• Russian cybercrooks exploiting 7-Zip zero-day vulnerability (CVE-2025-0411)
  • Crypto-stealing iOS, Android malware found on App Store, Google Play
  • The overlooked risks of poor data hygiene in AI-driven organizations
  • DeepSeek’s popularity exploited to push malicious packages via PyPI
  • Ransomware payments plummet as more victims refuse to pay
  • What you can do to prevent workforce fraud
  • Suspected NATO, UN, US Army hacker arrested in Spain
  • The hidden dangers of a toxic cybersecurity workplace
  • Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968)
  • BadDNS: Open-source tool checks for subdomain takeovers
  • Swap EOL Zyxel routers, upgrade Netgear ones!
  • OpenNHP: Cryptography-driven zero trust protocol
  • Casio UK site compromised, equipped with web skimmer
  • Self-sovereign identity could transform fraud prevention, but…
  • Attackers compromise IIS servers by leveraging exposed ASP.NET machine keys
  • The API security crisis and why businesses are at risk
  • More destructive cyberattacks target financial institutions
  • Aim for crypto-agility, prepare for the long haul
  • Only 3% of organizations have a dedicated budget for SaaS security
  • Man charged with stealing $65 million by exploiting DeFI protocols vulnerabilities
  • 8 steps to secure GenAI integration in financial services
  • Cybersecurity jobs available right now: February 4, 2025
  • How to customize Safari for private browsing on iOS
  • How to use iCloud Private Relay for enhanced privacy
  • Why logs aren’t enough: Enhancing SIEM with AI-driven NDR
  • New infosec products of the week: February 7, 2025

考え:この記事は、最新のサイバーセキュリティの脅威やテクノロジーの動向に焦点を当てており、様々なセキュリティ上の問題が取り上げられている。特に、ゼロデイ攻撃やランサムウェアの支払い減少など、組織が直面しているリスクについて重要な議論がされている。

元記事: https://www.helpnetsecurity.com/2025/02/09/week-in-review-exploited-7-zip-0-day-flaw-crypto-stealing-malware-found-on-app-store-google-play/