SecurityWeek

Explore industry moves and significant changes in the industry for the week of April 14, 2025. Stay updated with the latest industry trends and shifts.

Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers.

The post Malicious NPM Packages Target Cryptocurrency, PayPal Users appeared first on SecurityWeek.

The CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices.

The post Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle appeared first on SecurityWeek.

The hackers who posted the documents on Telegram said the attack was in response to alleged Moroccan “harassment” of Algeria on social media platforms.

The post Hackers Breach Morocco’s Social Security Database appeared first on SecurityWeek.

A vulnerability in the OttoKit WordPress plugin with over 100,000 active installations has been exploited in the wild.

The post Vulnerability in OttoKit WordPress Plugin Exploited in the Wild appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Scattered Spider still active despite arrests, hacker known as EncryptHub unmasked, Rydox admins extradited to US. 

The post In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions appeared first on SecurityWeek.

SonicWall has released fixes for three vulnerabilities in NetExtender for Windows, including a high-severity bug.

The post SonicWall Patches High-Severity Vulnerability in NetExtender appeared first on SecurityWeek.

Laboratory Services Cooperative says the personal and medical information of 1.6 million was stolen in an October 2024 data breach.

The post 1.6 Million People Impacted by Data Breach at Laboratory Services Cooperative appeared first on SecurityWeek.

In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure.

The post China Admitted to US That It Conducted Volt Typhoon Attacks: Report appeared first on SecurityWeek.

Very few people in the cybersecurity industry do not know, or know of, Bryson Bort. Yes, he’s the CEO/Founder of SCYTHE, but he’s also the co-founder of ICS Village (the next one at RSA Conference from April 28 to May 1, 2025). This event, and all of our industry’s attention on critical infrastructure, is pivotal […]

The post Rising Tides: Bryson Bort on Cyber Entrepreneurship and the Needed Focus on Critical Infrastructure appeared first on SecurityWeek.

Law enforcement agencies in multiple countries have announced the arrests of users of the malicious Smokeloader botnet.

The post Europol Targets Customers of Smokeloader Pay-Per-Install Botnet appeared first on SecurityWeek.

Trump orders a termination of any active security clearances held by Krebs and a suspension of clearances held by individuals at SentinelOne.

The post Trump Revokes Security Clearance for Ex-CISA Director Chris Krebs appeared first on SecurityWeek.

Juniper Networks has patched two dozen vulnerabilities in Junos OS and Junos OS Evolved, and dozens of flaws in Junos Space third-party dependencies.

The post Juniper Networks Patches Dozens of Junos Vulnerabilities appeared first on SecurityWeek.

Routers are the riskiest devices in enterprise networks as they contain the most critical vulnerabilities, a new Forescout report shows.

The post Study Identifies 20 Most Vulnerable Connected Devices of 2025 appeared first on SecurityWeek.

GitHub security campaigns make it easier for developers and security teams to collaborate on fixing vulnerabilities in their applications.

The post GitHub Announces General Availability of Security Campaigns appeared first on SecurityWeek.

Researchers find vulnerabilities that can be exploited to remotely take control of a Nissan Leaf’s functions, including physical controls.

The post Nissan Leaf Hacked for Remote Spying, Physical Takeover appeared first on SecurityWeek.

Sensata has informed the SEC that shipping, manufacturing and other operations have been impacted by a ransomware attack.

The post Operations of Sensor Giant Sensata Disrupted by Ransomware Attack appeared first on SecurityWeek.

CAPTCHA-evading Python framework AkiraBot has spammed over 80,000 websites with AI-generated spam messages.

The post ‘AkiraBot’ Spammed 80,000 Websites With AI-Generated Messages appeared first on SecurityWeek.

Google plans to unleash automated AI agents into overtaxed SOCs to reduce the manual workload for cybersecurity investigators.

The post Google Targets SOC Overload With Automated AI Alert and Malware Analysis Tools appeared first on SecurityWeek.

The greatest security policies in the world are useless if enterprises don’t have a reasonable, consistent, and reliable way to implement them.

The post Groucho’s Wit, Cloud Complexity, and the Case for Consistent Security Policy appeared first on SecurityWeek.