News

NCC Group found that ransomware attacks fell by 32% in March compared to February, but described this finding as a “red herring”

ETSI’s says new technical specification for securing AI models and systems sets international benchmark

Ofcom’s Protection of Children Codes and Guidance lists 40 new child safety measures for tech firms

Interesting:

The company has released a working rootkit called “Curing” that uses io_uring, a feature built into the Linux kernel, to stealthily perform malicious activities without being caught by many of the detection solutions currently on the market.

At the heart of the issue is the heavy reliance on monitoring system calls, which has become the go-to method for many cybersecurity vendors. The problem? Attackers can completely sidestep these monitored calls by leaning on io_uring instead. This clever method could let bad actors quietly make network connections or tamper with files without triggering the usual alarms.

Here’s the code.

Note the self-serving nature of this announcement: ARMO, the company that released the research and code, has a product that it claims blocks this kind of attack.

After a 180% rise in last year’s report, the exploitation of vulnerabilities continues to grow, now accounting for 20% of all breaches

The FBI found that cybercrime losses climbed by 33% compared to 2023, driven by tactics like investment fraud and BEC

Mandiant’s M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers

The latest ITRC data finds breach volumes remained flat in Q1 but victim numbers increased 26% annually

Marks and Spencer has confirmed that it has been managing a cyber incident for the past few days which affected its contactless payments and click and collect services

Dutch intelligence report warns of growing Russian aggression with hybrid warfare