vulnerabilities

2 TTPs

•

by Ionut Arghire / 12h

Chrome 135 and Firefox 137 were released on Tuesday with fixes for several high-severity memory safety vulnerabilities. The post appeared first on SecurityWeek .

Microsoft Using AI to Uncover Critical Bootloader Vulnerabilities

Execution (Enterprise TA0002)

•

by Ryan Naraine / 23h

Using the Security Copilot tool, Microsoft discovered 20 critical vulnerabilities in widely deployed open-source bootloaders. The post appeared first on SecurityWeek .

Hackers Could Unleash Chaos Through Backdoor in China-Made Robot Dogs

Backdoor found in Unitree robot

•

by Ryan Naraine / 1d

An undocumented remote access backdoor in the Unitree Go1 Robot Dog allows remote control over the tunnel network and use of the vision cameras to see through their eyes. The post appeared first on SecurityWeek .

Hackers Looking for Vulnerable Palo Alto Networks GlobalProtect Portals

24,000 IPs target Palo Alto GlobalProtect

•

by Ionut Arghire / 1d

GreyNoise warns of a coordinated effort probing the internet for potentially vulnerable Palo Alto Networks GlobalProtect instances. The post appeared first on SecurityWeek .

Security Operations Firm ReliaQuest Raises $500M at $3.4B Valuation

ReliaQuest raises over 500M$

•

by Eduard Kovacs / 1d

ReliaQuest has announced a new growth funding round that brings the total raised by the firm to over $830 million. The post appeared first on SecurityWeek .

Ransomware Group Takes Credit for National Presto Industries Attack

3 TTPs

•

by Ionut Arghire / 1d

•

National Defense Corporation ransomware attack

A ransomware group has claimed responsibility for a March cyberattack on National Presto Industries subsidiary National Defense Corporation. The post appeared first on SecurityWeek .

Critical Vulnerability Found in Canon Printer Drivers

by Eduard Kovacs / 1d

Microsoft’s offensive security team warned Canon about a critical code execution vulnerability in printer drivers. The post appeared first on SecurityWeek .

CrushFTP Blames Security Firms for Fast Exploitation of Vulnerability

by Eduard Kovacs / 1d

Shadowserver has started seeing exploitation attempts aimed at a CrushFTP vulnerability tracked as CVE-2025-2825 and CVE-2025-31161. The post appeared first on SecurityWeek .

Check Point Responds to Hacking Claims

2 TTPs

•

by Ionut Arghire / 1d

•

Check Point breach claims disputed

Check Point has responded to a hacker’s claims of sensitive data theft, confirming an incident but saying that it had limited impact. The post appeared first on SecurityWeek .

Apple Patches Recent Zero-Days in Older iPhones

2 TTPs

•

by Ionut Arghire / 1d

Apple has released a hefty round of security updates for its desktop and mobile products, patching two recent zero-days in older iPhone models. The post appeared first on SecurityWeek .

France’s Antitrust Watchdog Fines Apple for Problems With App Tracking Transparency

Apple fined 150 million euros

•

by Associated Press / 1d

France’s antitrust watchdog fined Apple 150 million euros ($162 million) over a privacy feature protecting users from apps snooping on them. The post appeared first on SecurityWeek .

Mar 31, 2025

Threat Actors Deploy WordPress Malware in ‘mu-plugins’ Directory

6 TTPs

•

by Ionut Arghire / 2d

•

Malware targets WordPress mu-plugins directory

Sucuri has discovered multiple malware families deployed in the WordPress mu-plugins directory to evade routine security checks. The post appeared first on SecurityWeek .

Zero to Hero – A “Measured” Approach to Building a World-Class Offensive Security Program

by Trevin Edgeworth / 2d

A strong security program will sometimes require substantial organizational and cultural changes around security practices, and inevitably, a higher cost. The post appeared first on SecurityWeek .

Hacker Leaks Samsung Customer Data

3 TTPs

•

by Ionut Arghire / 2d

•

Samsung data leak exposes 270000 tickets

Hacker leaks 270,000 customer tickets allegedly stolen from Samsung Germany using long-compromised credentials. The post appeared first on SecurityWeek .

Part of EU’s New €1.3 Billion Investment Going to Cybersecurity

EU invests 1.3 billion euros

•

by Eduard Kovacs / 2d

The European Commission plans on investing €1.3 billion ($1.4 billion) in cybersecurity, artificial intelligence and digital skills. The post appeared first on SecurityWeek .

‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft

Input Capture (Mobile T1417)

•

by Ionut Arghire / 2d

•

Crocodilus malware targets Android devices

The newly identified Android banking trojan Crocodilus takes over devices, enabling overlay attacks, remote control, and keylogging. The post appeared first on SecurityWeek .

CISA Analyzes Malware Used in Ivanti Zero-Day Attacks

12 TTPs

•

by Ionut Arghire / 2d

CISA has published its analysis of Resurge, a SpawnChimera malware variant used in attacks targeting a recent Ivanti Connect Secure zero-day. The post appeared first on SecurityWeek .

170,000 Impacted by Data Breach at Chord Specialty Dental Partners

2 TTPs

•

by Eduard Kovacs / 2d

An email security incident at Chord Specialty Dental Partners, a US dental service organization, has impacted more than 170,000 people. The post appeared first on SecurityWeek .

End of feed