Security News > 2025 > April

Package hallucination: LLMs may deliver malicious code to careless devs
2025-04-14 12:38

LLMs’ tendency to “hallucinate” code packages that don’t exist could become the basis for a new type of supply chain attack dubbed “slopsquatting” (courtesy of Seth Larson, Security...

Microsoft: New Windows updates fix Active Directory policy issues
2025-04-14 11:52

Microsoft has released emergency Windows updates to address a known issue affecting local audit logon policies in Active Directory Group Policy. [...]

OpenAI's GPT-4.1, 4.1 nano, and 4.1 mini models release imminent
2025-04-14 11:33

According to references spotted on OpenAI's website, the Microsoft-backed AI startup is planning to launch five new models this week, including GPT-4.1, 4.1 nano, and 4.1 mini. [...]

⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More
2025-04-14 11:19

Attackers aren’t waiting for patches anymore — they are breaking in before defenses are ready. Trusted security tools are being hijacked to deliver malware. Even after a breach is detected and...

China Sort of Admits to Being Behind Volt Typhoon
2025-04-14 11:08

The Wall Street Journal has the story: Chinese officials acknowledged in a secret December meeting that Beijing was behind a widespread series of alarming cyberattacks on U.S. infrastructure,...

Microsoft: Windows Server 2025 restarts break connectivity on some DCs
2025-04-14 10:54

Microsoft warned IT admins that some Windows Server 2025 domain controllers might become inaccessible after a restart, causing apps and services to fail or remain unreachable. [...]

Cybersecurity in the AI Era: Evolve Faster Than the Threats or Get Left Behind
2025-04-14 10:30

AI is changing cybersecurity faster than many defenders realize. Attackers are already using AI to automate reconnaissance, generate sophisticated phishing lures, and exploit vulnerabilities...

Official abuse of state security has always been bad, now it's horrifying
2025-04-14 09:26

UK holds onto oversight by a whisker, but it's utterly barefaced on the other side of the pond Opinion The UK government's attempts to worm into Apple's core end-to-end encryption were set back...

CIO and digi VP to depart UK retail giant Asda as Walmart divorce woes settle
2025-04-14 08:24

Brit retailer says troubled breakup with tech platform of former US owner nearing conclusion Two of the top team behind Asda's £1 billion ($1.31 billion) tech divorce from US retail giant Walmart...

Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT
2025-04-14 06:55

A threat actor with ties to Pakistan has been observed targeting various sectors in India with various remote access trojans like Xeno RAT, Spark RAT, and a previously undocumented malware family...