← Cybersecurity Headlines
Cybersecurity Headlines
Europol shuts down DDoS-for-hire services, CrowdStrike lays off 500 workers, GOV.UK embraces passkeys
00:07:28
Loading summary
Transcript1 lines
- [00:00]
Sarah Lane
From the CISO series, it's Cybersecurity Headlines these are the cybersecurity headlines for Thursday, May 8, 2025. I'm Sarah Lane. Europol shuts down six DDoS for hire services used in global attacks Europol shut down six DDoS for hire services CFX API, CFX Security, NeoPress, Jetstress, Quick down and Zap Cut linked to global attacks on schools, businesses and government sites. Polish authorities arrested four suspects and the US seized nine related domains. These platforms let users launch attacks for as little as €10 via sleek interfaces. Quicktown, one of the services, combined botnets and dedicated servers to scale operations. CrowdStrike says it will lay off 500 workers CrowdStrike is laying off 500 employees, about 5% of its workforce, as part of a shift to hit a $10 billion annual recurring revenue target. CEO George Kurtz told staff the move will help Crowdstrike move faster and maintain its cybersecurity leadership. The company previously faced backlash after a faulty software update disrupted 8.5 million Windows devices globally. Passkeys set to protect gov.uk accounts against cyber attacks the UK will replace SMS based two factor authentication with passkeys across gov.uk services by the end of the year to boost security and reduce friction for users. The National Cybersecurity center is rolling out passkey support for its platform and the NHS already uses them. The move was announced at Cyber UK 2025 and follows the UK joining the FIDO alliance to support passwordless authentication standards. Massimo says cyber attack has impacted its ability to fulfill orders Masimo, maker of patient monitoring devices, is investigating an April cyber attack that disrupted its manufacturing systems and ability to fulfill orders. The company says its on premises systems were affected, but there's no evidence that the attack reached its cloud infrastructure. Masimo says it's working with law enforcement and third party experts and does not expect the incident to impact its 2025 earnings guidance. Huge thanks to our sponsor ThreatLocker. ThreatLocker is a global leader in Zero Trust Endpoint security, offering cybersecurity controls to protect businesses from zero day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit threadlocker.com CISO that's CISO Autokit WordPlus plugin with 100,000 installs hit by exploits targeting multiple flaws. Attackers are actively exploiting two vulnerabilities in the Autokit formerly sure triggers Word plus plugin, which has over 100,000 installs. The main flaw allows unauthenticated attackers to escalate privileges due to missing checks in the code. Exploits reportedly began around May 2 with mass exploitation starting May 4. Wordfence advises users to update to version 1.0.83 immediately to mitigate risks. CISA warns of hackers targeting critical oil infrastructure cisa, along with the FBI, EPA and doe, has warned that unsophisticated attackers are targeting industrial control Systems in the U.S. oil and natural gas sectors. Agencies have urged infrastructure operators to disconnect public facing OT systems, use strong credentials, implement VPNs with phishing resistant MFA and separate it ot networks or also stressing the need for testing manual fail safes and coordinating with third party providers for system specific protections. Telemessage stores plaintext chat logs per security researchers Senator demands DOD investigate Telemessage suspend services Telemessage, a federal contractor that sold a modified version of Signal called tmsgnl so TM Signal to senior US officials can reportedly access plain text chat logs despite marketing claims suggesting end to end encryption. Security researcher Misha Lee analyzed the app's Android source code and found it insecure, confirming text messages access. The company was recently hacked twice, leaking sensitive data and prompting it to suspend operations. Senator Ron Wyden has now called for a DOJ investigation, citing the app as a potential national security threat due to its insecure design and foreign ties. Poland accuses Russia of unprecedented interference ahead of presidential election Poland's digital affairs minister accused Russia of launching an unprecedented campaign to disrupt the country's upcoming presidential election through disinformation and cyber attacks on critical infrastructure. Minister Christoph G said attacks have more than doubled this year and warned that Polish citizens who aid Russian efforts will face criminal charges. The warning follows similar concerns in Romania, where pro Kremlin hackers targeted government sites during a recent election. Russia has denied all allegations of election interference in both countries. Poland's election is set for May, with a possible runoff June 1st. If you're in the Boston area, remember to join us for a live CISO Series podcast recording on May 15th. If you've never joined us for a live recording, they are a lot of fun. Great conversations, fun games, a chance to win some CISO series WAG plus free food, drink and networking. If you want to join us, this is a free event being organized by Zscaler, but you need to register. Head on over to the events page@cisoseries.com for more information. I'm Sarah Lane reporting for the CISO Series. Thank you so much for listening. Cybersecurity headlines are available every weekday. Head to cisoseries.com for the full stories behind the headlines. It.