NetSec News Articles of Interest From the Week of March 31, 2025

Read more cybersecurity news in this edition of NetSec News.

• 

  Jessica Owens

  MSSP Training & Development Coordinator, T2 SOC Analyst

New Issuance Requirements Improve HTTPS Certificate Validation

Trust in HTTPS certificate issuance has been enhanced with new practices mandated by the CA/Browser Forum Baseline Requirements meant to strengthen certificate validation. (SecurityWeek)

“HTTPS has long been a tool that has helped keep the internet relatively safe and secure. It’s how you know a website is who they say they are and how you protect the integrity of the data you send to and receive from them. HTTPS stands as a critical component of maintaining a functional and modern internet. From time to time, our tools need sharpening to keep up with the challenges we face; in this case, thwarting BGP hijacking (where internet traffic is rerouted due to corrupted routing tables) and ensuring simple best practices—like strong cryptographic algorithms and interoperability improvements—are observed (with certificate linting). For most, this will be an almost imperceptible change: you might notice an extra step every now and then when provisioning certification for your website, or some services might push an extra update this month, but nothing about your day-to-day experience will change. This is an example of something we don’t often think about: the constant work of an industry just to maintain the status quo that we rely on and are accustomed to. While this might not feel as impactful as “AI” or the potential shakeup of quantum computing, it’s just as critical for a thriving, healthy digital ecosystem.” –Tye Nezat, Senior SOC Analyst at C3 Integrated Solutions

CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection

Cybersecurity researchers are calling attention to a new sophisticated malware called CoffeeLoader that’s designed to download and execute secondary payloads. (The Hacker News)

Experts Warn Pentagon To Embrace Software-Defined Warfare To Counter China’s Military Advantage

If the US wants to win a war against its adversaries, namely China, the Pentagon must get serious about implementing software-defined warfare, experts from the Atlantic Council said Wednesday. (Breaking Defense)

BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability

In what’s an instance of hacking the hackers, threat hunters have managed to infiltrate the online infrastructure associated with a ransomware group called BlackLock, uncovering crucial information about their modus operandi in the process. (The Hacker News)

CISA Releases Malware Analysis Report on RESURGE Malware Associated with Ivanti Connect Secure

CISA has published a Malware Analysis Report (MAR) with analysis and associated detection signatures on a new malware variant CISA has identified as RESURGE. RESURGE contains capabilities of the SPAWNCHIMERA[1] malware variant, including surviving reboots; however, RESURGE contains distinctive commands that alter its behavior. (CISA)

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

Cybersecurity researchers have discovered a new Android banking malware called Crocodilus, which they describe as “a fully-fledged threat from the outset, equipped with modern techniques such as remote control, black screen overlays, and advanced data harvesting via accessibility logging.” (The Hacker News)