News for March 23, 2025

News for March 23, 2025

By I_g_o_r | Some news | 22 Mar 2025


Cybersecurity Alert Warns of 300 Attacks with 'Medusa' Ransomware

https://yro.slashdot.org/story/25/03/15/2055230/cybersecurity-alert-warns-of-300-attacks-with-medusa-ransomware

 

Hacker steals $8.4M from RWA restaking protocol Zoth

https://cointelegraph.com/news/zoth-exploit-admin-leak-causes-8m-losses

 

Password reuse is rampant: nearly half of observed user logins are compromised

https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/

 

Robinhood partners with Kalshi to launch a prediction markets hub in the US for retail traders

https://www.bloomberg.com/news/articles/2025-03-17/robinhood-unveils-prediction-markets-hub-for-us-retail-traders

 

Millions of RSA Keys Exposed, Revealing Serious Exploitable Flaws

https://gbhackers.com/millions-of-rsa-keys-exposed/

 

Data breach at SpyX stalkerware exposes millions of iPhone users

https://www.androidheadlines.com/2025/03/spyx-stalkerware-data-breach-exposes-millions-iphone-users.html

 

Oracle denies breach after hacker claims theft of 6 million data records

https://www.bleepingcomputer.com/news/security/oracle-denies-data-breach-after-hacker-claims-theft-of-6-million-data-records/

 

11 Nation-State Hackers Exploit Unpatched Windows Flaw Since 2017

https://hackread.com/nation-state-hackers-exploit-windows-unpatched-flaw-2017/

 

Chinese Hacking Group MirrorFace Targeting Europe

https://www.securityweek.com/chinese-hacking-group-mirrorface-targeting-europe/

 

The “free money” trap: How scammers exploit financial anxiety

https://www.malwarebytes.com/blog/scams/2025/03/the-free-money-trap-how-scammers-exploit-financial-anxiety

 

Confiscation Fears Rise as New Policy Targets Private Savings

https://www.zerohedge.com/news/2025-03-20/confiscation-fears-rise-new-policy-targets-private-savings

 

Microsoft isn't fixing 8-year-old shortcut exploit abused for spying

https://www.theregister.com/2025/03/18/microsoft_trend_flaw/

 

Sophisticated crypto address poisoning scams drain $1.2M in March

https://cointelegraph.com/news/address-poisoning-scams-cost-crypto-users-1-2m-march-2025

 

Threat Actors Steal 3.2 Billion Login Credentials and Infect 23 Million Devices Worldwide

https://gbhackers.com/threat-actors-steal-3-2-billion-login-credentials/

 

Linux Repair Cafes in Amsterdam starting in April

https://www.reddit.com/r/linux/comments/1jgd3nh/linux_repair_cafes_in_amsterdam_starting_in_april/

 

Malicious Code Hits ‘tj-actions/changed-files’ in 23,000 GitHub Repos

https://hackread.com/malicious-code-in-tj-actions-changed-files-github-repos/

 

Paragon spyware deployed against journalists and activists, Citizen Lab claims

https://www.theregister.com/2025/03/21/paragon_spyx_hacked/

 

Cybersecurity officials warn against potentially costly Medusa ransomware attacks

https://techxplore.com/news/2025-03-cybersecurity-potentially-medusa-ransomware.html#google_vignette

 

Tattoos Could Be a Hidden Cancer Risk, Study of Twins Finds

https://gizmodo.com/tattoos-could-be-a-hidden-cancer-risk-study-of-twins-finds-2000578684

 

US removes sanctions against Tornado Cash crypto mixer

https://www.bleepingcomputer.com/news/security/us-removes-sanctions-against-tornado-cash-crypto-mixer/

 

A big threat to the gambling world

https://www.businessinsider.com/online-gambling-conference-next-summit-takeaways-ai-predictions-sweepstakes-2025-3

 

Sante PACS Server Flaws Allow Remote Attackers to Download Arbitrary Files

https://gbhackers.com/sante-pacs-server-flaws/

 

Gold Revaluation Clause Imbedded in Bitcoin Strategic Reserve Bill

https://www.youtube.com/watch?v=WZN9nyPJETU

 

Scareware Combined With Phishing in Attacks Targeting macOS Users

https://www.securityweek.com/scareware-combined-with-phishing-in-attacks-targeting-macos-users/

 

Top 10 Passwords Hackers Use to Breach RDP – Is Yours at Risk?

https://hackread.com/top-10-passwords-hackers-use-to-breach-rdp/

 

Irish startup Equal1 unveils world’s first silicon-based quantum computer

https://thenextweb.com/news/irish-startup-equal1-unveils-worlds-first-silicon-based-quantum-computer

 

Critical RCE flaw in Apache Tomcat actively exploited in attacks

https://www.bleepingcomputer.com/news/security/critical-rce-flaw-in-apache-tomcat-actively-exploited-in-attacks/

 

Researchers Reveal macOS Vulnerability Exposing System Passwords

https://gbhackers.com/researchers-reveal-macos-vulnerability/

 

Wemix denies cover-up amid delayed $6.2M bridge hack announcement

https://cointelegraph.com/news/wemix-ceo-denies-hack-coverup-wemix-token-falls-39-percent

 

Gold’s Warning Signal

https://dailyreckoning.com/golds-warning-signal/

 

Israeli Spyware Graphite Targeted WhatsApp with 0-Click Exploit

https://hackread.com/israeli-spyware-graphite-hit-whatsapp-0-click-exploit/

 

mySCADA myPRO RCE Vulnerabilities Expose ICS Devices to Remote Control

https://gbhackers.com/myscada-mypro-rce-vulnerabilities/

 

QuantWare and QuantrolOx Partner to Streamline Quantum Error Correction with Automated Tune-Up

https://thequantuminsider.com/2025/03/19/quantware-and-quantrolox-partner-to-streamline-quantum-error-correction-with-automated-tune-up/

 

From Mine to Market: Understanding Gold Investing with a Barclays Expert

https://www.youtube.com/watch?v=9d8GkRO8aWE

 

Pennsylvania teachers’ union says hackers stole sensitive personal data on 500K+ members

https://techcrunch.com/2025/03/19/us-teachers-union-says-hackers-stole-sensitive-personal-data-on-over-500000-members/

 

How Much Gold Is (Supposedly) In Fort Knox?

https://www.zerohedge.com/precious-metals/how-much-gold-supposedly-fort-knox

 

'Unaware and Uncertain': Report Finds Widespread Unfamiliarity With 2027's EU Cyber Resilience Requirements

https://news.slashdot.org/story/25/03/21/0212206/unaware-and-uncertain-report-finds-widespread-unfamiliarity-with-2027s-eu-cyber-resilience-requirements

 

NASA's inbox goes orbital after email mishap spams entire space industry

https://www.theregister.com/2025/03/21/nasa_maptis_reply_all/

 

How to Build a Quantum Blockchain

https://thequantuminsider.com/2025/03/22/how-to-build-a-quantum-blockchain-researchers-test-a-blockchain-that-only-quantum-computers-can-mine/

 

The Fed’s Backdoor QE

https://dailyreckoning.com/the-feds-backdoor-qe/

 

Targeted spyware and why it’s a concern to us

https://www.malwarebytes.com/blog/news/2025/03/targeted-spyware-and-why-its-a-concern-to-us

 

Gold Mergers Are Heating Up: Which Deals Make Sense?

https://www.youtube.com/watch?v=BCPRTt5rfDM

 

Ransomware Group Claims Attack on Virginia Attorney General’s Office

https://www.securityweek.com/ransomware-group-claims-attack-on-virginia-attorney-generals-office/

 

UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools

https://thehackernews.com/2025/03/uat-5918-targets-taiwans-critical.html

 

Tech job market is terrible. Dorian’s story

https://www.youtube.com/watch?v=j9SJEGp-k78

 

Cyber attack on a laboratory service provider in France

https://www.clubic.com/actualite-558117-les-laboratoires-francais-cerballiance-ont-ete-victimes-d-une-cyberattaque-voici-les-donnees-qui-ont-fuite.html

 

RansomHub affiliate uses custom backdoor Betruger

https://securityaffairs.com/175701/cyber-crime/ransomhub-affiliate-uses-custom-backdoor-betruger.html

 

Attackers Pivot to SEMrush Spoof to Steal Google Credentials

https://www.darkreading.com/cyberattacks-data-breaches/attackers-semrush-steal-google-credentials

 

Youtube account of the President of Costa Rica hacked

https://www.reuters.com/technology/cybersecurity/costa-rica-governments-youtube-account-suffers-cyber-attack-2025-03-21/

 

MORE CALLS FOR A CONSTITUTIONAL CONVENTION

https://gizadeathstar.com/2025/03/more-calls-for-a-constitutional-convention/

 

Microsoft uncovers new trojan targeting crypto wallet extensions on chrome

https://cryptoslate.com/microsoft-uncovers-new-trojan-targeting-crypto-wallet-extensions/

 

Ex-Google Recruiter Explains: Why Nobody Hires Older Workers (And How to Fix It)

https://www.youtube.com/watch?v=WqFt6YHHy50

 

Scammers Sneak 300+ Ad Fraud Apps onto Google Play with 60M Downloads

https://hackread.com/scammers-ad-fraud-apps-google-play-60m-downloads/

 

The FBI Seized This Woman's Life Savings—Without Telling Her Why

https://reason.com/2025/03/20/the-fbi-seized-this-womans-life-savings-without-telling-her-why/

 

New Arcane Stealer Spreads via YouTube, Stealing VPN and Browser Login Credentials

https://gbhackers.com/new-arcane-stealer-spreads-via-youtube/

 

The Next Housing Crash IS COMING SOONER THAN YOU THINK

https://www.youtube.com/watch?v=XIK75Ct3cdU

 

Four.Meme resumes operations after $120K sandwich attack

https://cointelegraph.com/news/four-meme-resumes-operation-sandwich-exploit

 

11 State-Sponsored APTs Exploiting LNK Files for Espionage, Data Theft

https://www.securityweek.com/11-state-sponsored-apts-exploiting-lnk-files-for-espionage-data-theft/

 

Western Alliance Bank notifies 21,899 customers of data breach

https://www.bleepingcomputer.com/news/security/western-alliance-bank-notifies-21-899-customers-of-data-breach/

 

Hackers Exploit ChatGPT with CVE-2024-27564, 10,000+ Attacks in a Week

https://hackread.com/hackers-exploit-chatgpt-cve-2024-27564-10000-attacks/

 

New BitM Attack Enables Hackers to Hijack User Sessions in Seconds

https://gbhackers.com/new-bitm-attack-enables-hackers-to-hijack/

 

ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread Info-Stealers

https://thehackernews.com/2025/03/clearfake-infects-9300-sites-uses-fake.html

 

Toto CUTUGNO - THE GREATEST HITS

https://www.youtube.com/watch?v=LPvLKTJOXNk

 

Rooted Androids 3,000x More Likely to Be Breached, Even iPhones Not Safe

https://hackread.com/rooted-androids-breached-even-iphones-not-safe/

 

Report: North Korea is launching a new cybersecurity research unit called Research Center 227 focused on AI-based hacking and stealing digital assets

https://techcrunch.com/2025/03/20/north-korea-launches-new-unit-with-a-focus-on-ai-hacking-per-report/

 

These Are The World's Fastest-Growing Economies In 2025

https://www.zerohedge.com/economics/these-are-worlds-fastest-growing-economies-2025

 

HellCat hackers go on a worldwide Jira hacking spree

https://www.bleepingcomputer.com/news/security/hellcat-hackers-go-on-a-worldwide-jira-hacking-spree/

 

European Central Bank Chief Economist Philip Lane says Europe needs a digital euro to avoid rising stablecoin risks and reduce reliance on US payment firms

https://www.bloomberg.com/news/articles/2025-03-20/ecb-s-lane-backs-digital-euro-to-avoid-rising-stablecoin-risks

 

New Phishing Scam Uses Fake Instagram Chatbot to Hijack Accounts

https://hackread.com/phishing-scam-fake-instagram-chatbots-hijack-accounts/

 

The Internet’s New Privacy Tax: ‘Consent or Pay’

https://hackernoon.com/the-internets-new-privacy-tax-consent-or-pay

 

Discovery of secret list of alleged Nazi war criminals in Canada raises questions about government secrecy

https://www.theglobeandmail.com/politics/article-discovery-of-secret-list-of-alleged-nazi-war-criminals-in-canada/

 

New Attacks Exploit Year-Old ServiceNow Flaws

https://hackread.com/attacks-exploit-servicenow-flaws-israel-hit-hardest/

 

Linux Security Hardening Cache Randomization Was Inadvertently Using The Same Seed

https://www.phoronix.com/news/Linux-6.15-slab

 

Microsoft Warns of New StilachiRAT Malware

https://www.securityweek.com/microsoft-warns-of-new-stilachirat-malware/

 

Steam pulls game demo infecting Windows with info-stealing malware

https://www.bleepingcomputer.com/news/security/steam-pulls-game-demo-infecting-windows-with-info-stealing-malware/

 

The $Pi KYC Scam: Protect Yourself from This Cryptocurrency Threat

https://www.binance.com/en/square/post/21671027121266

 

‘Pokémon Go’ Games Unit Sold to Saudi Group for $3.5 Billion

https://finance.yahoo.com/news/pokemon-owner-sells-games-saudi-132331027.html

 

Director Charged With Netflix Fraud After Splurging on Crypto Instead of Finishing Sci-fi Series

https://yro.slashdot.org/story/25/03/21/2343252/director-charged-with-netflix-fraud-after-splurging-on-crypto-instead-of-finishing-sci-fi-series

 

Malware campaign 'DollyWay' breached 20,000 WordPress sites

https://www.bleepingcomputer.com/news/security/malware-campaign-dollyway-breached-20-000-wordpress-sites/

 

Money Bots | High-Frequency Trading | Crime & Corruption

https://www.youtube.com/watch?v=t6hs-TGAdJg

 

AROBS Polska to Develop Post-Quantum Satellite Communication Security System

https://thequantuminsider.com/2025/03/19/arobs-polska-to-develop-post-quantum-satellite-communication-security-system/

 

GitHub Action hack likely led to another in cascading supply chain attack

https://www.bleepingcomputer.com/news/security/github-action-hack-likely-led-to-another-in-cascading-supply-chain-attack/

 

BlackLock Ransomware Strikes Over 40 Organizations in Just Two Months

https://gbhackers.com/blacklock-ransomware-strikes-over-40-organizations/

 

Why Singapore is Buying So Much Gold Reserves

https://www.youtube.com/watch?v=eDX1PoDHjCQ

 

Hackers are exploiting Fortinet firewall bugs to plant ransomware

https://techcrunch.com/2025/03/17/hackers-are-exploiting-fortinet-firewall-bugs-to-plant-ransomware/

 

Every Major Crypto Scam, Ranked From Least to Most Stolen

https://hackernoon.com/every-major-crypto-scam-ranked-from-least-to-most-stolen

 

Microsoft Trust Signing service abused to code-sign malware

https://www.bleepingcomputer.com/news/security/microsoft-trust-signing-service-abused-to-code-sign-malware/

 

Valve removes video game demo suspected of being malware

https://techcrunch.com/2025/03/21/valve-removes-video-game-demo-suspected-of-being-malware/

 

Court filing: DOGE aide broke Treasury policy by emailing unencrypted database

https://www.theregister.com/2025/03/17/doge_treasury/

 

Zero-Hour Phishing Attacks Exploiting Browser Vulnerabilities Surge by 130%

https://gbhackers.com/zero-hour-phishing-attacks-exploiting-browser-vulnerabilities/

 

Tow Center Study Again Shows “AI” Sucks At Conveying Accurate News

https://www.techdirt.com/2025/03/20/tow-center-study-again-shows-ai-sucks-at-conveying-accurate-news/

 

Trump Team Plans “Significant” Move Anchored by Gold

https://www.youtube.com/watch?v=7m7Vs7fbnEg

 

GitHub Action supply chain attack exposed secrets in 218 repos

https://www.bleepingcomputer.com/news/security/github-action-supply-chain-attack-exposed-secrets-in-218-repos/

 

Apple Passwords App Bug Left Users Vulnerable to Phishing Attacks for Months Before Being Fixed

https://www.macrumors.com/2025/03/19/apple-passwords-app-phishing-vulnerability/

 

The State of Personal Online Security and Confidentiality

https://www.youtube.com/watch?v=AyH7zoP-JOg

 

Chrome disabling uBlock Origin is a serious security threat

https://nuage.quimerch.com/-/ewen/articles/chrome-disabling-ublock-origin-is-a-serious-security-threat

 

Casual White House Starlink Use Is A Cybersecurity Nightmare, A Transparency Problem, And A Weird Marketing Stunt

https://www.techdirt.com/2025/03/19/casual-white-house-starlink-use-is-a-cybersecurity-nightmare-a-transparency-problem-and-a-weird-marketing-stunt/

 

New Jailbreak Technique Bypasses DeepSeek, Copilot, and ChatGPT to Generate Chrome Malware

https://gbhackers.com/new-jailbreak-technique-bypasses/

 

Google Sues Scammers Over Fake Maps Listings

https://tech.slashdot.org/story/25/03/21/1126233/google-sues-scammers-over-fake-maps-listings

 

The LATEST SCAM is Everywhere - It’s Called ‘Smishing’

https://www.youtube.com/watch?v=vnxJRy4gHnM

 

ChatGPT SSRF bug quickly becomes a favorite attack vector

https://securityaffairs.com/175560/hacking/chatgpt-ssrf-bug-quickly-becomes-a-favorite-attack-vector.html

 

Hackers Hide VenomRAT Malware Inside Virtual Hard Disk Image File

https://hackread.com/hackers-hide-venomrat-malware-virtual-hard-disk-files/

 

How To Defend Against The Latest Financial Scams

https://www.zerohedge.com/political/how-defend-against-latest-financial-scams

 

The Soft Landing is a Myth: Here's What's Really Going on in the Economy | Cullen Roche

https://www.youtube.com/watch?v=wN2K4q0krjc

 

Attackers swipe data of 500k+ people from Pennsylvania teachers union

https://www.theregister.com/2025/03/19/pennsylvania_nonprofit_cyberattack/

 

Dragon RaaS Leading “Five Families” Crimeware with New Initial Access & Exploitation Tactics

https://gbhackers.com/dragon-raas-leading-five-families-crimeware/

 

Paragon Spyware Attacks Exploited WhatsApp Zero-Day

https://www.securityweek.com/paragon-spyware-attacks-exploited-whatsapp-zero-day/

 

Bybit: 89% of stolen $1.4B crypto still traceable post-hack

https://cointelegraph.com/news/bybit-1-4b-hack-88-percent-traceable-lazarus-group

 

Francis Hunt, Matthew Piepenburg, Olav Dirkmaat: Why GOLD is winning the BIG RESET

https://www.youtube.com/watch?v=kWGQ1itG1gM

 

How to Check User’s Failed Login Attempts on Linux

https://linuxtldr.com/lastb-command/

 

Trump releases classified JFK files on assassination. Here's what they say

https://www.usatoday.com/story/news/politics/2025/03/18/jfk-assassination-files-released-trump/82517699007/

 

Sperm donation giant California Cryobank warns of a data breach

https://www.bleepingcomputer.com/news/security/sperm-donation-giant-california-cryobank-warns-of-a-data-breach/

 

Congress Might Revalue Gold... to Buy Bitcoin

https://www.youtube.com/watch?v=1S5J8UAW2ns

 

All Hell Breaks Loose In Turkey: Arrest Of Erdogan's Top Opponent Sends Lira Crashing To Record Low, Triggers Marketwide Trading Halt

https://www.zerohedge.com/markets/all-hell-breaks-loose-turkey-arrest-erdogans-top-opponent-sends-lira-crashing-record-low

 

Robinhood Gets Into the Betting Business, Launches Prediction Market

https://gizmodo.com/robinhood-gets-into-the-betting-business-launches-prediction-market-2000576942

 

The Sneaky Paypal Scam That's Draining Bank Accounts

https://www.youtube.com/watch?v=cDVbOw_tgvI

 

Fake Coinbase Migration Messages Target Users to Steal Wallet Credentials

https://gbhackers.com/fake-coinbase-migration-messages-target-users/

 

Video shows mysterious new sonic weapon deployed against crowd of protesters...

https://www.the-sun.com/news/13807328/sonic-weapon-protesters-serbia/

 

Microsoft: New RAT malware used for crypto theft, reconnaissance

https://www.bleepingcomputer.com/news/security/microsoft-new-rat-malware-used-for-crypto-theft-reconnaissance/

 

The Best of Violin that You Should Listen to Once In Your Life

https://www.youtube.com/watch?v=7u5y5y2qEdg

 

Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks

https://securityaffairs.com/175593/hacking/rules-file-backdoor-ai-code-editors-silent-supply-chain-attacks.html

 

Pi Network Hack – Beware!

https://www.binance.com/en/square/post/20902260212690

 

Extortion Reboot: Ransomware Crew Threatens Leak to Snowden

https://www.darkreading.com/cyberattacks-data-breaches/ransomware-crew-leak-snowden-extortion-tactic

 

StilachiRAT Exploits Chrome for Crypto Wallets and Credentials

https://hackread.com/stilachirat-exploits-chrome-crypto-wallets-credentials/

 

This browser hack can steal everything

https://www.youtube.com/watch?v=oWtR8vqbYX4

 

U.S. households are running out of emergency funds as pandemic cash runs out, inflation takes its toll

https://www.cnbc.com/2025/03/20/us-households-are-running-out-of-emergency-funds-as-pandemic-cash-runs-out-inflation-takes-its-toll.html

 

Cyber attack on a elderly care service in Germany

https://www.sozial-holding.de/news-reader/datenschutzvorfall-in-unseren-pflegeeinrichtungen.html

 

Gold Revaluation

https://www.youtube.com/watch?v=7TvDmMwB0Ls

 

Cyber attack on a phone belonging to the Mexican president

https://www.infobae.com/mexico/2025/03/17/sheinbaum-confirma-hackeo-a-su-celular-tras-el-traslado-de-narcos-a-eeuu/

 

USA falls to its lowest happiness ranking

https://www.barrons.com/news/us-happiness-sinks-as-more-americans-eat-alone-survey-b37dd178

 

Hellcat Ransomware Gang Claims It Breached Switzerland-Based Ascom

https://www.globenewswire.com/news-release/2025/03/17/3044116/0/en/Ascom-affected-by-cyber-attack.html

 

Gold Revaluation Will Unleash Pandemonium in the Markets, says Eric Yeung

https://www.youtube.com/watch?v=aytyCUCQZlI

 

Cloudflare Accused of Blocking Niche Browsers

https://tech.slashdot.org/story/25/03/15/236215/cloudflare-accused-of-blocking-niche-browsers

 

Engineers develop new security protocol to protect miniaturized wireless medical implants from cyberthreats

https://techxplore.com/news/2025-03-protocol-miniaturized-wireless-medical-implants.html

 

Golden Eurodisco Megamix

https://www.youtube.com/watch?v=CaaTjeWD9hs

 

 

P.S. For those who want to have a list of annotations, here is the link to the article on how to do it with ChatGPT and Zapier

https://zapier.com/blog/how-to-use-chatgpt-to-summarize-an-article/

 

 

Some links:

Get highly discounted domains

Get public DPG for mobile devices

Get free XNO

Get an offline public DPG

Get working memory stimulator

Get post-quantum crypto wallet

Get your passwords and private keys to be prepared for the Q day

How to estimate time for the Q-day, in a simple way?

How do you rate this article?

24


I_g_o_r
I_g_o_r

I am curious about science, technologies and their applications to solving real problems.


Some news
Some news

News on cyber security, data breaches, crypto security, trends, etc. Image of Suzy Hazelwood from pexels.com

Publish0x

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.