Security News > 2025 > January

Cybersecurity books on ransomware you shouldn’t miss
2025-01-22 04:00

This list of ransomware-focused cybersecurity books is tailored for professionals seeking practical insights and deeper knowledge. Covering technical strategies, real-world cases, and the evolving...

PowerSchool theft latest: Decades of Canadian student records, data from 40-plus US states feared stolen
2025-01-22 01:02

Lawsuits pile up after database accessed by miscreants Canada's largest school board has revealed that student records dating back to 1985 may have been accessed by miscreants who compromised...

‘Sneaky Log’ Microsoft Spoofing Scheme Sidesteps Two-Factor Security
2025-01-21 21:35

The phishing-as-a-service kit from Sneaky Log creates fake authentication pages to farm account information, including two-factor security codes.

Cloudflare mitigated a record-breaking 5.6 Tbps DDoS attack
2025-01-21 21:04

The largest distributed denial-of-service (DDoS) attack to date peaked at 5.6 terabits per second and came from a Mirai-based botnet with 13,000 compromised devices. [...]

Fake Homebrew Google ads target Mac users with malware
2025-01-21 19:58

Hackers are once again abusing Google ads to spread malware, using a fake Homebrew website to infect Macs and Linux devices with an infostealer that steals credentials, browser data, and...

Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day
2025-01-21 18:45

Seven days after disclosure and little action taken, data shows Fortinet customers need to get with the program and apply the latest updates as nearly 50,000 management interfaces are still...

Microsoft previews Game Assist in-game browser in Edge Stable
2025-01-21 18:25

​Microsoft has announced that Game Assist, its recently unveiled in-game browser, is now also available in preview for Microsoft Edge Stable users. [...]

Bitbucket services “hard down” due to major worldwide outage
2025-01-21 17:23

Bitbucket is investigating a massive outage affecting Atlassian Bitbucket Cloud customers worldwide, with the company saying its cloud services are "hard down." [...]

7-Zip fixes bug that bypasses Windows MoTW security warnings, patch now
2025-01-21 16:05

​A high-severity vulnerability in the 7-Zip file archiver allows attackers to bypass the Mark of the Web (MotW) Windows security feature and execute code on users' computers when extracting...

Ransomware gangs pose as IT support in Microsoft Teams phishing attacks
2025-01-21 15:59

Ransomware gangs are increasingly adopting email bombing followed by posing as tech support in Microsoft Teams calls to trick employees into allowing remote control and install malware that...