Weekly News - APTs have been using zero-day Windows shortcut exploit for eight years

FBI: Free file converter sites and tools deliver malware -

March 24, 2024 View in your browser. Weekly cybersecurity news Latest news: Report: The State of Secrets Sprawl 2025 Week in review: Veeam Backup & Replication RCE fixed, free file converter sites deliver malware 53% of security teams lack continuous and up-to-date visibility Malicious ads target Semrush users to steal Google account credentials NAKIVO Backup & Replication vulnerability exploited by attackers (CVE-2024-48248) The hidden risk in SaaS: Why companies need a digital identity exit strategy AI will make ransomware even more dangerous Scammers cash in on tax season New infosec products of the week: March 21, 2025 Why rooting and jailbreaking make you a target Cybersecurity jobs available right now in the USA: March 20, 2025 Critical Veeam Backup & Replication RCE vulnerability fixed, patch ASAP! (CVE-2025-23120) RansomHub affiliate leverages multi-function Betruger backdoor Kali Linux 2025.1a drops with theme refresh, Kali NetHunter updates 5 pitfalls that can delay cyber incident response and recovery How healthcare CISOs can balance security and accessibility without compromising care Chinese military-linked companies dominate US digital supply chain 70% of leaked secrets remain active two years later Most organizations change policies to reduce CISO liability risk APTs have been using zero-day Windows shortcut exploit for eight years (ZDI-CAN-25373) Moving beyond checkbox security for true resilience Dependency-Check: Open-source Software Composition Analysis (SCA) tool Protecting your iCloud data after Apple's Advanced Data Protection removal in the UK The rise of DAST 2.0 in 2025 How AI and automation are reshaping security leadership Stealthy StilachiRAT steals data, may enable lateral movement FBI: Free file converter sites and tools deliver malware How financial institutions can minimize their attack surface Hackers target AI and crypto as software supply chain risks grow Cybersecurity jobs available right now: March 18, 2025 How to encrypt and secure sensitive files on macOS GitHub project maintainers targeted with fake security alert Review: Cybersecurity Tabletop Exercises IntelMQ: Open-source tool for collecting and processing security feeds Videos: Pay, fight, or stall? The dilemma of ransomware negotiations Industry news: SlashNext's URL analysis tool identifies malicious behavior Vanta strengthens collaboration between security and GRC teams 1Kosmos 1Key secures shared login environments and OT systems Elastic expands partnership with Tines to scale security operations Cloudforce One threat events platform provides a real-time view of threat activity Cytex AICenturion protects against data exfiltration TXOne Networks Stellar 3.2 helps organizations make informed security choices Keysight AI Insight Brokers accelerates threat detection and response Outseer introduces Behavioral Biometrics capability Orion Security emerges from stealth to combat insider threats with AI CyCognito improves security operations automation and risk visibility Whistic announces next generation of Assessment Copilot Google to acquire Wiz for $32 billion CISO Global launches AI-driven cloud security solution Cloudflare boosts defenses against future quantum threats Bedrock Security's metadata lake technology strengthens data security Copyright © 2025 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list