Category: Breaking News

Vulnerabilities in McDonald’s McHire chatbot exposed data from 64 million job applicants due to insecure internal APIs. Security researchers Ian Carroll and Sam Curry discovered multiple vulnerabilities in the McDonald’s chatbot recruitment platform McHire that exposed the personal information of over 64 million job applicants. The security duo found that McDonald’s hiring bot, built by…

U.S. CISA adds Citrix NetScaler ADC and Gateway flaw to its Known Exploited Vulnerabilities catalog

July 11, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds U.S. CISA adds Citrix NetScaler ADC and Gateway flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Citrix NetScaler ADC and Gateway, tracked as CVE-2025-5777, to its Known Exploited Vulnerabilities (KEV) catalog. The CVE-2025-5777 flaw, dubbed ‘CitrixBleed 2‘ (CVSS v4.0 Base Score…

UK NCA arrested four people over M&S, Co-op cyberattacks

July 10, 2025

NCA arrested four people in UK, including three teens, over cyberattacks on M&S, Co-op, and Harrods, per its investigation. The British National Crime Agency (NCA) arrested four individuals in the country following an investigation into the recent wave of attacks targeting Co-op, M&S, and Harrods. On July 10, Law enforcement arrested 4 youths, aged 17–20,…

PerfektBlue Bluetooth attack allows hacking infotainment systems of Mercedes, Volkswagen, and Skoda

July 10, 2025

Researchers found critical PerfektBlue flaws in OpenSynergy BlueSDK, allowing remote code execution to hack millions of vehicles’ systems. Researchers at PCA Cyber Security identified a set of critical vulnerabilities, collectively tracked as PerfektBlue, in OpenSynergy BlueSDK Bluetooth stack. The exploitation of the flaws potentially allows remote code execution in millions of vehicles. These flaws could…

Qantas data breach impacted 5.7 million individuals

July 10, 2025

Australia’s largest airline Qantas has confirmed that the recent data breach impacted 5.7 million individuals. Early this month, Australian airline Qantas disclosed a cyberattack after hackers accessed a third-party platform used by a call centre, stealing significant customer data. The breach, linked to ongoing Scattered Spider activity, was detected and contained on Monday. Qantas confirmed that while…

DoNot APT is expanding scope targeting European foreign ministries

July 9, 2025

DoNot APT, likely an India-linked cyberespionage group, targets European foreign ministries with LoptikMod malware. The DoNot APT group, likely linked to India, has expanded its operations and is targeting European foreign ministries with a new malware, called LoptikMod. The Donot Team (also known as APT-C-35 and Origami Elephant) has been active since 2016, focusing on government entities, foreign…

Nippon Steel Solutions suffered a data breach following a zero-day attack

July 9, 2025

Nippon Steel Solutions reported a data breach caused by hackers exploiting a zero-day vulnerability in their network equipment. Nippon Steel Solutions, a subsidiary of Japan’s Nippon Steel, disclosed a data breach, attackers exploited a zero-day vulnerability. The company provides cloud and cybersecurity services. On March 7, 2025, Nippon Steel Solutions detected suspicious server activity and…

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates

July 9, 2025

An Iranian ransomware group, Pay2Key.I2P, has intensified attacks on U.S. and Israeli targets, offering affiliates higher profits. The Iranian ransomware group Pay2Key.I2P is stepping up attacks on U.S. and Israeli targets, luring affiliates with higher profit shares. The ransomware gang is the successor to the original Pay2Key group and experts linked it to the Iran-nexus…

Hackers weaponize Shellter red teaming tool to spread infostealers

July 9, 2025

Hackers are abusing the legitimate red teaming tool Shellter to spread stealer malware after a licensed copy was leaked. Elastic Security Labs has identified several malware campaigns using the commercial AV/EDR evasion tool SHELLTER. The tool was originally built for legitimate red team operations, however, threat actors have now adopted it to bypass security measures…

Microsoft Patch Tuesday security updates for July 2025 fixed a zero-day

July 8, 2025

Microsoft released Patch Tuesday security updates for July 2025, which addressed 130 flaws, including one a Microsoft SQL Server zero-day. Microsoft Patch Tuesday security updates for July 2025 addressed 130 vulnerabilities in Windows and Windows Components, Office and Office Components, .NET and Visual Studio, Azure, Teams, Hyper-V, Windows BitLocker, Microsoft Edge (Chromium-based), and the Windows…

Italian police arrested a Chinese national suspected of cyberespionage on a U.S. warrant

July 8, 2025

Italian police arrested a Chinese national linked to Silk Typhoon APT group at Milan’s Malpensa Airport on a U.S. warrant. Italian police arrested a Chinese national, Zewei Xu (33), at Milan’s Malpensa Airport on a U.S. warrant. Xu was arrested at Malpensa Airport on July 3rd after arriving on a flight from China. Authorities accused…

U.S. CISA adds MRLG, PHPMailer, Rails Ruby on Rails, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog

July 8, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Multi-Router Looking Glass (MRLG), PHPMailer, Rails Ruby on Rails, and Synacor Zimbra Collaboration Suite (ZCS) flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Multi-Router Looking Glass (MRLG), PHPMailer, Rails Ruby on Rails, and Synacor Zimbra Collaboration Suite (ZCS) flaws to…

IT Worker arrested for selling access in $100M PIX cyber heist

July 8, 2025

Brazil arrests IT worker João Roque for aiding $100M PIX cyber heist, one of Brazil’s biggest banking system breaches. Brazilian police arrested João Roque (48), an IT employee at C&M, for allegedly aiding a cyberattack that stole over 540 million reais (~$100 million) via the PIX banking system. The company C&M links smaller banks to…

Taiwan flags security risks in popular Chinese apps after official probe

July 7, 2025

Taiwan warns Chinese apps like TikTok and WeChat pose security risks due to excessive data collection and data transfers to China. Taiwan National Security Bureau (NSB) warns that Chinese apps like TikTok, WeChat, Weibo, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China, following an official inspection with…

U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog

July 7, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Chromium V8 vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Chromium V8 vulnerability, tracked as CVE-2025-6554, to its Known Exploited Vulnerabilities (KEV) catalog. Last week, Google released security patches to address the Chrome vulnerability CVE-2025-6554 for which an exploit is…

Hunters International ransomware gang shuts down and offers free decryption keys to all victims

July 6, 2025

Hunters International ransomware gang announced its shutdown, citing unspecified “recent developments” and acknowledging its impact. The ransomware group Hunters International announced on its dark web site that it is shutting down, citing “recent developments” without specifying details. The group stated the decision was made after careful consideration and acknowledged the impact on affected organizations. “We,…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 52

July 6, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape 10 Things I Hate About Attribution: RomCom vs. TransferLoader macOS NimDoor | DPRK Threat Actors Target Web3 and Crypto Platforms with Nim-Based Malware Warning Against Distribution of Malware Disguised as Research Papers (Kimsuky Group) Dissecting Kimsuky’s…

Security Affairs newsletter Round 531 by Pierluigi Paganini – INTERNATIONAL EDITION

July 5, 2025

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. North Korea-linked threat actors spread macOS NimDoor malware via fake Zoom updates Critical Sudo bugs expose…

Critical Sudo bugs expose major Linux distros to local Root exploits

July 4, 2025

Critical Sudo flaws let local users gain root access on Linux systems, the vulnerabilities affect major Linux distributions. Cybersecurity researchers disclosed two vulnerabilities in the Sudo command-line utility for Linux and Unix-like operating systems. Local attackers can exploit the vulnerabilities to escalate privileges to root on affected systems. Sudo (short for “superuser do”) is a…

Google fined $314M for misusing idle Android users’ data

July 4, 2025

Google must pay $314M after a California court ruled it misused idle Android users’ data. The case ends a class-action suit filed in August 2019. A San Jose jury ruled that Google misused Android users’ cell phone data and must pay over $314.6 million in damages to affected users in California. Google is liable for…

A flaw in Catwatchful spyware exposed logins of +62,000 users

July 4, 2025

A flaw in Catwatchful spyware exposed logins of 62,000 users, turning the spy tool into a data leak, security researcher Eric Daigle revealed. A flaw in the Catwatchful Android spyware exposed its full user database, leaking email addresses and plaintext passwords of both customers and its admin, TechCrunch first reported. Security researcher Eric Daigle first discovered…

China-linked group Houken hit French organizations using zero-days

July 3, 2025

China-linked group Houken hit French govt, telecom, media, finance and transport sectors using Ivanti CSA zero-days, says France’s ANSSI. France’s cyber agency ANSSI revealed that a Chinese hacking group used Ivanti CSA zero-days to target government, telecom, media, finance, and transport sectors. The campaign, active since September 2024, is linked to the Houken intrusion set,…

Cybercriminals Target Brazil: 248,725 Exposed in CIEE One Data Breach

July 3, 2025

Resecurity found a breach in Brazil’s CIEE One platform, exposing PII and documents, later sold by data broker “888” on the dark web. Resecurity identified a data breach of one of the major platforms in Brazil connecting businesses and trainees called CIEE One – leading to the compromise of sensitive PII, including ID records, contact…

Europol shuts down Archetyp Market, longest-running dark web drug marketplace

July 3, 2025

Europol shuts down Archetyp Market, longest-running dark web drug site, the police arrested the admin in Spain, top vendors hit in Sweden. An international law enforcement operation led by German authorities has shut down Archetyp Market, the longest-running dark web drug marketplace, in a coordinated operation across six countries with support from Europol and Eurojust.…

Kelly Benefits data breach has impacted 550,000 people, and the situation continues to worsen as the investigation progresses

July 3, 2025

A data breach at Kelly Benefits has impacted 550,000 people, with the number of affected individuals growing as the investigation continues. Benefits and payroll solutions firm Kelly Benefits has confirmed that a recent data breach has affected 550,000 individuals. As the investigation continued, the scale of the impact expanded, revealing that more people were affected…

Cisco removed the backdoor account from its Unified Communications Manager

July 2, 2025

Digital communications technology giant Cisco addressed a static SSH credentials vulnerability in its Unified Communications Manager (Unified CM). A flaw, tracked as CVE-2025-20309 (CVSS score of 10), in Cisco Unified Communications Manager and its Session Management Edition lets remote attackers log in using hardcoded root credentials set during development. Cisco Unified Communications Manager (CUCM) is a call…

U.S. Sanctions Russia’s Aeza Group for aiding crooks with bulletproof hosting

July 2, 2025

U.S. Treasury sanctions Russia-based Aeza Group and affiliates for aiding cybercriminals via bulletproof hosting services. The U.S. Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Russia-based Aeza Group for aiding global cybercriminals via bulletproof hosting services. A bulletproof hosting service is a type of internet hosting provider that knowingly allows cybercriminals to host malicious content…

Qantas confirms customer data breach amid Scattered Spider attacks

July 2, 2025

Qantas reports a cyberattack after hackers accessed customer data via a third-party platform, amid ongoing Scattered Spider aviation breaches. Qantas, Australia’s largest airline, disclosed a cyberattack after hackers accessed a third-party platform used by a call centre, stealing significant customer data. The breach, linked to ongoing Scattered Spider activity, was detected and contained on Monday.…

CVE-2025-6554 is the fourth Chrome zero-day patched by Google in 2025

July 2, 2025

Google released security patches to address a Chrome vulnerability, tracked as CVE-2025-6554, for which an exploit exists in the wild. Google released security patches to address a Chrome vulnerability, tracked as CVE-2025-6554, for which an exploit is available in the wild. “Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker…

U.S. CISA adds TeleMessage TM SGNL flaws to its Known Exploited Vulnerabilities catalog

July 2, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds TeleMessage TM SGNL flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added TeleMessage TM SGNL flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2025-48927 (CVSS score of 5.3) TeleMessage TM SGNL Initialization of a Resource…

A sophisticated cyberattack hit the International Criminal Court

July 1, 2025

The International Criminal Court (ICC) is probing a sophisticated cyberattack that was discovered and contained last week. On June 30, 2025, the International Criminal Court (ICC) announced that it was hit by a sophisticated and targeted cyberattack. The organization confirmed that the incident was detected and contained by its defense systems. “Late last week, the…

Esse Health data breach impacted 263,000 individuals

July 1, 2025

A cyberattack on healthcare provider Esse Health in April 2025 exposed data of 263K+ patients, including SSNs and medical info. In April 2025, Missouri-based healthcare provider Esse Health suffered a cyberattack that disrupted its systems and led to the theft of personal data from over hundreds of thousands individuals. Esse Health is an independent physician…

Europol dismantles €460M crypto scam targeting 5,000 victims worldwide

July 1, 2025

Europol busted a crypto scam ring that laundered €460M from 5,000+ victims. Operation Borrelli involved Spain, the U.S., France, and Estonia. Europol has taken down a massive cryptocurrency fraud ring that scammed over 5,000 people worldwide, laundering around €460 million ($540 million). The international operation, dubbed Operation Borrelli, began in 2023 and was led by…

CISA and U.S. Agencies warn of ongoing Iranian cyber threats to critical infrastructure

July 1, 2025

U.S. warns of rising Iranian cyber threats exploiting outdated software and weak passwords, with attacks likely to escalate due to recent events. U.S. cybersecurity and intelligence agencies warn of rising cyber threats from Iranian state-linked hackers, expected to escalate. These actors typically exploit outdated software, known vulnerabilities, and weak or default passwords on internet-connected systems.…

U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog

June 30, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Citrix NetScaler vulnerability, tracked as CVE-2025-6543, to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2025-6543 (CVSS score of 9.2) is a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway when configured…

Canada bans Hikvision over national security concerns

June 30, 2025

Canada bans Hikvision over national security concerns, ordering the company to stop operations and barring its tech from government use. Canada ordered Chinese surveillance firm Hikvision to cease all operations in the country, citing national security concerns. Minister Mélanie Joly announced the decision after a security review found vendor’s activities could pose a threat. Canada…

Denmark moves to protect personal identity from deepfakes with new copyright law

June 30, 2025

Denmark plans to let citizens copyright their face, body, and voice to combat deepfakes under a new law strengthening personal digital rights. Denmark plans to amend its copyright law to give individuals rights over their body, face, and voice, to combat AI-generated deepfakes. Believed to be the first law of its kind in Europe, the…

Ahold Delhaize data breach affected over 2.2 Million individuals

June 30, 2025

A ransomware attack on grocery giant Ahold Delhaize led to a data breach that affected more than 2.2 million people. A ransomware attack on Dutch grocery giant Ahold Delhaize has led to a data breach affecting over 2.2 million people. Ahold Delhaize is a Dutch-Belgian multinational retail and wholesale holding company. Its name comes from the…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 51

June 29, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Ransomware Gangs Collapse as Qilin Seizes Control Dissecting a Python Ransomware distributed through GitHub repositories SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play Uncovering a Tor-Enabled Docker Exploit …

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

June 29, 2025

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. The FBI warns that Scattered Spider is now targeting the airline sector LapDogs: China-nexus hackers Hijack…

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

June 29, 2025

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. The FBI warns that Scattered Spider is now targeting the airline sector LapDogs: China-nexus hackers Hijack…

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

June 29, 2025

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. The FBI warns that Scattered Spider is now targeting the airline sector LapDogs: China-nexus hackers Hijack…

The FBI warns that Scattered Spider is now targeting the airline sector

June 28, 2025

The FBI warns that Scattered Spider is now targeting the airline sector. Feds are working with aviation partners to combat the threat and assist affected victims. The FBI reports that the cybercrime group Scattered Spider is now targeting the airline sector. The cybercriminals are using social engineering techniques to gain access to target organizations by…

The FBI warns that Scattered Spider is now targeting the airline sector

June 28, 2025

The FBI warns that Scattered Spider is now targeting the airline sector

June 28, 2025

LapDogs: China-nexus hackers Hijack 1,000+ SOHO devices for espionage

June 28, 2025

Over 1,000 SOHO devices were hacked in a China-linked spying campaign called LapDogs, forming a covert network to support cyber espionage. Security researchers at SecurityScorecard’s STRIKE team have uncovered a cyber espionage campaign, dubbed LapDogs, involving over 1,000 hacked SOHO (small office/home office) devices. These compromised devices formed a hidden network, called an Operational Relay…

LapDogs: China-nexus hackers Hijack 1,000+ SOHO devices for espionage

June 28, 2025

LapDogs: China-nexus hackers Hijack 1,000+ SOHO devices for espionage

June 28, 2025

Taking over millions of developers exploiting an Open VSX Registry flaw

June 27, 2025

A critical flaw in Open VSX Registry could let attackers hijack the VS Code extension hub, exposing millions of developers to supply chain attacks. Cybersecurity researchers at Koi Security discovered a critical vulnerability in the Open VSX Registry (open-vsx.org) that could have let attackers take over the Visual Studio Code extensions marketplace, endangering millions of…

Taking over millions of developers exploiting an Open VSX Registry flaw

June 27, 2025

Taking over millions of developers exploiting an Open VSX Registry flaw

June 27, 2025

OneClik APT campaign targets energy sector with stealthy backdoors

June 27, 2025

A OneClik campaign, likely carried out by China-linked actor, targets energy sectors using stealthy ClickOnce and Golang backdoors. Trellix cybersecurity researchers uncovered a new APT malware campaign, OneClik, targeting the energy, oil, and gas sectors. It abuses Microsoft’s ClickOnce deployment tech and custom Golang backdoors. While links to China-affiliated actors are suspected, attribution remains cautious.…

Attackers exploit Fortinet flaws to deploy Qilin ransomware

June 6, 2025

Qilin ransomware now exploits Fortinet vulnerabilities to achieve remote code execution on impacted devices. Threat intelligence firm PRODAFT warned that Qilin ransomware (aka Phantom Mantis) group targeted multiple organizations between May and June 2025 by exploiting multiple FortiGate vulnerabilities, including CVE-2024-21762, and CVE-2024-55591. “Phantom Mantis recently launched a coordinated intrusion campaign targeting multiple organizations between…

Russia-linked threat actors targets Ukraine with PathWiper wiper

June 6, 2025

A Russia-linked threat actor targeted a critical infrastructure organization in Ukraine with a new destructive malware dubbed PathWiper. Russia-linked threat actor targeted Ukraine’s critical infrastructure with a new wiper named PathWiper. Cisco Talos researchers reported that attackers utilized a legitimate endpoint administration tool, indicating they had access to the administrative console, then used it to…

U.S. Offers $10M bounty for info on RedLine malware creator and state hackers

June 6, 2025

The U.S. offers up to $10M for info on state hackers linked to RedLine malware and its creator, Maxim Rudometov, tied to attacks on U.S. infrastructure. The U.S. Department of State offers a reward of up to $10 million for information nation-state actors linked to the RedLine infostealer and its alleged author, Russian national Maxim…

Play ransomware group hit 900 organizations since 2022

June 6, 2025

A joint advisory from the US and Australian authorities states that Play ransomware has hit approximately 900 organizations over the past three years. A joint advisory from the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) states that Play ransomware has hit…

U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog

June 5, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Google Chromium V8 vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Google Chromium V8 Out-of-Bounds Read and Write Vulnerability, tracked as CVE-2025-5419, to its Known Exploited Vulnerabilities (KEV) catalog. This week, Google released out-of-band updates to address three vulnerabilities…

New versions of Chaos RAT target Windows and Linux systems

June 5, 2025

Acronis researchers reported that new Chaos RAT variants were employed in 2025 attacks against Linux and Windows systems. Acronis TRU researchers discovered new Chaos RAT variants targeting Linux and Windows in recent attacks. Originally seen in 2022, Chaos RAT evolved in 2024, with fresh samples emerging in 2025. TRU also discovered a critical flaw in…

Law enforcement seized the carding marketplace BidenCash

June 5, 2025

U.S. and Dutch authorities took down 145 domains tied to the BidenCash cybercrime marketplace in a coordinated law enforcement operation. The US DoJ announced the seizure of approximately 145 darknet and clear web domains, and cryptocurrency funds associated with the BidenCash marketplace. “The U.S. Attorney’s Office for the Eastern District of Virginia announced today the…

Law enforcement seized the carding marketplace BidenCash

June 5, 2025

Law enforcement seized the carding marketplace BidenCash

June 5, 2025

Law enforcement seized the carding marketplace BidenCash

June 5, 2025

Law enforcement seized the carding marketplace BidenCash

June 5, 2025

Law enforcement seized the carding marketplace BidenCash

June 5, 2025

Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev

June 4, 2025

Ukraine’s GUR hacked the Russian aerospace and defense company Tupolev, stealing 4.4GB of highly classified internal data. Ukraine’s military intelligence agency GUR (aka HUR) claims the hack of the Russian aerospace and defense company Tupolev. According to Kyiv Post, Ukraine’s Military Intelligence compromised the United Aircraft Company (UAC) Tupolev division, which is a key developer…

Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev

June 4, 2025

Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev

June 4, 2025

Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev

June 4, 2025

Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev

June 4, 2025

Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev

June 4, 2025

HPE fixed multiple flaws in its StoreOnce software

June 4, 2025

Hewlett Packard Enterprise (HPE) addressed multiple flaws in its StoreOnce data backup and deduplication solution. HPE has released security patches for eight vulnerabilities in its StoreOnce backup solution. These issues could allow remote code execution, authentication bypass, data leaks, and more. “Potential security vulnerabilities have been identified in HPE StoreOnce Software.” reads the advisory. “These…

HPE fixed multiple flaws in its StoreOnce software

June 4, 2025

HPE fixed multiple flaws in its StoreOnce software

June 4, 2025

HPE fixed multiple flaws in its StoreOnce software

June 4, 2025

HPE fixed multiple flaws in its StoreOnce software

June 4, 2025

HPE fixed multiple flaws in its StoreOnce software

June 4, 2025

Roundcube Webmail under fire: critical exploit found after a decade

June 4, 2025

A critical flaw in Roundcube webmail, undetected for 10 years, allows attackers to take over systems and execute arbitrary code. A critical flaw, tracked as CVE-2025-49113 (CVSS score of 9.9) has been discovered in the Roundcube webmail software. The vulnerability went unnoticed for over a decade, an attacker can exploit the flaw to take control…

Roundcube Webmail under fire: critical exploit found after a decade

June 4, 2025

Roundcube Webmail under fire: critical exploit found after a decade

June 4, 2025

Roundcube Webmail under fire: critical exploit found after a decade

June 4, 2025

Roundcube Webmail under fire: critical exploit found after a decade

June 4, 2025

Roundcube Webmail under fire: critical exploit found after a decade

June 4, 2025

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog

June 4, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2025-21479 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability CVE-2025-21480 Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability CVE-2025-27038 Qualcomm Multiple Chipsets Use-After-Free Vulnerability This…

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog

June 4, 2025

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog

June 4, 2025

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog

June 4, 2025

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog

June 4, 2025

U.S. CISA adds Multiple Qualcomm chipsets flaws to its Known Exploited Vulnerabilities catalog

June 4, 2025

Cartier disclosed a data breach following a cyber attack

June 4, 2025

Luxury-goods conglomerate Cartier disclosed a data breach that exposed customer information after a cyberattack. Cartier has disclosed a data breach following a cyberattack that compromised its systems, exposing customers’ personal information. The incident comes amid a wave of cyberattacks targeting luxury fashion brands. The luxury firm states that the threat actors gained access to “limited…

Cartier disclosed a data breach following a cyber attack

June 4, 2025

Cartier disclosed a data breach following a cyber attack

June 4, 2025

Cartier disclosed a data breach following a cyber attack

June 4, 2025

Cartier disclosed a data breach following a cyber attack

June 4, 2025

Cartier disclosed a data breach following a cyber attack

June 4, 2025

U.S. CISA adds ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

June 3, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: CVE-2021-32030 ASUS…

Breaking News, Global Security News, hacking, hacking news, information security news, Security

Breaking News, Exploits, Global Security News, hacking, hacking news, Security

Breaking News, cyber crime, Cybercrime, Global Security News, hacking

Breaking News, Exploits, Global Security News, hacking

Breaking News, cyber crime, Cybercrime, data breach, Global Security News

APT, Breaking News, Europe, Global Security News, intelligence, malware

Breaking News, cyber crime, Cybercrime, data breach, Exploits, Global Security News, hacking

APT, Breaking News, cyber crime, Global Security News, intelligence, malware

Breaking News, Cybercrime, Exploits, Global Security News, hacking, malware, Security

Breaking News, Exploits, Global Security News, hacking, hacking news, IT Information Security, Security

Asia Pacific, Breaking News, Global Security News, intelligence, Security

Breaking News, CISA, Exploits, Global Security News, hacking, information security news, IT Information Security

Breaking News, cyber crime, Cybercrime, Global Security News, Security

Asia Pacific, Breaking News, Global Security News, intelligence, Laws and regulations, Security

Breaking News, Chrome, CISA, Exploits, Global Security News, hacking, Security

Breaking News, cyber crime, Cybercrime, Global Security News, hacking, malware

Breaking News, Cybercrime, data breach, Emerging Tech, Global Security News, malware, Security

Breaking News, Cybercrime, data breach, Exploits, Global Security News, hacking, IT Information Security

Breaking News, Exploits, Global Security News, hacking, hacking news, information security news, Security

Breaking News, Global Security News, Google, hacking, hacking news, Laws and regulations

Android, Breaking News, Global IT News, Global Security News, hacking, malware, Mobile

APT, Breaking News, china, Exploits, Global Security News, hacking, Security

Breaking News, Cybercrime, data breach, Exploits, Global Security News, hacking

Breaking News, cyber crime, Europe, Global Security News, hacking

Breaking News, cyber crime, Cybercrime, data breach, Global Security News, Uncategorized

Breaking News, cisco, Exploits, Global Security News, hacking, Security

Breaking News, cyber crime, Cybercrime, Global Security News, hacking

Breaking News, cyber crime, Cybercrime, data breach, Global Security News, hacking

Breaking News, Chrome, Exploits, Global Security News, hacking, information security news, IT Information Security

Breaking News, CISA, Exploits, Global Security News, hacking, hacking news, Security

Breaking News, Global Security News, hacking, hacking news, ICC, information security news

Breaking News, cyber crime, Cybercrime, data breach, Esse Health, Global Security News

AI, Asia Pacific, Breaking News, deepseek, GDPR, Global Security News, Laws and regulations

Breaking News, cyber crime, Cybercrime, Global Security News, hacking, hacking news

Breaking News, CISA, Cyber warfare, Exploits, Global Security News, hacking, intelligence

Breaking News, CISA, Exploits, Global Security News, hacking, Security

Breaking News, Global Security News, hacking, hacking news, intelligence, Laws and regulations, North America

Breaking News, deepfake, Europe, Global Security News, hacking, Laws and regulations, Security

Breaking News, cyber crime, Cybercrime, data breach, Global Security News

Breaking News, Facebook, Global IT News, Global Security News, hacking, Social networks

Breaking News, cyber crime, Cybercrime, Exploits, Global Security News, hacking, malware

Asia Pacific, Breaking News, Cybercrime, data breach, Global Security News, hacking, hacking news

Asia Pacific, Breaking News, Cybercrime, data breach, Global Security News, hacking, hacking news

Asia Pacific, Breaking News, Cybercrime, data breach, Global Security News, hacking, hacking news

Breaking News, cyber crime, Global Security News, hacking

Breaking News, cyber crime, Global Security News, hacking

Breaking News, cyber crime, Global Security News, hacking

APT, Asia Pacific, Breaking News, china, Global Security News, intelligence, malware

APT, Asia Pacific, Breaking News, china, Global Security News, intelligence, malware

APT, Asia Pacific, Breaking News, china, Global Security News, intelligence, malware