⚡ FunkSec, a rising ransomware group, has already hit 85+ victims, demanding ransoms as low as $10,000. What’s worse? They’re leveraging AI to rapidly evolve their attacks.

With targets like the U.S. and India, FunkSec's motives go beyond money—they are blurring the lines between hacktivism and cybercrime.

👉 Learn more: https://thehackernews.com/2025/01/ai-driven-ransomware-funksec-targets-85.html

Kick off 2025 with a game plan to grow your MSP’s revenue and deliver outstanding value to your clients.

Join us on January 15 to "10x Your MSP Profits in 2025 with Automated Network Pentesting" and discover how vPenTest can help you set the tone for a successful year.

Save your spot: https://thn.news/webinar-automated-pentesting-2025

📊 Reporting is broken! Is YOUR cybersecurity reporting still a “check the box” task?

Clients don’t want to hear about firewall logs—they want to understand how YOU are safeguarding their business.

Find out how to improve it here: https://thehackernews.com/2025/01/taking-pain-out-of-cybersecurity.html

💰 How One U.S. Health System Cut Security Costs by 76% ...

👉 The system deployed Elisity with just 2 staff members per site, compared to 14 for traditional segmentation.

⚡ Elisity is a seamless, lightweight solution that integrates with existing switches and works with Cisco, Juniper, and Arista devices, taking less than 30 minutes to deploy without any network downtime.

Get the full details here: https://thehackernews.com/2025/01/hands-on-walkthrough-microsegmentation.html

🛑 U.S. Justice Department indicts 3 Russian nationals involved in laundering millions through cryptocurrency mixers Blender`io and Sinbad`io.

Full details inside: https://thehackernews.com/2025/01/doj-indicts-three-russians-for.html

🔥 Microsoft has taken legal action against hackers using stolen Azure credentials to exploit AI services like OpenAI and DALL-E for malicious purposes.

Read the full story: https://thehackernews.com/2025/01/microsoft-sues-hacking-group-exploiting.html

👀 Over 4,000 web backdoors hijacked—by registering abandoned domains for as little as $20.

🔑 Researchers gained control of backdoors targeting government & academic networks in Bangladesh, China, Nigeria, South Korea, and more!

Read now: https://thehackernews.com/2025/01/expired-domains-allowed-control-over.html

🚨 New Vulnerability Alert!

CISA has added another critical BeyondTrust flaw to its "Known Exploited Vulnerabilities" catalog—this time, impacting Privileged Remote Access (PRA) and Remote Support (RS).

Attackers are actively exploiting it — CVE-2024-12686.

Read more: https://thehackernews.com/2025/01/cisa-adds-new-beyondtrust-flaw-to-kev.html

⚠️ VMware vCenter = Goldmine for Attackers.

Attackers are exploiting root-level access with the “vpxuser” account to control ESXi infrastructure. If it’s breached, everything is at risk.

👇 Discover expert tips on strengthening your defenses and preventing catastrophic breaches: https://thehackernews.com/2025/01/ransomware-on-esxi-mechanization-of.html

A new credit card skimmer targeting WordPress e-commerce sites has been discovered.

⤷ Malicious JavaScript code is injected into WordPress databases.
⤷ It activates ONLY on checkout pages to steal sensitive payment info.
⤷ This stealthy malware evades traditional detection tools, making it a serious threat.

This attack is incredibly difficult to spot, putting your customers' data and your reputation at risk.

🔗 Read more: https://thehackernews.com/2025/01/wordpress-skimmers-evade-detection-by.html

⚠️ WARNING: Zero-Day Exploit Likely Behind Fortinet Attack.

Attackers created super admin accounts, hijacked SSL VPNs, and moved laterally through networks to extract credentials.

Learn more in the full article: https://thehackernews.com/2025/01/zero-day-vulnerability-suspected-in.html

HuiOne Guarantee, an illicit Telegram-based marketplace, has surpassed Hydra with $24B in crypto inflows.

⤷ $150K funneled from North Korea’s Lazarus hacking group 💻
⤷ Facilitating romance scams, human trafficking, and money laundering
⤷ Monthly inflows up 51% since July 2024 📈

Learn more: https://thehackernews.com/2025/01/illicit-huione-telegram-market.html

🚨 Russian cyber attackers are actively targeting Kazakhstan’s Ministry of Foreign Affairs—this isn't just a cyber attack; it’s an espionage campaign to steal sensitive political and economic data.

The attackers use infected Microsoft Office docs to bypass security and deploy powerful malware like HATVIBE—designed to remain undetected.

Learn more: https://thehackernews.com/2025/01/russian-linked-hackers-target.html

🚨 4 Reasons Your SaaS Attack Surface Can No Longer be Ignored in 2025!

🚀 200 new SaaS accounts/month for 100 employees—each a potential breach point.
🎯 50% of breaches target SaaS apps.
🤖 Unmanaged GenAI tools pose huge security risks.
⚖️ Weak SaaS security = GDPR/CCPA violations.
Securing your SaaS is no longer optional!

👉 Learn how to protect your SaaS environment now: https://thehackernews.com/2025/01/4-reasons-your-saas-attack-surface-can.html

📣 Tomorrow! Join a live webinar on AI security. Explore how agentic systems are reshaping traditional DevSecOps practices and discover top AI security use cases in today’s enterprises.

Join James Berthoty, Ron Bitton, and Dor Sarig for an in-depth discussion on agentic-related risks and a 2025 forecast. Don’t miss out!

📅 Wednesday, January 15th, 11:30am ET
👉 Register here: https://thn.news/ai-security-navigating

Google’s OAuth login exposes a critical vulnerability, allowing attackers to access old employee accounts simply by purchasing a defunct domain from a failed startup.

Learn how this vulnerability could affect your organization: https://thehackernews.com/2025/01/google-oauth-vulnerability-exposes.html

🔓 New macOS flaw (CVE-2024-44243) discovered!

Attackers could have bypassed crucial protections to install persistent malware and rootkits, potentially letting them take full control of your system.

Explore the details: https://thehackernews.com/2025/01/microsoft-uncovers-macos-vulnerability.html

🚨 UPDATE: Fortinet Confirms Critical Zero-Day 🚨

CVE-2024-55591 in FortiOS & FortiProxy (CVSS 9.6) allows attackers to gain super-admin access & hijack firewalls.

Affected versions: FortiOS 7.0.0-7.0.16 & FortiProxy 7.0.0-7.2.12.

Upgrade now to 7.0.17+ or 7.0.20+ to mitigate risk.

https://thehackernews.com/2025/01/zero-day-vulnerability-suspected-in.html

🔴 Critical Alert: Microsoft has just released a massive patch for 161 vulnerabilities across its software, including 3 zero-day flaws that have been actively exploited.

⤷ CVE-2025-21333
⤷ CVE-2025-21334
⤷ CVE-2025-21335

Patch now: https://thehackernews.com/2025/01/3-actively-exploited-zero-day-flaws.html

🚨 Critical Flaws Discovered in SimpleHelp Software!

An attacker could exploit these flaws to execute remote code, steal sensitive data, and bring your entire system down.

✅ Action required NOW:
⤷ SimpleHelp has released critical patches.
⤷ Change admin passwords immediately.
⤷ Restrict logins to trusted IP addresses.

Read: https://thehackernews.com/2025/01/critical-simplehelp-flaws-allow-file.html