https://blog.dansec.red/vendors/prodaft/Recent content in Prodaft on DanSec DailyHugoen-gbTue, 15 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-15-cybersecurity-news/Tue, 15 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-15-cybersecurity-news/<h2 id="newly-discovered-vulnerabilities-and-attacks">Newly Discovered Vulnerabilities and Attacks</h2> <ul> <li>Gladinet&rsquo;s Triofox and CentreStack are under active exploitation due to a critical RCE vulnerability, impacting seven organizations.</li> <li>ResolverRAT, a new remote access trojan, targets healthcare and pharmaceutical sectors through phishing and DLL side-loading attacks.</li> <li>Cybersecurity researchers have identified a phishing campaign using real-time checks to validate victim emails before credential theft.</li> </ul> <h2 id="data-breaches-and-security-incidents">Data Breaches and Security Incidents</h2> <ul> <li>Hertz Corporation confirms a data breach where customer information and driver&rsquo;s licenses were stolen in Cleo zero-day data theft attacks.</li> <li>Conduent, a govtech giant, discloses client data was stolen in a January 2025 cyberattack.</li> </ul> <h2 id="regulatory-and-policy-developments">Regulatory and Policy Developments</h2> <ul> <li>Meta resumes E.U. AI training using public user data after regulatory approval, aiming to train AI models with public data shared by adults in the European Union.</li> <li>Microsoft issues Windows updates to fix Active Directory policy issues and advises users to ignore WinRE installation errors.</li> <li>The CA/Browser Forum votes to reduce SSL/TLS certificate lifespans to 47 days by 2029 to enhance security.</li> </ul> <h2 id="notable-threat-actors-and-tools">Notable Threat Actors and Tools</h2> <ul> <li>Fortinet zero-day bug may lead to arbitrary code execution, with a threat actor posting about the exploit after Fortinet warned of active vulnerabilities.</li> <li>Chinese APTs exploit EDR &ldquo;visibility gap&rdquo; for cyber espionage, targeting network blind spots like firewalls, IoT devices, and the cloud.</li> <li>Cybersecurity firm Prodaft buys hacker forum accounts to spy on cybercriminals and enhance threat intelligence capabilities.</li> </ul> <h2 id="industry-impacts-and-recommendations">Industry Impacts and Recommendations</h2> <ul> <li>Cybersecurity in the AI era is evolving rapidly, with attackers leveraging AI for automation and sophisticated attacks, highlighting the need for defenders to evolve quickly.</li> <li>Wazuh, an open-source XDR platform, enhances DevSecOps by providing real-time threat detection, compliance, and vulnerability scanning for stronger security strategies.</li> </ul>