NetSec News Articles of Interest From the Week of March 17, 2025
Read more cybersecurity news in this edition of NetSec News.
Nvidia Patches Vulnerabilities That Could Let Hackers Exploit AI Services
Nvidia Riva flaws could let hackers exploit pricey AI speech and translation services, risking privilege escalation and data breaches. (SecurityWeek)
 |
|
“This AI module from Nvidia is an expensive system that represents an early example of a GenAI security risk stemming from its architecture, not from generative AI as a technology. Also, these systems shouldn’t be internet-facing; however, the vulnerability was discovered on a system that was. This indicates that architecting systems that use these modules remains a challenge for organizations, and the high cost of these systems (both licensing and operational) means that these vulnerabilities could lead to significant impacts if exploited.” –Jason Ingalls, Chief Cybersecurity Officer at C3 Integrated Solutions |
Why SharpRhino Malware is Leaving Victims Thunderstruck
A new Remote Access Trojan (RAT) has emerged, putting cybersecurity professionals and global organizations on heightened alert. SharpRhino is a recent addition to the malware arsenal of the cyberthreat group Hunters International that was first identified in August 2024. (Infosecurity)
Microsoft: March Windows Updates Mistakenly Uninstall Copilot
Microsoft says the March 2025 Windows cumulative updates automatically and mistakenly remove the AI-powered Copilot digital assistant from some Windows 10 and Windows 11 systems. (BleepingComputer)
GitHub-Hosted Malware Infects 1M Windows Users
Microsoft has identified a complex, malvertising-based attack chain that delivered Lumma and other infostealers to enterprise and consumer PC users; the campaign is unlikely the last of its kind. (Dark Reading)
Fake “Security Alert” Issues on GitHub Use OAuth App To Hijack Accounts
A widespread phishing campaign has targeted nearly 12,000 GitHub repositories with fake “Security Alert” issues, tricking developers into authorizing a malicious OAuth app that grants attackers full control over their accounts and code. (BleepingComputer)
Chinese Cyberespionage Group Deploys Custom Backdoors on Juniper Routers
Microsoft has removed two popular VSCode extensions, ‘Material Theme – Free’ and ‘Material Theme Icons – Free,’ from the Visual Studio Marketplace for allegedly containing malicious code. (CSO)
Meet the Author
