Cybersecurity News Archives

Chinese APT Exploits VPN Vulnerabilities to Target OT Organizations Worldwide

04/03/202504/03/2025 SECITHUB

A New Cyber Threat Targeting OT Networks In a major cybersecurity alert, threat intelligence experts have discovered that a Chinese state-sponsored APT (Advanced Persistent Threat) group has been actively exploiting VPN vulnerabilities to infiltrate Operational Technology (OT) organizations worldwide. OT networks, which manage critical infrastructure like energy grids, water treatment facilities, and manufacturing plants, have become prime targets for nation-state attackers. The exploitation of unpatched VPN systems enables these threat actors to bypass traditional IT security controls, gaining direct access to sensitive industrial environments. This attack underscores the increasing risks…

The Largest Crypto Heist Ever | Bybit Breach Leads to a $1.5 Billion Theft

25/02/202528/02/2025 SECITHUB

The Rise of Sophisticated Cyber Attacks in the Crypto Space The cryptocurrency market has long been a prime target for cybercriminals. The decentralized nature of blockchain, the high-value assets at stake, and the evolving attack vectors make exchanges a lucrative opportunity for hackers. In what could be the largest cryptocurrency heist in history, Dubai-based crypto exchange Bybit confirmed a devastating security breach, resulting in the theft of approximately $1.5 billion in Ethereum (ETH). This incident surpasses previous record-breaking breaches in the industry and highlights significant security gaps in crypto exchange…

CyberArk Acquires Zilla to Strengthen Identity Governance & Administration

21/02/202528/02/2025 SECITHUB

CyberArk’s Strategic Expansion in Identity Security CyberArk has made a significant move in the identity governance and administration (IGA) space by acquiring Boston-based startup Zilla for $165 million. The deal, which has already closed, marks CyberArk’s continued expansion beyond privileged access management (PAM) into a more comprehensive identity security platform. This acquisition reflects a broader trend in the cybersecurity industry, where converged identity platforms are becoming essential for enterprise security. With identity threats on the rise, organizations are demanding faster, more automated, and AI-driven solutions to manage access, compliance, and…

Lazarus Group Targets Software Developers with New Marstech1 Malware

18/02/202518/02/2025 SECITHUB

Emerging Threat to the Developer Community The North Korean state-sponsored hacking collective, known as the Lazarus Group, has launched a new wave of cyberattacks targeting software developers globally. This campaign, dubbed Operation Marstech Mayhem, leverages open-source repositories and supply chains to distribute advanced malware, posing a significant threat to the global developer community and cryptocurrency ecosystems. Details of the Attack: Marstech1 Implant The attack centers around a new implant named Marstech1, which is embedded into GitHub repositories and NPM packages. These repositories are disguised as legitimate projects to lure unsuspecting…

France and the European Union Commit to Easing AI Regulations

18/02/202519/02/2025 SECITHUB

In a significant move to foster innovation and growth in the field of artificial intelligence (AI), French President Emmanuel Macron and the European Commission have announced plans to relax regulations surrounding AI development and deployment. This initiative, unveiled at the Paris AI Summit in February 2025, aims to position Europe as a competitive player in the global AI landscape. Key Initiatives Background This regulatory overhaul is driven by increasing competition from the United States and China. Notably, the U.S. government under President Trump had previously lifted certain AI restrictions, prompting…

Babuk Ransomware Group Loses Ransom Funds in Indodax Exchange Hack

18/02/202518/02/2025 SECITHUB

In a twist of irony, the notorious Babuk ransomware group, known for extorting funds from victims, has itself fallen prey to a significant cryptocurrency heist. In September 2024, the Indonesian cryptocurrency exchange Indodax suffered a security breach, resulting in the theft of approximately $20 million. Among the victims of this breach was the Babuk group, which lost a substantial portion of its illicit gains. Babuk’s Operations and Financial Practices The Babuk ransomware group re-emerged on January 26, 2025, announcing their “Babuk 2.0 Project.” As part of their operations, they utilized…

OpenAI Shifts Focus to GPT-5: A Major Leap in AI Evolution

16/02/202516/02/2025 SECITHUB

OpenAI’s Strategic Pivot OpenAI has announced a bold shift in strategy, skipping its anticipated O3 model to focus entirely on the development of GPT-5. This decision, revealed by OpenAI’s CEO Sam Altman, reflects an urgent need to stay ahead in the rapidly evolving AI arms race, particularly against competitors like DeepSeek and other major players in the AI space. This strategic shift promises an integrated, multi-modal AI experience, merging advanced reasoning, voice interaction, and chain-of-thought capabilities that significantly enhance AI’s reliability and accuracy. But why does this move matter? What…

Elon Musk’s $97.4 Billion Bid to Acquire OpenAI Rejected by Sam Altman: What This Means for the Future of AI

12/02/202512/02/2025 SECITHUB

In a bold move that has sent shockwaves through the tech world, Elon Musk recently offered a staggering $97.4 billion to acquire OpenAI, the artificial intelligence powerhouse co-founded by Sam Altman. The offer was swiftly rejected by Altman, who firmly stated that “OpenAI is not for sale.” This high-stakes bid not only reignites the long-standing tension between two of the tech industry’s most influential figures but also raises critical questions about the future of AI development and control. The History of Musk and Altman: A Partnership Turned Rivalry Elon Musk…

Report Reveals: DeepSeek AI Development Costs 300 Times More Than Reported

05/02/202505/02/2025 SECITHUB

A new report by SemiAnalysis has exposed a massive discrepancy in the development costs of DeepSeek, a Chinese AI startup. While DeepSeek publicly stated an investment of $5.6 million, the actual costs are estimated to have exceeded $1.5 billion, raising questions about the true scale of China’s AI ambitions and its hidden financial backing. The True Costs of AI Development According to the SemiAnalysis report, DeepSeek’s real expenditure includes: How DeepSeek Reduces Costs Despite the massive financial investment, DeepSeek has developed cost-cutting strategies to optimize its operations: These methods allow…

Is This Bigger than SolarWinds? Researchers Expose Critical Systems Vulnerable to Attack via Abandoned Storage Servers

05/02/202505/02/2025 SECITHUB

A Grave Threat Found in Amazon S3 Storage Systems A new discovery by security researchers from watchTowr has exposed a severe vulnerability in the cloud storage systems of Amazon S3. Over the course of their investigation, the researchers were able to take control of approximately 150 abandoned data repositories left behind by large organizations. What’s more alarming is that many systems continued to attempt automatic access to these abandoned storage buckets, potentially opening the door to devastating cyberattacks. Findings of the Study The research team tracked activity over two months…