Weekly News - Apple zero-day used to target iPhones

DeepSeek's popularity exploited by scammers -

February 3, 2024 View in your browser. Help Net Security weekly newsletter Latest news: Week in review: Apple 0-day used to target iPhones, DeepSeek's popularity exploited by scammers Patient monitors with backdoor are sending info to China, CISA warns Deploying AI at the edge: The security trade-offs and how to manage them Platformization is key to reduce cybersecurity complexity Nine out of ten emails are spam Infosec products of the month: January 2025 Cybercrime forums Cracked and Nulled seized, operators arrested SimpleHelp RMM vulnerabilities may have been exploited to breach healthcare orgs Zscaler CISO on balancing security and user convenience in hybrid work environments ExtensionHound: Open-source tool for Chrome extension DNS forensics 89% of AI-powered APIs rely on insecure authentication mechanisms How to use Hide My Email to protect your inbox from spam Zyxel CPE devices under attack via critical vulnerability without a patch (CVE-2024-40891) DeepSeek's popularity exploited by malware peddlers, scammers How Lazarus Group built a cyber espionage empire Preparing financial institutions for the next generation of cyber threats Cybersecurity crisis in numbers Only 13% of organizations fully recover data after a ransomware attack Europeans targeted with new Tor-using backdoor and infostealers Apple zero-day vulnerability exploited to target iPhone users (CVE-2025-24085) BloodyAD: Open-source Active Directory privilege escalation framework 74% of CISOs are increasing crisis simulation budgets Cybersecurity jobs available right now: January 28, 2025 5,000+ SonicWall firewalls still open to attack (CVE-2024-53704) AI security posture management will be needed before agentic AI takes hold Don't let these open-source cybersecurity tools slip under your radar How to use Apple's App Privacy Report to monitor data tracking Videos: SEC and FCA fines: Issues jump Cyber trends set to influence business strategies Industry news: Binarly helps organizations prepare for mandatory transition to PQC standards CyberArk Identity Bridge manages user access and authentication for Linux environments Legit Security unveils root cause remediation capabilities to reduce AppSec risk Oasis Scout empowers security teams to identify attacks on NHIs Swimlane Vulnerability Response Management offers risk-based prioritization authID PrivacyKey protects users' biometric identities Bitwarden centralizes cryptographic key management Absolute Resilience Platform updates improve resilience across endpoints Cyberhaven for AI provides visibility into AI tool usage Barracuda strengthens security capabilities in Email Protection BackBox releases Network Cyber Resilience Platform Leostream Privileged Remote Access secures access to corporate resources ForensicScope Regula 4125 detects counterfeit documents Hiya AI Phone blocks spam and irrelevant calls Compliance Scorecard Version 7 simplifies compliance management for MSPs Silobreaker Tickets empowers intelligence teams with AI-augmented tools Copyright © 2025 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list