https://blog.dansec.red/actors/crazyhunter/Recent content in CrazyHunter on DanSec DailyHugoen-gbThu, 17 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-17-cybersecurity-news/Thu, 17 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-17-cybersecurity-news/<ul> <li> <p><strong>CISA Flags Actively Exploited Vulnerability in SonicWall SMA Devices</strong>:</p> <ul> <li>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) identified a security flaw in SonicWall Secure Mobile Access (SMA) 100 Series gateways being actively exploited.</li> </ul> </li> <li> <p><strong>Apple Patches Two Actively Exploited iOS Flaws</strong>:</p> <ul> <li>Apple released security updates for iOS, iPadOS, macOS Sequoia, tvOS, and visionOS to address two actively exploited security flaws.</li> </ul> </li> <li> <p><strong>New Windows Task Scheduler Bugs Discovered</strong>:</p> <ul> <li>Cybersecurity researchers found four vulnerabilities in the Windows task scheduling service that could allow local attackers to escalate privileges.</li> </ul> </li> <li> <p><strong>Over 16,000 Fortinet devices compromised with symlink backdoor</strong>:</p> <ul> <li>More than 16,000 Fortinet devices were discovered to be compromised with a symlink backdoor, granting read-only access to sensitive files.</li> </ul> </li> <li> <p><strong>Google Blocked 5.1B Harmful Ads in 2024</strong>:</p> <ul> <li>Google revealed it suspended over 39.2 million advertiser accounts in 2024 and blocked 5.1 billion harmful ads.</li> </ul> </li> <li> <p><strong>Gamma AI Platform Abused in Phishing Chain</strong>:</p> <ul> <li>Threat actors are using an AI-powered platform called Gamma in phishing attacks to direct users to fake Microsoft login pages.</li> </ul> </li> <li> <p><strong>Ransomware Gang &lsquo;CrazyHunter&rsquo; Targets Critical Taiwanese Orgs</strong>:</p> <ul> <li>Trend Micro researchers identified a new ransomware group named &ldquo;CrazyHunter&rdquo; targeting critical sectors in Taiwan.</li> </ul> </li> <li> <p><strong>Patch Now: NVIDIA Flaws Expose AI Models, Critical Infrastructure</strong>:</p> <ul> <li>A critical flaw in a tool for running GPU-accelerated containers exposed vulnerabilities in AI models and critical infrastructure.</li> </ul> </li> <li> <p><strong>CISA extends funding to ensure &rsquo;no lapse in critical CVE services&rsquo;</strong>:</p> <ul> <li>CISA extended funding to MITRE to ensure the continuity of the Critical Common Vulnerabilities and Exposures (CVE) program.</li> </ul> </li> <li> <p><strong>Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps</strong>:</p> <ul> <li>Chinese Android smartphones were found to have trojanized apps posing as WhatsApp and Telegram, containing cryptocurrency clipper functionality.</li> </ul> </li> </ul>