Infosec bits for 2025 week 15

Manqoba Shabalala | April 11, 2025, 2:47 p.m.

Cybersecurity News:

Cybersecurity in the AI Era: Evolve Faster Than the Threats or Get Left Behind [The Hacker News]

Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT [The Hacker News]

Malicious NPM Packages Target Cryptocurrency, PayPal Users [SecurityWeek]

Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle [SecurityWeek]

Vulnerabilities & Patches:

Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More [The Hacker News]

SonicWall Patches High-Severity Vulnerability in NetExtender [SecurityWeek]

Google Just Patched Two Critical Android Zero-Days Exploited by Hackers – Update Your Phone Right Now [Tom's Guide]

Breaches & Leaks:

Hackers Breach Morocco’s Social Security Database [SecurityWeek]