PrivaraseDaily

CyberSecurity News

News

Russian Cyber Espionage Group APT29 Deploys New GRAPELOADER Malware Against European Diplomats

Lazarus Group Targets Six South Korean Firms in Sophisticated Cyberattack Campaign

April 25, 2025

The Lazarus Group, linked to North Korea, targeted six South Korean companies in a cyberattack using zero-day vulnerabilities and advanced malware. The campaign, known as "Operation SyncHole," exploited flaws in popular software like Cross EX and Innorix Agent to infiltrate networks. Kaspersky warns of ongoing risks and urges stronger cybersecurity defenses.

Docker Malware Campaign Exploits Teneo Web3 Nodes to Illicitly Earn Cryptocurrency

April 23, 2025

A new malware campaign is exploiting Docker environments to fake participation on the Teneo Web3 network, earning $TENEO tokens by sending fake “heartbeat” signals. Unlike typical cryptojacking, it avoids mining software to stay under the radar. Researchers urge users to secure Docker configs and monitor for suspicious activity.

North Korean Hackers Exploit Python Projects to Target Crypto Developers

April 16, 2025

A North Korean hacking group, Slow Pisces, is targeting cryptocurrency developers through fake job offers on LinkedIn. Victims are tricked into downloading Python projects from GitHub that deploy malware on macOS systems. The malware, RN Loader and RN Stealer, collects sensitive data like iCloud Keychain info and SSH keys. Experts warn developers to be cautious with unsolicited job offers and unknown code sources.

Zero-Day Exploit Targeting Fortinet Firewalls Surfaces on Dark Web: Serious Security Risk for Global Networks

April 14, 2025

A zero-day exploit targeting Fortinet’s FortiGate firewalls has appeared on the dark web, allowing attackers to gain full access without credentials. The flaw enables remote code execution and access to sensitive data like user credentials, 2FA settings, and firewall rules. With over 300,000 devices at risk, experts warn of major security threats and urge immediate patching and stronger access controls.