#Windows #RDP lets you log in using revoked passwords. #Microsoft is OK with that.

Researchers say the behavior amounts to a persistent #backdoor.

In response, Microsoft said the behavior is a “a design decision (...) As such, Microsoft said the behavior doesn’t meet the definition of a #security #vulnerability, and company engineers have no plans to change it.

https://arstechnica.com/security/2025/04/windows-rdp-lets-you-log-in-using-revoked-passwords-microsoft-is-ok-with-that/

Chinese snoops use stealth RAT to #backdoor US orgs – still active last week

"Let the #espionage and access resale campaigns begin (again)"
https://www.theregister.com/2025/04/15/chinese_spies_backdoored_us_orgs/

Triada strikes back – Source: securelist.com https://ciso2ciso.com/triada-strikes-back-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #InstantMessengers #Cryptocurrencies #Financialthreats #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #backdoor #Facebook #Telegram #WhatsApp #Dropper #Malware #Trojan #Skype

#Telegram founder and CEO Pavel Durov has taken a page out of #Signal book and says he'll pull the app out of France if officials demand an encryption #backdoor
https://t.me/durov/410 (on Telegram)

Covered Back Entrance
Hillsboro, Illinois, USA

Over 16,000 internet-exposed Fortinet devices have been detected as compromised with a new symlink backdoor that allows read-only access to sensitive files on previously compromised devices. #DataBreache #backdoor #Cybersecurity https://www.bleepingcomputer.com/news/security/over-16-000-fortinet-devices-compromised-with-symlink-backdoor/

#Florida’s New Social Media Bill Says The Quiet Part Out Loud And Demands An Encryption #Backdoor - https://www.techdirt.com/2025/04/17/floridas-new-social-media-bill-says-the-quiet-part-out-loud-and-demands-an-encryption-backdoor/

https://cyberinsider.com/global-coalition-warns-sweden-against-encryption-backdoor-legislation/

Florida’s New #SocialMedia Bill Says the Quiet Part Out Loud and Demands an #Encryption #Backdoor
#privacy #florida #e2ee #security

https://www.eff.org/deeplinks/2025/04/floridas-new-social-media-bill-says-quiet-part-out-loud-and-demands-encryption

#Florida’s New #SocialMedia Bill Says the Quiet Part Out Loud and Demands an #Encryption #Backdoor

https://www.eff.org/deeplinks/2025/04/floridas-new-social-media-bill-says-quiet-part-out-loud-and-demands-encryption

Apple has filed an appeal against a UK gov order to create a #backdoor in its cloud #encryption to help law enforcement investigations

After the hearing about a mandated back door happened behind closed doors, Apple very nearly immediately filed an appeal, with the backing of most of the world's governments, privacy advocates, and journalism organizations

That appeal has been heard, and at some point, the results of the hearing will be made clear
https://appleinsider.com/articles/25/04/07/uk-icloud-backdoor-mandate-hearing-must-be-made-public----eventually

Sweden wants to #backdoor #encryption. But we, together with 230+ orgs, are saying no.

#NoToBackdoors

Read our open letter to the Swedish Riksdag:

https://tuta.com/blog/open-letter-sweden-encryption

#UK’s demand for #Apple #backdoor should not be heard in secret, says court

https://techcrunch.com/2025/04/07/uk-demand-for-apple-backdoor-should-not-be-heard-in-secret-says-court/

UK’s demand for #Apple #backdoor should not be heard in secret, says court - https://techcrunch.com/2025/04/07/uk-demand-for-apple-backdoor-should-not-be-heard-in-secret-says-court/ "This is the first public acknowledgement that the case exists, though specific details of the case were withheld." #encryption

#BREAKING: Legal fight between UK vs Apple about #encryption #backdoor must be made public.

We at Tuta would never build a backdoor - and our #opensource code is proof of that.

https://www.bbc.com/news/articles/cvgn1lz3v4no

Background: https://tuta.com/blog/uk-demands-apple-backdoor-encryption

Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking tools

The Lotus Blossom espionage group has been conducting cyber espionage campaigns targeting government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong, and Taiwan. The group employs various versions of the Sagerunex backdoor, including new variants that use cloud services like Dropbox, Twitter, and Zimbra for command and control. Lotus Blossom utilizes multiple hacking tools and techniques to maintain long-term persistence in compromised networks. The attacks involve multi-stage operations, including reconnaissance, lateral movement, and data exfiltration. The group has been active since at least 2012 and continues to evolve its tactics and malware to evade detection.

Pulse ID: 67f038f22c3d7acc43c35cb7
Pulse Link: https://otx.alienvault.com/pulse/67f038f22c3d7acc43c35cb7
Pulse Author: AlienVault
Created: 2025-04-04 19:54:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.