EU Commission to Invest €1.3bn in Cybersecurity and AI
The Strategic Technologies for Europe Platform (STEP), an EU-wide mechanism launched in 2024 to support tech initiatives, is set to drive innovation further by introducing the STEP Seal, a quality label that will be awarded to promising projects.
Cyber_Security_Channel
The Strategic Technologies for Europe Platform (STEP), an EU-wide mechanism launched in 2024 to support tech initiatives, is set to drive innovation further by introducing the STEP Seal, a quality label that will be awarded to promising projects.
Cyber_Security_Channel
Infosecurity Magazine
EU Commission to Invest €1.3bn in Cybersecurity and AI
The funding will go to several projects within the Digital Europe Programme (DIGITAL) work program for 2025 to 2027
👍3
NetSTAR Strengthens Leadership in Encrypted Traffic Categorization of URLs, Web Applications and Internet Threat Intelligence
The latest advancements to NetSTAR's encrypted traffic intelligence capabilities further enhance what's already regarded as one of the most effective and scalable solutions in the industry.
By leveraging advanced AI models, real-time behavioral analysis, and NetSTAR's unmatched global telemetry, OEM partners can confidently classify encrypted traffic of URLs, IP addresses, and web applications without relying on outdated inspection techniques.
Cyber_Security_Channel
The latest advancements to NetSTAR's encrypted traffic intelligence capabilities further enhance what's already regarded as one of the most effective and scalable solutions in the industry.
By leveraging advanced AI models, real-time behavioral analysis, and NetSTAR's unmatched global telemetry, OEM partners can confidently classify encrypted traffic of URLs, IP addresses, and web applications without relying on outdated inspection techniques.
Cyber_Security_Channel
PR Newswire
NetSTAR Strengthens Leadership in Encrypted Traffic Categorization of URLs, Web Applications and Internet Threat Intelligence
/PRNewswire/ -- NetSTAR, the global leader in OEM URL and IP Address categorization and reputation, web application intelligence and reputation, and internet...
👍3
Two Healthcare Orgs Hit by Ransomware Confirm Data Breaches Impacting Over 100,000
The Medusa ransomware group announced hacking Bell Ambulance in early March, claiming to have stolen more than 200 Gb of data from its systems.
The second healthcare organization to confirm a data breach impacting more than 100,000 people is Birmingham, AL-based ophthalmology practice Alabama Ophthalmology Associates.
Cyber_Security_Channel
The Medusa ransomware group announced hacking Bell Ambulance in early March, claiming to have stolen more than 200 Gb of data from its systems.
The second healthcare organization to confirm a data breach impacting more than 100,000 people is Birmingham, AL-based ophthalmology practice Alabama Ophthalmology Associates.
Cyber_Security_Channel
SecurityWeek
Two Healthcare Orgs Hit by Ransomware Confirm Data Breaches Impacting Over 100,000
Bell Ambulance and Alabama Ophthalmology Associates have suffered data breaches affecting over 100,000 people after being targeted in ransomware attacks.
👍4❤2
Paper Werewolf Threat Actor Targets Flash Drives With New Malware
The threat actor has been singling out organizations in mass media, telecommunications, construction, government entities, and energy sectors from July to December of 2024 before shifting its tactics with the introduction of PowerModul, according to Kaspersky researchers.
Cyber_Security_Channel
The threat actor has been singling out organizations in mass media, telecommunications, construction, government entities, and energy sectors from July to December of 2024 before shifting its tactics with the introduction of PowerModul, according to Kaspersky researchers.
Cyber_Security_Channel
Dark Reading
Paper Werewolf Targets Flash Drives With New Malware
The threat actor, also known as Goffee, has been active since at least 2022 and has changed its tactics and techniques over the years while targeting Russian organizations.
❤8👍2
👨💻 SOCs waste hours on manual triage & slow response times
Gain better visibility into threats, speed up incident response, and improve team coordination with ANY.RUN Interactive Sandbox.
Join ANY.RUN's free webinar to explore actionable strategies for your SOC 🚀
📅 Wednesday, May 14
Register here click this link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
Gain better visibility into threats, speed up incident response, and improve team coordination with ANY.RUN Interactive Sandbox.
Join ANY.RUN's free webinar to explore actionable strategies for your SOC 🚀
📅 Wednesday, May 14
Register here click this link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤6🔥6👏4
Coinbase Warns of Up to $400 Million Hit From Cyberattack
The company received an email from an unknown threat actor on May 11, claiming to have information about certain customer accounts as well as internal documents.
While some data — including names, addresses and emails — was stolen, the hackers did not get access to login credentials or passwords, Coinbase said.
It would, however, reimburse customers who were tricked into sending funds to the attackers.
@Cyber_Security_Channel
The company received an email from an unknown threat actor on May 11, claiming to have information about certain customer accounts as well as internal documents.
While some data — including names, addresses and emails — was stolen, the hackers did not get access to login credentials or passwords, Coinbase said.
It would, however, reimburse customers who were tricked into sending funds to the attackers.
@Cyber_Security_Channel
👍5🔥3
Play Ransomware Group Used Windows Zero-Day
During the attack, the Balloonfly operators deployed a variety of samples and hacktools in addition to the Grixba infostealer and the exploit for CVE-2025-29824 on this machine," the security vendor noted.
"Some of the samples aren't available to us at the moment of writing, but they were located in the Music folder with suspicious names masquerading as Palo Alto software (paloaltoconfig.exe, paloaltoconfig.dll) or, for example, 1day.exe.
Cyber_Security_Channel
During the attack, the Balloonfly operators deployed a variety of samples and hacktools in addition to the Grixba infostealer and the exploit for CVE-2025-29824 on this machine," the security vendor noted.
"Some of the samples aren't available to us at the moment of writing, but they were located in the Music folder with suspicious names masquerading as Palo Alto software (paloaltoconfig.exe, paloaltoconfig.dll) or, for example, 1day.exe.
Cyber_Security_Channel
Dark Reading
Play Ransomware Group Used Windows Zero-Day
Previously, Microsoft reported that Storm-2460 had also used the privilege escalation bug to deploy ransomware on organizations in several countries.
🔥7⚡2👍2❤1
🎉 ANY.RUN Turns 9 — Claim Your Special Offer!
Grab extra Sandbox licenses or double the TI Lookup search request quota.
— Reduce incident response costs
— Get control over the privacy
— Improve SOC efficiency
➡️ Hurry up to get ANY.RUN's Birthday deals.
*Ending May 31st → here is the link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
Grab extra Sandbox licenses or double the TI Lookup search request quota.
— Reduce incident response costs
— Get control over the privacy
— Improve SOC efficiency
➡️ Hurry up to get ANY.RUN's Birthday deals.
*Ending May 31st → here is the link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤8👍3🔥2
Forget the Stack; Focus on Control
This debt doesn't happen overnight. It builds slowly:
— Outdated tools
— Incomplete configurations
— Assumptions that controls are working
It's not caused by negligence. It's the cost of business priorities moving faster than security can adapt.
Cyber_Security_Channel
This debt doesn't happen overnight. It builds slowly:
— Outdated tools
— Incomplete configurations
— Assumptions that controls are working
It's not caused by negligence. It's the cost of business priorities moving faster than security can adapt.
Cyber_Security_Channel
Dark Reading
Forget the Stack; Focus on Control
Security teams are under more pressure than ever — and cybersecurity debt is adding fuel to the fire. While it can't be eliminated overnight, it can be managed.
👍5❤2
Phony Hacktivist Pleads Guilty to Disney Data Leak
In 2024, a hacker group called NullBulge posted on a hacking forum that it had stolen 1.1TB of data from Disney's internal Slack channels.
This prompted Disney to launch an investigation into the matter, which allegedly involved information on unreleased projects as well as source code and login credentials.
Cyber_Security_Channel
In 2024, a hacker group called NullBulge posted on a hacking forum that it had stolen 1.1TB of data from Disney's internal Slack channels.
This prompted Disney to launch an investigation into the matter, which allegedly involved information on unreleased projects as well as source code and login credentials.
Cyber_Security_Channel
Dark Reading
Phony Hacktivist Pleads Guilty to Disney Data Leak
After stealing sensitive data from Disney, Ryan Mitchell Kramer claimed to be part of a Russian hacktivist group protecting artists' rights and ensuring they receive fair compensation for their work.
👍10❤1
Nova Scotia Power Confirms Ransomware Attack, 280k Notified of Data Breach
In the latest update, shared on its website on May 23, Nova Scotia Power confirmed that it has been targeted in what it described as a “sophisticated ransomware attack”.
“No payment has been made to the threat actor,” the utility clarified.
“This decision reflects our careful assessment of applicable sanctions laws and alignment with law enforcement guidance.”
Cyber_Security_Channel
In the latest update, shared on its website on May 23, Nova Scotia Power confirmed that it has been targeted in what it described as a “sophisticated ransomware attack”.
“No payment has been made to the threat actor,” the utility clarified.
“This decision reflects our careful assessment of applicable sanctions laws and alignment with law enforcement guidance.”
Cyber_Security_Channel
SecurityWeek
Nova Scotia Power Confirms Ransomware Attack, 280k Notified of Data Breach
Nova Scotia Power has finally admitted that the recent cyberattack was a ransomware attack, but it hasn’t paid the hackers.
👍8❤1
Czech Government Condemns Chinese Hack on Critical Infrastructure
The Government of the Czech Republic strongly condemns this malicious cyber campaign against its critical infrastructure,” the statement read.
“Such behavior undermines the credibility of the People’s Republic of China and contradicts its public declarations.
Cyber_Security_Channel
The Government of the Czech Republic strongly condemns this malicious cyber campaign against its critical infrastructure,” the statement read.
“Such behavior undermines the credibility of the People’s Republic of China and contradicts its public declarations.
Cyber_Security_Channel
SecurityWeek
Czech Government Condemns Chinese Hack on Critical Infrastructure
The Czech government issues a blunt warning to China after APT31 hackers linked to intrusion at critical infrastructure network.
❤4😁3
'Everest Group' Extorts Global Orgs via SAP's HR Tool
Besides Coca-Cola, Everest's most notable May victims have been the Mediclinic Group.
It's a multibillion-dollar hospital group managing locations in Namibia, South Africa, Switzerland, and the United Arab Emirates (UAE).
Additionally, the Department of Tourism and Culture in Abu Dhabi (DCTA).
It has also struck smaller outfits, like the Brooklyn-based medical imaging company PDI Health and a small bank based in Jordan called Jordan Kuwait Bank.
Cyber_Security_Channel
Besides Coca-Cola, Everest's most notable May victims have been the Mediclinic Group.
It's a multibillion-dollar hospital group managing locations in Namibia, South Africa, Switzerland, and the United Arab Emirates (UAE).
Additionally, the Department of Tourism and Culture in Abu Dhabi (DCTA).
It has also struck smaller outfits, like the Brooklyn-based medical imaging company PDI Health and a small bank based in Jordan called Jordan Kuwait Bank.
Cyber_Security_Channel
Dark Reading
'Everest Group' Extorts Global Orgs via SAP's HR Tool
In addition to Coca-Cola, entities in Abu Dhabi, Jordan, Namibia, South Africa, and Switzerland are experiencing extortion attacks, all involving stolen SAP SuccessFactor data.
❤9
F5 Acquires Fletch, a San Francisco Cybersecurity Start-Up that Helps Companies Flag Threats
Seattle-based application delivery and security giant F5 has acquired Fletch, a San Francisco startup founded in 2020 that uses AI to help companies spot threats and reduce alert fatigue. Terms of the deal were not disclosed.
Cyber_Security_Channel
Seattle-based application delivery and security giant F5 has acquired Fletch, a San Francisco startup founded in 2020 that uses AI to help companies spot threats and reduce alert fatigue. Terms of the deal were not disclosed.
Cyber_Security_Channel
GeekWire
F5 acquires Fletch, a San Francisco cybersecurity startup that helps companies flag threats
Seattle-based application delivery and security giant F5 has acquired Fletch, a San Francisco startup founded in 2020 that uses AI to help companies spot
👍4❤1
Trump Executive Order Takes Steps to Protect Domestic Hackers From Blowback
The Trump administration announced Friday it is amending “problematic elements” of two landmark cybersecurity executive orders — though the extent of the changes in many cases appears modest.
The modifications are part of a new executive order signed Friday by President Donald Trump.
The full text of the EO was released Friday afternoon, and the Trump administration first outlined details of the order in a White House fact sheet.
Cyber_Security_Channel
The Trump administration announced Friday it is amending “problematic elements” of two landmark cybersecurity executive orders — though the extent of the changes in many cases appears modest.
The modifications are part of a new executive order signed Friday by President Donald Trump.
The full text of the EO was released Friday afternoon, and the Trump administration first outlined details of the order in a White House fact sheet.
Cyber_Security_Channel
POLITICO
Trump executive order takes steps to protect domestic hackers from blowback
The new order, signed Friday, would overrule elements of previous cyber policy measures signed by former Presidents Joe Biden and Barack Obama.
😁4
BADBOX 2.0 Targets Home Networks in Botnet Campaign, FBI Warns
BADBOX 2.0 also comes preinstalled on many devices, but it can also infect devices by requiring the user to download malicious apps from unofficial marketplaces.
While the FBI's public service announcement did not name specific device manufacturers, Human Security's report noted the infected products include Android Open Source Project devices (not Android TV or Google Play Protect certified devices) and were manufactured in China.
Cyber_Security_Channel
BADBOX 2.0 also comes preinstalled on many devices, but it can also infect devices by requiring the user to download malicious apps from unofficial marketplaces.
While the FBI's public service announcement did not name specific device manufacturers, Human Security's report noted the infected products include Android Open Source Project devices (not Android TV or Google Play Protect certified devices) and were manufactured in China.
Cyber_Security_Channel
Dark Reading
BADBOX 2.0 Targets Home Networks, FBI Warns
Though the operation was partially disrupted earlier this year, the botnet remains active and continues to target connected Android devices.
❤6👍3
‘EchoLeak’ AI Attack Enabled Theft of Sensitive Data via Microsoft 365 Copilot
The user does not need to open the malicious email or click on any links.
The exploit, which Aim Security described as indirect prompt injection, is triggered when the victim asks Copilot for information referenced in the malicious email.
That is when Copilot executes the attacker’s instructions to collect information previously provided by the victim and send it to the attacker.
Cyber_Security_Channel
The user does not need to open the malicious email or click on any links.
The exploit, which Aim Security described as indirect prompt injection, is triggered when the victim asks Copilot for information referenced in the malicious email.
That is when Copilot executes the attacker’s instructions to collect information previously provided by the victim and send it to the attacker.
Cyber_Security_Channel
SecurityWeek
‘EchoLeak’ AI Attack Enabled Theft of Sensitive Data via Microsoft 365 Copilot
Microsoft recently patched CVE-2025-32711, a vulnerability that could have been used for zero-click attacks to steal data from Copilot.
😨11❤6
👨💻 Drive Faster Triage and Response in Your SOC
Made possible with real-time sandbox analysis from @anyrun_app.
The process is super simple:
Sign up with your business Email.
Click the following link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
Made possible with real-time sandbox analysis from @anyrun_app.
The process is super simple:
Sign up with your business Email.
Click the following link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤7👍4🔥3👎1