Security News > 2025 > April

Regulating AI Behavior with a Hypervisor
2025-04-23 16:02

Interesting research: “Guillotine: Hypervisors for Isolating Malicious AIs.” Abstract:As AI models become more embedded in critical sectors like finance, healthcare, and the military, their...

#AI
Blue Shield of California leaked health data of 4.7 million members to Google
2025-04-23 15:38

Blue Shield of California disclosed it suffered a data breach after exposing protected health information of 4.7 million members to Google's analytics and advertisement platforms. [...]

FBI: US lost record $16.6 billion to cybercrime in 2024
2025-04-23 15:21

The FBI says cybercriminals have stolen a record $16,6 billion in 2024, marking an increase in losses of over 33% compared to the previous year. [...]

ASUS releases fix for AMI bug that lets hackers brick servers
2025-04-23 14:50

ASUS has released security updates to address CVE-2024-54085, a maximum severity flaw that could allow attackers to hijack and potentially brick servers. [...]

Phishing detection is broken: Why most attacks feel like a zero day
2025-04-23 14:02

Phishing attacks now evade email filters, proxies, and MFA — making every attack feel like a zero-day. This article from Push Security breaks down why detection is failing and how real-time,...

Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign
2025-04-23 13:08

The Iran-nexus threat actor known as UNC2428 has been observed delivering a backdoor known as MURKYTOUR as part of a job-themed social engineering campaign aimed at Israel in October 2024....

Who needs phishing when your login's already in the wild?
2025-04-23 13:00

Stolen credentials edge out email tricks for cloud break-ins because they're so easy to get Criminals used stolen credentials more frequently than email phishing to gain access into their victims'...

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs
2025-04-23 12:52

MITRE has released the latest version of its ATT&CK framework, which now also includes a new section (“matrix”) to cover the tactics, techniques and procedures (TTPs) used to target VMware ESXi...

Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices
2025-04-23 12:22

Cybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that distributes Android spyware under the guise of the Alpine Quest mapping...

2025 Data Breach Investigations Report: Third-party breaches double
2025-04-23 11:44

The exploitation of vulnerabilities has seen another year of growth as an initial access vector for breaches, reaching 20%, according to Verizon’s 2025 Data Breach Investigations Report....