Security News

Cloudflare mitigated a record-breaking 5.6 Tbps DDoS attack
2025-01-21 21:04

The largest distributed denial-of-service (DDoS) attack to date peaked at 5.6 terabits per second and came from a Mirai-based botnet with 13,000 compromised devices. [...]

Ransomware gangs pose as IT support in Microsoft Teams phishing attacks
2025-01-21 15:59

Ransomware gangs are increasingly adopting email bombing followed by posing as tech support in Microsoft Teams calls to trick employees into allowing remote control and install malware that...

Scam Yourself attacks: How social engineering is evolving
2025-01-21 05:30

We’ve entered a new era where verification must come before trust, and for good reason. Cyber threats are evolving rapidly, and one of the trends getting a fresh reboot in 2025 is the “scam...

Ransomware attack forces Brit high school to shut doors
2025-01-20 12:03

Students have work to complete at home in the meantime A UK high school will have to close for at least two days, today and tomorrow, after becoming the latest public-sector victim of ransomware...

Medusa ransomware group claims attack on UK's Gateshead Council
2025-01-17 10:30

Pastes allegedly stolen documents on leak site with £600K demand Another year and yet another UK local authority has been pwned by a ransomware crew. This time it's Gateshead Council in North East...

Balancing usability and security in the fight against identity-based attacks
2025-01-17 06:00

In this Help Net Security interview, Adam Bateman, CEO of Push Security, talks about the rise in identity-based attacks, how they’re becoming more sophisticated each year, and how AI and ML are...

W3 Total Cache plugin flaw exposes 1 million WordPress sites to attacks
2025-01-16 20:36

A severe flaw in the W3 Total Cache plugin installed on more than one million WordPress sites could give attackers access to various information, including metadata on cloud-based apps. [...]

Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M
2025-01-16 17:32

That's in addition to the $4.5M fine paid to three state AGs last year Enzo Biochem has settled a consolidated class-action lawsuit relating to its 2023 ransomware incident for $7.5 million.…

Over 660,000 Rsync servers exposed to code execution attacks
2025-01-15 17:00

Over 660,000 exposed Rsync servers are potentially vulnerable new to six new vulnerabilities, including a critical-severity heap-buffer overflow flaw that could lead to remote code execution. [...]

Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks
2025-01-15 16:03

Microsoft’s monthly patches cover Hyper-V NT Kernel Integration VSPs, Git in Visual Studio, and more.