Wednesday , May 14 2025

International Counter-Ransomware Initiative
40 countries to sign a agreement not to pay ransom

40 countries will sign a pledge to stop paying ransoms demanded by cybercriminal groups at the International Counter-Ransomware Initiative summit in Washington, D.C.

Anne Neuberger, Deputy National Security Adviser for Cyber and Emerging Technology at the White House, suggested that this initiative is a response to the increasing global threat of ransomware attacks. She stated that the United States has been targeted in around 46% of these incidents.

CVSS 10.0 Flaw
Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE

Siemens issued a security advisory (SSA-047424) for two serious vulnerabilities—CVE-2025-26389 and CVE-2025-26390—impacting the OZW672 and OZW772 web servers. These servers...
Read More
CVSS 10.0 Flaw  Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE

Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day

Microsoft has released its Patch Tuesday updates for May 2025, addressing a total of 78 vulnerabilities across its product ecosystem,...
Read More
Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day

OTP glitch disrupted NID services across the country

NID services in Bangladesh are temporarily suspended due to issues with delivering One-Time Passwords (OTP) needed to access the NID...
Read More
OTP glitch disrupted NID services across the country

Google to pay Texas $1.4 billion for location tracking practices

Google will pay about $1.4 billion to Texas to settle two lawsuits regarding location tracking and biometric data storage without...
Read More
Google to pay Texas $1.4 billion for location tracking practices

YouTube geo-blocks at least 4 Bangladeshi TV channels in India

YouTube has restricted access to at least four Bangladeshi television channels in India following a takedown request from the Indian...
Read More
YouTube geo-blocks at least 4 Bangladeshi TV channels in India

Microsoft Patches Four Critical Azure and Power Apps Vulns

Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...
Read More
Microsoft Patches Four Critical Azure and Power Apps Vulns

Qilin Ransomware topped April 2025 with 45+ data leak disclosures

The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...
Read More
Qilin Ransomware topped April 2025 with 45+ data leak disclosures

SonicWall Patches 3 Flaws in SMA 100 Devices

SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...
Read More
SonicWall Patches 3 Flaws in SMA 100 Devices

Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...
Read More
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....
Read More
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

ALSO READ:

Ransomware Attacks Up More Than 95% Over 2022

Starting Wednesday, international discussions during the summit will also focus on strategies to block the funds used by ransomware groups to finance their operations, Reuters first reported.

“Ransomware is an issue that knows no borders,” Anne Neuberger, the White House’s deputy national security adviser for cyber and emerging technology, told reporters during a briefing on Monday. “And as long as there’s money flowing to ransomware criminals … the problem will continue to grow.”

The Counter-Ransomware Initiative is taking steps to enhance its members’ ability to combat these attacks, in addition to its no-ransoms pledge.

Members of the initiative will use artificial intelligence to analyze blockchains — immutable digital ledgers of payment activity — to help identify ransomware payments flowing through cryptocurrency platforms. They will also maintain a shared blacklist of ransomware gangs’ cryptocurrency wallets, making it easier for members to identify illicit payment flows and alert their domestic cryptocurrency firms to block or freeze those transactions. And members will pledge to help each other respond to any ransomware attacks affecting government agencies or vital sectors like health care, energy and communications.

Two new information sharing platforms will help members exchange data about ransomware operators, their tools, and techniques. Lithuania operates one platform, while Israel and the United Arab Emirates jointly run the other. The platforms serve different purposes and countries are encouraged to use the one they prefer. The U.S. expects each country to share at least one threat information every week.

The group’s agenda for the next year will consist of raising awareness of where these hackers operate, where they’re able to rent or steal access to computer servers and “how to implement accountability on that,” according to the senior administration official.

The biggest antagonists in cyberspace — Russia, China, Iran and North Korea — aren’t members of the initiative and have repeatedly ignored U.S. pleas to stamp out malicious cyber activity emanating from within their borders. There is no clear plan for getting them to crack down on cybercrime.

Source: Reuters, messenger

 

Check Also

Play Ransomware

CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day

Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an …