News

Wed 10 Sep 2025· 89 articles

1. 00:34

   HHS Releases Updated Security Risk Assessment Tool

   The U.S. Department of Health and Human Services Office for Civil Rights (OCR) and the Assistant Secretary for Technology Policy (ASTP) have released version 3.6 of the Security Risk Assessment (SRA) Tool. According to HHS, live webinars are being hosted on…

   DataBreaches
2. 00:25

   Securing Google Gemini in GitHub Actions with Harden-Runner

   Ashish Kurmi’s post, published on 9 September 2025, explains how to secure Google Gemini in GitHub Actions by pairing observability with Harden-Runner’s runtime monitoring. It notes that Gemini’s hybrid approach provides native observability via Google Cloud…

   StepSecurity
3. 00:23

   CVE-2025-40804: Critical Flaw in Siemens SIVaaS Exposes Network Share Without Authentication

   On 10 September 2025, Siemens disclosed a critical security vulnerability (CVE-2025-40804) in its SIMATIC Virtualization as a Service (SIVaaS) platform, rated CVSS 9.1. The flaw exposes a network share without authentication, potentially allowing attackers…

   SecurityOnline
   
4. 00:20

   Deepfakes and Deception: A New AI Scam Network Is Targeting India

   Threat intelligence researchers at RedHunt Labs have uncovered a sprawling network of AI-driven scams on Facebook and Instagram, using deepfakes, counterfeit news sites and fake celebrity endorsements to lure Indian users into fraudulent investment schemes.…

   SecurityOnline
   
5. 00:16

   Critical Flaws in Hiawatha Web Server Could Allow Authentication Bypass and RCE

   According to CERT/CC, three serious flaws in the Hiawatha web server could allow authentication bypass, session hijacking and remote code execution. The first vulnerability, CVE-2025-57783, is a request smuggling flaw caused by improper header parsing in the…

   SecurityOnline
6. 00:13

   GONEPOSTAL: New Outlook Backdoor by Russia’s APT28 Uses Email for C2

   Kroll has identified a new espionage campaign attributed to Russia’s APT28 (Fancy Bear), involving a custom Outlook macro backdoor called GONEPOSTAL that uses a covert email-based command-and-control channel. The intrusion began with two DLLs, SSPICLI[.]dll…

   SecurityOnlineAPT28
7. 00:10

   Lazarus Group Is Exploiting CVE-2025-48384 in New Phishing Campaign

   Lazarus Group is exploiting CVE-2025-48384 in a new phishing campaign, according to KuCoin’s security team, which identifies fresh operations from the North Korean state‑sponsored threat actor (APT38) targeting financial institutions and cryptocurrency…

   SecurityOnlineLazarus Group
8. 00:05

   Beyond Cryptominers: A New Malware Strain Is Hijacking Exposed Docker APIs

   Akamai has uncovered a new malware strain that hijacks exposed Docker APIs, marking a shift from earlier cryptomining-focused campaigns to broader infection capabilities, including persistence, port blocking, and potential botnet groundwork. The lineage…

   SecurityOnline
   
9. 00:01

   APT37 Expands Arsenal with Rustonotto Backdoor, PowerShell Chinotto, and FadeStealer

   Zscaler ThreatLabz has uncovered North Korean-aligned threat actor APT37 (also known as ScarCruft, Ruby Sleet, or Velvet Chollima) expanding its arsenal with Rustonotto, a Rust-based backdoor first observed in June 2025, alongside Chinotto, a…

   SecurityOnlineAPT37