Apr 16, 2025

Read in Browser     Subscribe

Share this newsletter!

In partnership with:

Greetings, Digital Defenders! 🛡️

With half the week already behind us, it’s the perfect time to take stock of what’s unfolding across the cybersecurity landscape. From electric vehicle flaws to widespread data breaches impacting the public, today’s edition brings you critical updates and insights to stay informed this week.

Here’s what you need to know:

Zero-Day Download

Cybersecurity Firm Buys Dark Web Accounts to Monitor Cyber Criminals

Threat intelligence firm Prodaft has adopted an unconventional approach to monitoring cybercriminal activities by purchasing accounts on dark web forums. The company’s SYS initiative involves buying vetted accounts from five known cybercrime forums: XSS, Exploit in, RAMP4U, Verified, and Breachforums.

Prodaft is buying vetted accounts from RAMP4U. Source: resecurity.com.

This strategy aims to gather insights into illicit cryptocurrency transactions and identify emerging threats within underground communities.

Healthcare Organizations Targeted in ResolverRAT Malware Campaign

A new malware campaign deploying ResolverRAT has been targeting healthcare organizations, aiming to exfiltrate sensitive patient data. The attackers use phishing emails to deliver the malware, establishing persistence and communicating with command-and-control servers to extract information.

If you work in healthcare, you’re an active target—be wary of phishing emails and avoid clicking links or downloading attachments from unknown sources.

Nissan Leaf Hack Exposes Risks of Remote Vehicle Exploitation

Security researchers have demonstrated vulnerabilities in the Nissan Leaf electric vehicle that could allow attackers to remotely spy on drivers and potentially take control of certain functions. The flaws highlight the growing concerns over the cybersecurity of connected cars and the need for robust protective measures.

Nissan Leaf owners should update their vehicle’s firmware and disable unnecessary remote features when not in use.

Threat Tracker

GovTech Firm Conduent Confirms Client Data Theft in January Cyberattack

Conduent confirmed that a cyberattack in January led to the theft of files containing client information. The business services provider is collaborating with cybersecurity experts to assess the scope of the breach. It has notified affected clients while continuing its investigation.

Source: conduent.com.

The breach serves as a stark reminder of the growing danger linked to third-party vulnerabilities. Before working with third-party vendors, you should assess supply chain risk and enforce strict data-sharing policies.

Hertz Data Breach Exposes Customer Driver's License and Payment Info

Hertz Global Holdings disclosed a data breach resulting from vulnerabilities in a third-party file transfer platform, Cleo Communications. The breach potentially exposed customers' contact details, credit card numbers, and driver's license information. Hertz emphasized that its internal systems were not compromised and has found no evidence of fraudulent use of the stolen data.

If you’ve recently rented a car from Hertz, be sure to monitor your credit reports closely for sudden activity or changes.

Ransomware Attack Targets DaVita, Disrupts Operations but Patient Care Maintained

Major U.S. dialysis provider DaVita reported a ransomware attack that encrypted parts of its network, causing operational disruptions. Despite the incident, the company continued to provide patient care services and implemented interim measures to restore affected systems. DaVita is working with cybersecurity experts and law enforcement to investigate the breach.

Patients and staff should remain vigilant for suspicious communications, as attackers may attempt to exploit stolen data for phishing.

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights.

We’ve saved you a seat for Cisco Secure Access Live Demo

Hi there,

Complicated. Challenging. Complex. Security leaders describe the current state of cybersecurity this way. Yet, security should be simple. Protect users as they access applications and resources and stop threats before they reach your users or network.

Join us on April 16 to discover a smarter way to manage access – from anything to anywhere – while protecting against savvy, sophisticated attackers. Webinar attendees will receive a gift of free Cisco socks as a thank you for joining us live!*

Cisco Secure Access, a Security Service Edge (SSE) solution, lowers risk in decentralized, hybrid work environments. It delivers secure access, comprehensive cloud-delivered security services, and centralized management for better protection against threats.

      *Offer is only available in the US while  supplies last.

Security Tip of the Day

Bolster Your EV’s Cybersecurity Controls

Lately, we’ve been reporting on a growing number of cybersecurity issues affecting electric vehicles. The truth is, many drivers have no idea just how vulnerable their EVs might be. Today’s connected cars are essentially rolling computers, making them prime targets for attackers.

Tencent security researchers hacking a Tesla Model S wireless/Bluetooth module. Source: keenlab.tencent.com.

Security often lags behind as automakers race to innovate with the latest bells and whistles, leaving critical systems at risk. If you think your EV is secure by default, it might be time for a closer look.

Here Are Some Ways to Protect Yourself From EV Hacks:

As electric vehicles become more common, the need for strong, built-in cybersecurity is becoming critical. But with most manufacturers still catching up, it’s up to EV owners to take proactive steps.

Mastering LastPass for Secure Password Management

With long, complex passwords now the standard, remembering them all is unrealistic — making password managers like LastPass a must. This step-by-step guide covers everything you need to get started, from setup information to key features that streamline and secure your login experience.

Top Intrusion Detection and Prevention Systems for 2025

Intrusion detection and prevention systems (IDPS) are like home alarm systems for your network, constantly monitoring for cyber break-ins. If you're connected to the internet, your systems are always in a bad neighborhood — and danger always lurks.

OSSEC architecture. Source: logz.io.

This article explores top IDPS solutions like OSSEC, Trellix IPS, and Check Point Quantum, guiding how to choose the right tools to detect and prevent malicious activities effectively.This article explores top IDPS solutions like OSSEC, Trellix IPS, and Check Point Quantum, guiding how to choose the right tools to detect and prevent malicious activities effectively.

Meet Our Writers:

Leon Yen

Leon Yen is a cybersecurity expert and seasoned tech journalist with over a decade of experience, including founding a cyber risk startup and leading industry-focused research and reporting.

Liz Ticong

Liz Ticong is a tech writer specializing in AI and software tools, known for turning complex topics into clear, actionable insights through hands-on testing and analysis.

We're Hiring! 📝

We're looking for talented writers to help shape Cybersecurity Insider. If you're passionate about cyber security, apply to join our team!

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.