Aggregator

Attackers Use SEO Poisoning and Signed Trojans to Steal VPN Credentials

Cyber Security News
2 weeks ago

A financially motivated threat actor known as Storm-2561 has been running a credential theft campaign since May 2025, manipulating search engine rankings to push fake VPN software toward enterprise users. The campaign targets employees searching for tools such as Pulse Secure, Fortinet, and Ivanti, redirecting them to spoofed websites that serve malicious download packages. Once […]

The post Attackers Use SEO Poisoning and Signed Trojans to Steal VPN Credentials appeared first on Cyber Security News.

Tushar Subhra Dutta

RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attempts

Security Affairs
2 weeks ago
RondoDox botnet targets 174 flaws, reaching 15,000 daily exploit attempts in a more focused and strategic campaign. RondoDox botnet is ramping up attacks, targeting 174 vulnerabilities with up to 15,000 daily exploitation attempts in a more focused and strategic campaign, Bitsight reported. “We gathered all these exploit attempts (identifiable by indicators like the User-Agent and […]
Pierluigi Paganini

Surf Raises $57M to Automate Security Hygiene With AI Agents

BankInfoSecurity.com
2 weeks ago
New York-Based Startup's AI Agents Analyze Asset Context to Fix Security Gaps
Surf AI launched an AI-driven platform designed to automate security hygiene tasks across enterprise environments. Backed by $57 million in funding, the company uses AI agents and contextual asset analysis to identify and remediate risks across identities, cloud assets and sensitive data.

英伟达的 DLSS 5 引发争议和批评

Solidot
2 weeks ago
英伟达演示了计划于今年晚些时候推出的深度学习超级采样技术 DLSS 的新版本，结果在玩家中间引发了广泛争议和批评，因为 DLSS 5 在重构图像过程中戏剧性的改变了游戏画面，为游戏画面加入了一层 AI 滤镜，让游戏中的人物变得面目全非。DLSS 5 在社交媒体上引发了玩家制作大量梗图进行嘲讽，在 reddit 上大量相关讨论被删除（可能是英伟达在公关），就像微软被称为 Microslop，玩家现在开始称英伟达为 Slopvidia。

CTG unveils cyber resilience scoring dashboard for measurable risk reduction

Help Net Security
2 weeks ago

CTG has announced the launch of a cyber resilience scoring dashboard that helps organizations quantify risk, prioritize remediation, and track measurable improvement over time. The dashboard is part of the Group’s Cegeka Security Advisory Framework (CSAF), a modular approach that combines assessments and advisory services to help organizations continuously improve their security strategy. By translating assessment outcomes into a single score and clear trends, the dashboard provides immediate visibility into cyber risk, program maturity, and … More →

The post CTG unveils cyber resilience scoring dashboard for measurable risk reduction appeared first on Help Net Security.

Industry News

LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader

The Hackers News
2 weeks ago
The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial access method. The use of ClickFix, where users are tricked into manually running malicious commands to address non-existent errors, is a departure from relying on traditional methods for obtaining initial access, such as through stolen credentials
The Hacker News

Managed ad