Remove 2025 Remove Government Remove Security
article thumbnail

Government contractor Conduent disclosed a data breach

Security Affairs

The business services provider Conduent told the SEC a January cyberattack exposed personal data, including names and Social Security numbers. The business services provider Conduent revealed that personal information, including names and Social Security numbers, was stolen in a January cyberattack.

article thumbnail

CERT-UA reports attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware

Security Affairs

The Computer Emergency Response Team of Ukraine (CERT-UA) reported three cyberattacks in March 2025 targeting Ukrainian agencies and infrastructure to steal sensitive data. Notably, from 2025 onwards, the screenshot functionality shifted to being powered by PowerShell. This activity is tracked under the identifier UAC-0219.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CERT-UA warns of cyber espionage against the Ukrainian defense industry using Dark Crystal RAT

Security Affairs

In March 2025, threat actors distributed archived messages through Signal. The Ukrainian government experts noticed that some messages were sent from compromised contacts to increase trust. The archive contains a fake PDF report and DarkTortilla malware, which acts as a launcher for the Dark Crystal RAT ( DCRat ).

article thumbnail

FBI deleted China-linked PlugX malware from over 4,200 US computers

Security Affairs

According to court documents, the Chinese government paid Mustang Panda to develop PlugX malware, used since 2014 to target U.S., 3, 2025, thereby concluding the U.S. The malware was operated by a China-linked threat actor, known as Mustang Panda (aka Twill Typhoon, to steal sensitive information from victim computers. systems. .

article thumbnail

Hertz disclosed a data breach following 2024 Cleo zero-day attack

Security Affairs

On February 10, 2025, we confirmed that Hertz data was acquired by an unauthorized third party that we understand exploited zero-day vulnerabilities within Cleos platform in October 2024 and December 2024.” Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability CVE-2024-50623 (CVSS score 8.8),which

article thumbnail

26 Cyber Security Stats Every User Should Be Aware Of in 2024

Security Affairs

26 key cyber security stats for 2024 that every user should know, from rising cyber crime rates to the impact of AI technolog y. Cyber Skills Gap: By 2025, there could be 3.5 million unfilled cyber security jobs, showing a big need for skilled professionals. trillion annually by 2025, rising by 15% each year.

Security 353
article thumbnail

LW ROUNDTABLE: Compliance pressures intensify as new cybersecurity standards take hold

The Last Watchdog

From the push for quantum-resilient cryptography to Software Bill of Material (SBOM ) requirements aimed at bolstering supply chain security, this installment examines the regulatory changes and evolving technical standards poised to reshape compliance expectations.