TheNde
Seguridad· · 2 min

Malware Attacks on the Rise.

Today's cybersecurity news highlights the escalating threats from malware and ransomware, along with significant vulnerabilities flagged by CISA. Meanwhile, tech giants are investing heavily in open source security and new deceptive technologies. It's a wild landscape out there — and staying informed is more crucial than ever.

En resumen
  1. Malware Attacks on the Rise
  2. Critical Vulnerabilities Exposed
  3. Big Investments in Security
01 · Seguridad

Malware Attacks on the Rise

Cyber threats are evolving rapidly.
Cyber threats are evolving rapidly.

Konni's latest phishing campaign is deploying EndRAT via KakaoTalk, showcasing how attackers use social engineering to infiltrate systems. Meanwhile, the LeakNet ransomware gang is employing stealthy techniques like Deno in-memory loaders to evade detection. These developments underline the need for robust security measures across organizations.

02 · Seguridad

Critical Vulnerabilities Exposed

Be proactive about vulnerabilities.
Be proactive about vulnerabilities.

CISA has flagged a year-old Wing FTP vulnerability as actively exploited, urging immediate action from federal agencies. This serves as a stark reminder that many organizations are still vulnerable to known flaws that could be exploited at any moment. Companies must prioritize patch management to stay ahead of potential breaches.

03 · Seguridad

Big Investments in Security

Investment in security is a smart move.
Investment in security is a smart move.

Tech giants have pooled $12.5 million to enhance open source security through the Linux Foundation. This funding aims to address the growing vulnerabilities in the open source ecosystem, especially as AI accelerates the speed of vulnerability discovery. It’s a significant move to ensure that the backbone of modern software remains secure.

Cifras clave
87%

Percentage of organizations reporting API-related security incidents last year.

Fuente
$12.5 million

Funding raised to enhance open source security efforts.

Fuente
258

Average number of API attacks per organization, up 113% from 2024.

Fuente
Destacados
Schneier on Security

South Korean Police Accidentally Post Cryptocurrency Wallet Password

A blunder by South Korean authorities led to the exposure of a cryptocurrency wallet password, enabling swift theft of $4.4 million in assets. This incident highlights the critical importance of operational security.

SecurityWeek

AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks

Akamai's report unveils a concerning trend: DDoS attacks are evolving and converging with API attacks, amplifying the threat landscape. As cybercriminals become more sophisticated, organizations must adapt their defenses accordingly.

Enlaces rápidos
  1. Free parking in Russia after DDoS attack knocks city's system offlineA DDoS attack in Perm, Russia, led to a temporary free parking for residents as the city's payment system was overwhelmed. — Bitdefender
  2. Robotic Surgery Giant Intuitive Discloses CyberattackIntuitive, a major player in robotic surgery, reported a cyberattack resulting in a data breach but maintained operational integrity. — SecurityWeek
  3. UK Companies House Exposed Details of Millions of FirmsA vulnerability at UK Companies House exposed sensitive information of millions of firms. — SecurityWeek
  4. Android OS-Level Attack Bypasses Mobile Payment SecurityA new Android attack technique allows attackers to hijack payment apps without altering their code. — Infosecurity Magazine
  5. Google, Meta, Microsoft Among Signatories of Pact to Combat ScamsTech giants signed an accord to combat online scams and improve user safety. — SecurityWeek