????????? ???? ???? ?? ??? ?? ????? ????, ????????? ???? ?? ??? ?? ????? 100% ?? ??? ????! Do defenders really have to get it right 100% of the time though? ? I’ve heard this phrase so often over the last decade and sometimes by people who should know better, ??’? ???? ?? ???? ??… The post Attackers only have to get it right once: Defenders 100% of the time! first appeared on Cyooda Security ..read more

Belgian and Dutch authorities have arrested eight suspects in connection with a "phone phishing" gang that primarily operated out of the Netherlands with an aim to steal victims' financial data and funds. As part of the international operation, law enforcement agencies carried out 17 searches in different locations in Belgium and the Netherlands, Europol said. In addition, large amounts of cash, The post Phone Phishing Gang Busted: Eight Arrested in Belgium and Netherlands first appeared on Cyooda Security ..read more

​Artivion, a leading manufacturer of heart surgery medical devices, has disclosed a November 21 ransomware attack that disrupted its operations and forced it to take some systems offline. [...] The post Ransomware attack hits leading heart surgery device maker first appeared on Cyooda Security ..read more

The second zero-day vulnerability found in Windows NTLM in the past two months paves the way for relay attacks and credential theft. Microsoft has no patch, but released updated NTLM cyberattack mitigation advice. The post Microsoft NTLM Zero-Day to Remain Unpatched Until April first appeared on Cyooda Security ..read more

The threat actors linked to the Black Basta ransomware have been observed switching up their social engineering tactics, distributing a different set of payloads such as Zbot and DarkGate since early October 2024. "Users within the target environment will be email bombed by the threat actor, which is often achieved by signing up the user's email to numerous mailing lists simultaneously," Rapid7 The post Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering first appeared on Cyooda Security ..read more

Details have emerged about a now-patched security flaw in the DeepSeek artificial intelligence (AI) chatbot that, if successfully exploited, could permit a bad actor to take control of a victim's account by means of a prompt injection attack. Security researcher Johann Rehberger, who has chronicled many a prompt injection attack targeting various AI tools, found that providing the input "Print The post Researchers Uncover Prompt Injection Vulnerabilities in DeepSeek and Claude AI first appeared on Cyooda Security ..read more

​The Termite ransomware gang has officially claimed responsibility for the November breach of software as a service (SaaS) provider Blue Yonder. [...] The post Blue Yonder SaaS giant breached by Termite ransomware gang first appeared on Cyooda Security ..read more

The European Union has enacted two new laws to bolster its cybersecurity defenses and coordination mechanisms. The measures, part of the cybersecurity legislative package, include the Cyber Solidarity Act and amendments to the Cybersecurity Act (CSA). These steps aim to improve the EU’s ability to detect, prepare for, and respond to cyber threats while fostering uniformity in managed security services, the Council of the EU said in a statement. “In view of the fast-evolving threat landscape, the threat of possible large-scale cybersecurity incidents causing significant disruption or damage to ..read more

Storm-1811's latest help desk scam begins with email bombing leading to IT impersonation and ends with Black Basta ransomware  The post Storm-1811 exploits RMM tools to drop Black Basta ransomware first appeared on Cyooda Security ..read more

Chalk up another win for global cooperation among law enforcement, this time targeting seven types of cyber fraud, including voice phishing and business email compromise. The post Interpol Cyber-Fraud Action Nets More Than 5K Arrests first appeared on Cyooda Security ..read more