Security News > 2025 > April

Nearly 24,000 IPs behind wave of Palo Alto Global Protect scans
2025-04-01 14:31

A significant spike in scanning activity targeting Palo Alto Network GlobalProtect login portals has been observed, with researchers concerned it may be a prelude to an upcoming attack or flaw...

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing
2025-04-01 14:18

A new sophisticated phishing-as-a-service (PhaaS) platform called Lucid has targeted 169 entities in 88 countries using smishing messages propagated via Apple iMessage and Rich Communication...

Apple backports zero-day patches to older iPhones and Macs
2025-04-01 13:35

Apple has released security updates that backport fixes for actively exploited vulnerabilities that were exploited as zero-days to older versions of its operating systems. [...]

Happy 21st Birthday, Gmail! Google’s Present to Enterprise Gmail Users: End-to-End Encryption
2025-04-01 13:06

The new feature is more accessible than S/MIME because it eliminates the need for certificate management.

Building a reasonable cyber defense program
2025-04-01 13:00

If you do business in the United States, especially across state lines, you probably know how difficult it is to comply with U.S. state data privacy laws. The federal government and many U.S....

Google makes end-to-end encrypted Gmail easy for all – even Outlook users
2025-04-01 13:00

The UK government must be thrilled Google will soon offer end-to-end encrypted (E2EE) email for all users, even those who do not use Google Workspace, and says it'll do so without imposing any...

Critical auth bypass bug in CrushFTP now exploited in attacks
2025-04-01 12:46

Attackers are now targeting a critical authentication bypass vulnerability in the CrushFTP file transfer software using exploits based on publicly available proof-of-concept code. [...]

UK threatens £100K-a-day fines under new cyber bill
2025-04-01 11:37

Tech secretary reveals landmark legislation's full details for first time The UK's technology secretary revealed the full breadth of the government's Cyber Security and Resilience (CSR) Bill for...

#UK
Apple Backports Critical Fixes for 3 Recent 0-Days Impacting Older iOS and macOS Devices
2025-04-01 11:28

Apple on Monday backported fixes for three vulnerabilities that have come under active exploitation in the wild to older models and previous versions of the operating systems. The vulnerabilities...

Attackers are probing Palo Alto Networks GlobalProtect portals
2025-04-01 11:19

Cybersecurity company GreyNoise is warning about a significant increase of scanning activity targeting internet-facing Palo Alto Networks GlobalProtect portals in the last 30 days, and has urged...