Latest Cybersecurity News and Articles
23 April 2025
A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk's Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25-year-old DOGE employee who has worked at a number of Musk's companies.
23 April 2025
Multiple threat activity clusters with ties to North Korea (aka Democratic People's Republic of Korea or DPRK) have been linked to attacks targeting organizations and individuals in the Web3 and cryptocurrency space.
"The focus on Web3 and cryptocurrency appears to be primarily financially motivated due to the heavy sanctions that have been placed on North Korea," Google-owned Mandiant said in
23 April 2025
Identity protection startup AuthMind has announced raising $19.3 million in a seed funding round led by Cheyenne Ventures.
The post AuthMind Raises $19.3 Million in Seed Funding appeared first on SecurityWeek.
23 April 2025
Research reveals mass scanning and exploitation campaigns associated with Proton66.
23 April 2025
Desired Effect provides an ethical vulnerability exchange marketplace to help defenders get ahead of attackers.
The post Ethical Zero Day Marketplace Desired Effect Emerges From Stealth appeared first on SecurityWeek.
23 April 2025
Endor Labs has raised $93 million in a Series B funding round and announced a major expansion of its AppSec platform.
The post Endor Labs Raises $93 Million for AppSec Platform appeared first on SecurityWeek.
23 April 2025
The cash infusion brings Chainguard’s total funding to about $612 million since launching in 2021 and prices the company at $3.5 billion.
The post Chainguard Raises Hefty $356M Series D at $3.5 Billion Valuation appeared first on SecurityWeek.
23 April 2025
The Iran-nexus threat actor known as UNC2428 has been observed delivering a backdoor known as MURKYTOUR as part of a job-themed social engineering campaign aimed at Israel in October 2024.
Google-owned Mandiant described UNC2428 as a threat actor aligned with Iran that engages in cyber espionage-related operations. The intrusion set is said to have distributed the malware through a "complex
23 April 2025
A recent report by KnowBe4 found that the energy sector has faced a rising number of cyberattacks and other threats, specifically within Europe.
23 April 2025
A security researcher has discovered hundreds of leaked secrets by restoring files deleted from GitHub repositories.
The post Files Deleted From GitHub Repos Leak Valuable Secrets appeared first on SecurityWeek.
23 April 2025
Cybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that distributes Android spyware under the guise of the Alpine Quest mapping software.
"The attackers hide this trojan inside modified Alpine Quest mapping software and distribute it in various ways, including through one of the Russian Android app catalogs," Doctor Web said in an
23 April 2025
Israeli runtime application security startups closes a $17 million Series A round led by Florida‑based SYN Ventures and YL Ventures.
The post Miggo Security Banks $17M Series A for ADR Technology appeared first on SecurityWeek.
23 April 2025
Picnic Corporation has rebranded to VanishID and announced the launch of a CEO privacy and security offering.
The post Picnic Corporation Rebrands to VanishID, Raises $10 Million appeared first on SecurityWeek.
23 April 2025
Phishing attacks remain a huge challenge for organizations in 2025. In fact, with attackers increasingly leveraging identity-based techniques over software exploits, phishing arguably poses a bigger threat than ever before.
Attackers are increasingly leveraging identity-based techniques over software exploits, with phishing and stolen credentials (a byproduct of phishing) now the primary
23 April 2025
Multiple suspected Russia-linked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025.
The highly targeted social engineering operations, per Volexity, are a shift from previously documented attacks that leveraged a technique known as device code
23 April 2025
Benefits and payroll solutions provider Kelly Benefits has disclosed a data breach impacting more than 260,000 individuals.
The post Kelly Benefits Data Breach Impacts 260,000 People appeared first on SecurityWeek.
23 April 2025
British retailer Marks & Spencer has been experiencing certain service disruptions after falling victim to a cyberattack.
The post Cyberattack Hits British Retailer Marks & Spencer appeared first on SecurityWeek.
23 April 2025
Massachusetts medical firm Onsite Mammography discloses data breach impacting the personal information of 350,000 patients.
The post Data Breach at Onsite Mammography Impacts 350,000 appeared first on SecurityWeek.
23 April 2025
Cybersecurity startup Terra Security has raised $8 million in seed funding from SYN Ventures, FXP Ventures, and Underscore VC.
The post Terra Security Raises $8M for Agentic AI Penetration Testing Platform appeared first on SecurityWeek.
23 April 2025
SK Telecom, South Korea’s largest telecom company, disclosed a data leak involving a malware infection.
The post Korean Telco Giant SK Telecom Hacked appeared first on SecurityWeek.