Security News > 2025 > February

How hackers target your Active Directory with breached VPN passwords
2025-02-04 15:01

As the gateways to corporate networks, VPNs are an attractive target for attackers. Learn from Specops Software about how hackers use compromised VPN passwords and how you can protect your...

US accuses Canadian math prodigy of $65M crypto scheme
2025-02-04 14:45

Suspect, still at large, said to back concept that 'code is law' New York feds today unsealed a five-count criminal indictment charging a 22-year-old Canadian math prodigy with exploiting...

7-Zip MotW bypass exploited in zero-day attacks against Ukraine
2025-02-04 14:43

A 7-Zip vulnerability allowing attackers to bypass the Mark of the Web (MotW) Windows security feature was exploited by Russian hackers as a zero-day since September 2024. [...]

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access
2025-02-04 14:16

Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of granting the adversary remote access to...

Russian cybercrooks exploiting 7-Zip zero-day vulnerability (CVE-2025-0411)
2025-02-04 13:02

CVE-2025-0411, a Mark-of-the-Web bypass vulnerability in the open-source archiver tool 7-Zip that was fixed in November 2024, has been exploited in zero-day attacks to deliver malware to Ukrainian...

How to Prevent Phishing Attacks with Multi-Factor Authentication
2025-02-04 13:00

Learn how to protect yourself and your sensitive information from phishing attacks by implementing multi-factor authentication.

Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections
2025-02-04 12:28

A recently patched security vulnerability in the 7-Zip archiver tool was exploited in the wild to deliver the SmokeLoader malware. The flaw, CVE-2025-0411 (CVSS score: 7.0), allows remote...

North Korean Hackers Deploy FERRET Malware via Fake Job Interviews on macOS
2025-02-04 12:11

The North Korean threat actors behind the Contagious Interview campaign have been observed delivering a collection of Apple macOS malware strains dubbed FERRET as part of a supposed job interview...

Deepfakes and the 2024 US Election
2025-02-04 12:01

Interesting analysis: We analyzed every instance of AI use in elections collected by the WIRED AI Elections Project (source for our analysis), which tracked known uses of AI for creating political...

Cyberattack on NHS causes hospitals to miss cancer care targets
2025-02-04 11:44

Healthcare chiefs say impact will persist for months NHS execs admit that last year's cyberattack on hospitals in Wirral, northwest England, continues to "significantly" impact waiting times for...