Category: Security

Auto Added by WPeMatico

Matthew D. Lane, a Massachusetts student, got four years in prison for hacking and extorting $3M from PowerSchool and another company. A Massachusetts student, Matthew D. Lane, was sentenced to four years in prison for hacking and extorting about $3 million from two companies, including PowerSchool. In May, Lane pleaded guilty to hacking two U.S.…

Auction giant Sotheby’s says data breach exposed customer information

October 16, 2025

Major international auction house Sotheby’s is notifying customers of a data breach incident on its systems where threat actors stole sensitive information, including financial details. […]

Have I Been Pwned: Prosper data breach impacts 17.6 million accounts

October 16, 2025

Hackers stole the personal information of over 17.6 million people after breaching the systems of financial services company Prosper. […]

Hackers exploit Cisco SNMP flaw to deploy rootkit on switches

October 16, 2025

Threat actors exploited a recently patched remote code execution vulnerability (CVE-2025-20352) in older, unprotected Cisco networking devices to deploy a Linux rootkit and gain persistent access. […]

Misconfigured NetcoreCloud Server Exposed 40B Records in 13.4TB of Data

October 16, 2025

A misconfigured server belonging to Indian company NetcoreCloud exposed 40 billion records and 13.4TB of data, revealing sensitive…

Microsoft disrupts ransomware attacks targeting Teams users

October 16, 2025

Microsoft has disrupted a wave of Rhysida ransomware attacks in early October by revoking over 200 certificates used to sign malicious Teams installers. […]

NK’s Famous Chollima Use BeaverTail and OtterCookie Malware in Job Scam

October 16, 2025

North Korea’s Famous Chollima is back, merging BeaverTail and OtterCookie malware to target job seekers. Cisco Talos details the new threat. Keylogging, screen recording, and cryptocurrency wallet theft detected in an attack.

U.S. CISA adds Adobe Experience Manager Forms flaw to its Known Exploited Vulnerabilities catalog

October 16, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe Experience Manager Forms flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Adobe Experience Manager Forms flaw, tracked as CVE-2025-54253 (CVSS score 10.0), to its Known Exploited Vulnerabilities (KEV) catalog. Adobe Experience Manager (AEM) Forms is a component of Adobe…

Gladinet fixes actively exploited zero-day in file-sharing software

October 16, 2025

Gladinet has released security updates for its CentreStack business solution to address a local file inclusion vulnerability (CVE-2025-11371) that threat actors have leveraged as a zero-day since late September. […]

CISA: Maximum-severity Adobe flaw now exploited in attacks

October 16, 2025

CISA has warned that attackers are actively exploiting a maximum-severity vulnerability in Adobe Experience Manager to execute code on unpatched systems. […]

China-linked APT Jewelbug targets Russian IT provider in rare cross-nation cyberattack

October 16, 2025

China-linked APT Jewelbug targeted a Russian IT provider for five months in 2025, showing Russia remains exposed to Chinese cyber espionage. China-linked threat actor Jewelbug (aka CL-STA-0049, Earth Alux, and REF7707) carried out a five-month intrusion on a Russian IT service provider, marking its expansion beyond Southeast Asia and South America. The campaign, reported by…

Unified Exposure Management Platforms: The Future of Preemptive Cyber Defense

October 16, 2025

Traditional MDR focuses on reacting to attacks already in motion — but modern threats demand prevention. Picus Security explains how Unified Exposure Management Platforms continuously identifies, validates, and fixes exploitable risks before adversaries strike. […]

North Korean hackers use EtherHiding to hide malware on the blockchain

October 16, 2025

North Korean hackers were observed employing the ‘EtherHiding’ tactic to deliver malware, steal cryptocurrency, and perform espionage with stealth and resilience. […]

Microsoft debuts Copilot Actions for agentic AI-driven Windows tasks

October 16, 2025

Microsoft announced today a new Windows 11 Copilot feature called Copilot Actions that enables AI agents to perform real tasks on local files and applications. […]

Microsoft adds Copilot voice activation on Windows 11 PCs

October 16, 2025

Microsoft says Windows 11 users can now start a conversation with the AI-powered Copilot digital assistant by saying the “Hey Copilot” wake word. […]

New Tech Support Scam Uses Microsoft Logo to Fake Browser Lock, Steal Data

October 16, 2025

The Cofense Phishing Defense Centre warns of a new tech support scam using Microsoft’s brand to lock browsers and steal data. Learn how the attack uses fake ‘payment lures’ and urgent security alerts to trick victims into calling a fraudulent support number.

U.S. CISA adds SKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities catalog

October 16, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds OracSKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added OracSKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions…

Capita to pay £14 million for data breach impacting 6.6 million people

October 15, 2025

The Information Commissioner’s Office (ICO) in the UK has fined Capita, a provider of data-driven business process services, £14 million ($18.7 million) for a data breach incident in 2023 that exposed the personal information of 6.6 million people. […]

Qilin Ransomware announced new victims

October 15, 2025

Resecurity’s new report details how the Qilin RaaS group relies on global bulletproof hosting networks to support its extortion operations. The following new report by Resecurity will explore the Qilin ransomware-as-a-service (RaaS) operation’s reliance on bullet-proof-hosting (BPH) infrastructures, with an emphasis on a network of rogue providers based in different parts of the world. Qilin…

PowerSchool hacker gets sentenced to four years in prison

October 15, 2025

19-year-old college student Matthew D. Lane, from Worcester, Massachusetts, was sentenced to 4 years in prison for orchestrating a cyberattack on PowerSchool in December 2024 that resulted in a massive data breach. […]

Fake LastPass, Bitwarden breach alerts lead to PC hijacks

October 15, 2025

An ongoing phishing campaign is targeting LastPass and Bitwarden users with fake emails claiming that the companies were hacked, urging them to download a supposedly more secure desktop version of the password manager. […]

A sophisticated nation-state actor breached F5 systems, stealing BIG-IP source code and data on undisclosed flaw

October 15, 2025

F5 disclosed that a sophisticated nation-state actor breached its systems, stealing BIG-IP source code and data on undisclosed product vulnerabilities. Cybersecurity firm F5 disclosed that a highly sophisticated nation-state actor in August 2025 threat actors breached its systems and stole BIG-IP’s source code and information related to undisclosed vulnerabilities. The attackers accessed the company’s BIG-IP…

F5 Confirms Nation-State Breach, Source Code and Vulnerability Data Stolen

October 15, 2025

F5 has confirmed it was the victim of a state-sponsored cyberattack that allowed hackers to access its internal…

F5 releases BIG-IP patches for stolen security vulnerabilities

October 15, 2025

Cybersecurity company F5 has released security updates to address BIG-IP vulnerabilities stolen in a breach detected on August 9, 2025. […]

Microsoft Patch Tuesday Oct 2025 Fixs 175 Vulnerabilities including 3 Zero-Days

October 15, 2025

October’s Microsoft Patch Tuesday fixes 170+ flaws, including 3 actively exploited zero-days and critical WSUS RCE (CVSS 9.8). Immediate patching is mandatory. Final free updates for Windows 10.

Clothing giant MANGO discloses data breach exposing customer info

October 15, 2025

Spanish fashion retailer MANGO is sending notices of a data breach to its customers, warning that its marketing vendor suffered a compromise exposing personal data. […]

How to spot dark web threats on your network using NDR

October 15, 2025

Dark web activity can hide in plain sight within everyday network traffic. Corelight’s NDR platform brings deep visibility, AI-driven detection, and behavioral analytics to uncover hidden threats across your network. […]

F5 says hackers stole undisclosed BIG-IP flaws, source code

October 15, 2025

U.S. cybersecurity company F5 disclosed that it suffered a cyberattack in early August, where suspected nation-state hackers breached its systems and stole undisclosed BIG-IP security vulnerabilities and source code. […]

Elasticsearch Leak Exposes 6 Billion Records from Scraping, Old and New Breaches

October 15, 2025

An Elasticsearch leak exposed 6 billion records from global data breaches and scraping sources, including banking and personal details tied to multiple regions.

Common Threat Themes: Defending Against Lateral Movement (Part 1)

October 15, 2025

Discover why lateral movement is a key tactic in cyber breaches and how defenders can strengthen security by focusing on this critical threat vector.

Fake Google Job Offer Email Scam Targets Workspace and Microsoft 365 Users

October 15, 2025

Cybersecurity firm Sublime Security details a new credential phishing scam impersonating Google Careers to steal login details from Google Workspace and Microsoft 365 users.

SAP fixed maximum-severity bug in NetWeaver

October 15, 2025

SAP addressed 13 new flaws, including a maximum severity vulnerability in SAP NetWeaver, which could lead to arbitrary command execution. SAP addressed 13 new vulnerabilities, including a maximum severity issue, tracked as CVE-2025-42944 (CVSS score of 10.0) in SAP NetWeaver. The vulnerability is an insecure deserialization that could lead to arbitrary command execution. “Due to a deserialization…

Check Point & Wiz Partner on Integrated Security Solutions

October 15, 2025

Check Point Software Technologies, a leader in cybersecurity solutions, has announced the next step in its strategic partnership with Wiz, a cloud security platform, by delivering a fully integrated cloud-native application protection platform (CNAPP) and Cloud Network Security Solution. Parallel integrations bring network and cloud-native app security to partners, customers This news builds on Check…

SolarWinds Launches AI Agent and Expands AI Features

October 15, 2025

SolarWinds, a provider of simple, powerful, secure observability and IT management software, has recently launched the SolarWinds AI Agent and a range of expanded AI features to accelerate the transition to autonomous operational resilience. New solutions promise to fill gaps in security needs The new AI Agent bridges the resilience gap by giving IT teams…

Unencrypted satellites expose global communications

October 15, 2025

Researchers found nearly half of geostationary satellites leak unencrypted data, exposing consumer, corporate, and military communications. A group of researchers from UC San Diego and the University of Maryland found nearly half of geostationary satellites transmit unencrypted data, exposing sensitive consumer, corporate, and military communications to interception. The researchers used an $800 satellite receiver for…

Deeper Network Promo Deeper Network Promo

APT, Asia Pacific, Breaking News, Global Security News, hacking, intelligence, Security

Flax Typhoon APT exploited ArcGIS server for over a year as a backdoor

October 15, 2025

China-linked cyberespionage group Flax Typhoon hijacked an ArcGIS system for over a year and used it as a backdoor. China-linked APT group Flax Typhoon (aka Ethereal Panda or RedJuliett) compromised an ArcGIS system for over a year, using it as a backdoor. ArcGIS, a key GIS platform for mapping and analysis, supports vital services like…

Malicious crypto-stealing VSCode extensions resurface on OpenVSX

October 14, 2025

A threat actor called TigerJack is constantly targeting developers with malicious extensions published on Microsoft’s Visual Code (VSCode) marketplace and OpenVSX registry to steal cryptocurrency and plant backdoors. […]

New Android Pixnapping attack steals MFA codes pixel-by-pixel

October 14, 2025

A new side-channel attack called Pixnapping enables a malicious Android app with no permissions to extract sensitive data by stealing pixels displayed by applications or websites, and reconstructing them to derive the content. […]

Researchers warn of widespread RDP attacks by 100K-node botnet

October 14, 2025

A botnet of 100K+ IPs from multiple countries is attacking U.S. RDP services in a campaign active since October 8. GreyNoise researchers uncovered a large-scale botnet that is targeting Remote Desktop Protocol (RDP) services in the United States starting on October 8. The company discovered the botnet after detecting an unusual spike in Brazilian IP…

Microsoft October 2025 Patch Tuesday fixes 6 zero-days, 172 flaws

October 14, 2025

Today is Microsoft’s October 2025 Patch Tuesday, which includes security updates for 172 flaws, including six zero-day vulnerabilities. Get patching! […]

US seizes $15 billion in crypto from ‘pig butchering’ kingpin

October 14, 2025

The U.S. Department of Justice has seized $15 billion in bitcoin from the leader of Prince Group, a criminal organization that stole billions of dollars from victims in the United States through cryptocurrency investment scams, also known as romance baiting or pig butchering. […]

Oracles silently fixes zero-day exploit leaked by ShinyHunters

October 14, 2025

Oracle has silently fixed an Oracle E-Business Suite vulnerability (CVE-2025-61884) that was actively exploited to breach servers, with a proof-of-concept exploit publicly leaked by the ShinyHunters extortion group. […]

Security firms debate CVE credit in overlapping vulnerability reports

October 14, 2025

FuzzingLabs has accused the YCombinator-backed startup, Gecko Security, of replicating its vulnerability disclosures. Gecko allegedly filed for 2 CVEs based on FuzzingLabs’ reports without crediting them. Gecko denies any wrongdoing, calling the allegations a misunderstanding over disclosure process. […]

Harvard hit in Oracle EBS cyberattack, 1.3 TB of data leaked by Cl0p group

October 14, 2025

Harvard University confirmed being targeted in the Oracle EBS campaign after the Cl0p ransomware group leaked 1.3 TB of data. Harvard University confirmed it was targeted in the Oracle E-Business Suite campaign after the Cl0p ransomware group listed it on its leak site. The cybercrime group claimed to have leaked 1.3 TB of data allegedly…

Harvard University hit in Oracle EBS cyberattack, 1.3 TB of data leaked by Cl0p group

October 14, 2025

Microsoft Limits IE Mode in Edge After Chakra Zero-Day Activity Detected

October 14, 2025

Microsoft restricted access to Edge’s IE Mode in August 2025 after hackers used a Chakra zero-day flaw to bypass security and take over user devices. Check out the new steps for enabling IE Mode.

When AI Agents Join the Teams: The Hidden Security Shifts No One Expects

October 14, 2025

AI assistants are no longer just helping — they’re acting. Autonomous agents now open tickets, fix incidents, and make decisions faster than humans can monitor. As “Shadow AI” spreads, learn from Token Security why orgs must govern these agents like powerful new identities before oversight disappears. […]

Secure Boot bypass risk on nearly 200,000 Linux Framework sytems

October 14, 2025

Around 200,000 Linux computer systems from American computer maker Framework were shipped with signed UEFI shell components that could be exploited to bypass Secure Boot protections. […]

Chinese hackers abuse geo-mapping tool for year-long persistence

October 14, 2025

Chinese state hackers remained undetected in a target environment for more than a year by turning a component in the ArcGIS geo-mapping tool into a web shell. […]

UK NCSC Reports 429 cyberattacks in a year, with nationally significant cases more than doubling

October 14, 2025

The UK’s NCSC handled 429 cyberattacks from Sept 2024–Aug 2025, including 204 nationally significant cases, over double the previous year’s total. The UK’s National Cyber Security Centre (NCSC) reported a record surge in major cyberattacks, responding to 429 incidents from September 2024 to August 2025, including 204 deemed “nationally significant”, more than double the previous…

How Top SOCs Stay Up-to-Date on Current Threat Landscape

October 14, 2025

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

Astaroth Trojan Uses GitHub Images to Stay Active After Takedowns

October 14, 2025

Astaroth banking trojan has evolved to use GitHub and steganography for resilient C2, hiding its vital commands in images. Learn how this sophisticated malware employs fileless techniques to steal banking and crypto credentials from users across Latin America.

Unverified COTS hardware enables persistent attacks in small satellites via SpyChain

October 14, 2025

SpyChain shows how unverified COTS hardware in small satellites can enable persistent, multi-component supply chain attacks using NASA’s NOS3 simulator. The rise of small satellites has transformed scientific, commercial, and defense operations. Using commercial off-the-shelf (COTS) parts makes them cheaper and faster to build but also introduces new, poorly understood security risks unique to space…

Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025-61884

October 14, 2025

Oracle issued an emergency security update to address a new E-Business Suite (EBS) vulnerability tracked as CVE-2025-61884. Oracle released an emergency patch to address an information disclosure flaw, tracked as CVE-2025-61884 (CVSS Score of 7.5), in E-Business Suite’s Runtime UI component (versions 12.2.3–12.2.14). “Oracle has just released Security Alert CVE-2025-61884. This vulnerability affects some deployments of Oracle E-Business…

Microsoft restricts IE mode access in Edge after zero-day attacks

October 13, 2025

Microsoft is restricting access to Internet Explorer mode in Edge browser after learning that hackers are leveraging zero-day exploits in the Chakra JavaScript engine for access to target devices. […]

SimonMed says 1.2 million patients impacted in January data breach

October 13, 2025

U.S. medical imaging provider SimonMed Imaging is notifying more than 1.2 million individuals of a data breach that exposed their sensitive information. […]

Customer payment data stolen in Unity Technologies’s SpeedTree website compromise

October 13, 2025

Malicious code on Unity Technologies’s SpeedTree site skimmed sensitive data from hundreds of customers, the company confirmed. Video game software development firm Unity Technologies revealed that malicious code on its SpeedTree website skimmed sensitive information from hundreds of customers, impacting users who accessed the compromised site. The company discovered on August 26, 2025, the presence…

Massive multi-country botnet targets RDP services in the US

October 13, 2025

A large-scale botnet is targeting Remote Desktop Protocol (RDP) services in the United States from more than 100,000 IP addresses. […]

ShinyHunters Leak Alleged Data from Qantas, Vietnam Airlines and Other Major Firms

October 13, 2025

ShinyHunters and its affiliate hackers have leaked data from 6 firms, including Qantas and Vietnam Airlines, after claiming to breach 39 companies via a Salesforce vulnerability.

SonicWall VPN accounts breached using stolen creds in widespread attacks

October 13, 2025

Researchers warn that threat actors have compromised more than a hundred SonicWall SSLVPN accounts in a large-scale campaign using stolen, valid credentials. […]

OpenAI’s Guardrails Can Be Bypassed by Simple Prompt Injection Attack

October 13, 2025

Just weeks after its release, OpenAI’s Guardrails system was quickly bypassed by researchers. Read how simple prompt injection attacks fooled the system’s AI judges and exposed an ongoing security concern for OpenAI.

Oracle releases emergency patch for new E-Business Suite flaw

October 13, 2025

Oracle has issued an emergency security update over the weekend to patch another E-Business Suite (EBS) vulnerability that can be exploited remotely by unauthenticated attackers. […]

Meet Varonis Interceptor: AI-Native Email Security

October 13, 2025

AI-generated phishing and social engineering attacks outpace traditional email defenses. Varonis’ new Interceptor platform uses multimodal AI — vision, language, and behavior models — to detect zero-hour attacks and stop them before they reach users. […]

Microsoft revamps Internet Explorer Mode in Edge after August attacks

October 13, 2025

Microsoft updated Edge’s Internet Explorer mode after August 2025 reports that attackers exploited it to access users’ devices without authorization. Microsoft updated Edge’s Internet Explorer mode after reports in August 2025 that threat actors exploited the backward compatibility feature to gain unauthorized device access. Microsoft Edge’s IE mode lets organizations run legacy Internet Explorer 11…

Harvard investigating breach linked to Oracle zero-day exploit

October 13, 2025

Harvard University is investigating a data breach after the Clop ransomware gang listed the school on its data leak site, saying the alleged breach was likely caused by a recently disclosed zero-day vulnerability in Oracle’s E-Business Suite servers. […]

Invoicely Database Leak Exposes 180,000 Sensitive Records

October 13, 2025

Cybersecurity researcher Jeremiah Fowler discovered nearly 180,000 files, including PII and banking details, left exposed on an unprotected database linked to the Invoicely platform. Read about the identity theft and financial fraud risks for over 250,000 businesses worldwide.

Stealit Malware spreads via fake game & VPN installers on Mediafire and Discord

October 13, 2025

Stealit malware abuses Node.js SEA and Electron to spread via fake game and VPN installers shared on Mediafire and Discord. Fortinet FortiGuard Labs researchers spotted Stealit malware campaign abusing Node.js Single Executable Application (SEA) and sometimes Electron to spread via fake game and VPN installers on Mediafire and Discord. Fortinet uncovered the campaign while investigating…

Clop Ransomware group claims the hack of Harvard University

October 12, 2025

The notorious Clop Ransomware group claims the hack of Harvard University and added the prestigious institute to its Tor data leak site. The Clop Ransomware group announced the hack of the prestigious Harvard University. The cybercrime group created a page for the university on its Tor data leak site and announced it will leak the…

Fake ‘Inflation Refund’ texts target New Yorkers in new scam

October 12, 2025

An ongoing smishing campaign is targeting New Yorkers with text messages posing as the Department of Taxation and Finance, claiming to offer “Inflation Refunds” in an attempt to steal victims’ personal and financial data. […]

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 66

October 12, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Ransomware and Cyber Extortion in Q3 2025 Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability XWorm V6: Exploring Pivotal Plugins ClayRat: A New Android Spyware Targeting Russia Security Evaluation of Android apps…

Deeper Network Promo Deeper Network Promo

Breaking News, cyber crime, Exploits, Global Security News, hacking, Security

Attackers exploit valid logins in SonicWall SSL VPN compromise

October 11, 2025

Huntress warns of widespread SonicWall SSL VPN breaches, with attackers using valid credentials to access multiple accounts rapidly. Cybersecurity firm Huntress warned of a widespread compromise of SonicWall SSL VPNs, with threat actors using valid credentials to access multiple customer accounts rapidly. “As of October 10, Huntress has observed widespread compromise of SonicWall SSLVPN devices…

Spain dismantles “GXC Team” cybercrime syndicate, arrests leader

October 11, 2025

Spanish Guardia Civil have dismantled the “GXC Team” cybercrime syndicate and arrested its alleged leader, a 25-year-old Brazilian known as “GoogleXcoder.” […]

Apple doubles maximum bug bounty to $2M for zero-click RCEs

October 10, 2025

Apple raised bug bounties to $2M for zero-click RCEs, doubling payouts. Since 2020, it’s paid $35M to 800 researchers. Apple doubled its bug bounty rewards, now offering up to $2 million for zero-click remote code execution flaws. Since 2020, the tech giant has paid $35M to 800 researchers. Apple aims to pay exploit chains comparable…

Hackers exploiting zero-day in Gladinet file sharing software

October 10, 2025

Threat actors are exploiting a zero-day vulnerability (CVE-2025-11371) in Gladinet CentreStack and Triofox products, which allows a local attacker to access system files without authentication. […]

Cybersecurity For Dummies, 3rd Edition eBook FREE for a Limited Time

October 10, 2025

In today’s hyper-connected world, cyber threats are more sophisticated and frequent than ever – ransomware, data breaches, and social engineering scams, targeting everyone from individuals to Fortune 500 companies. Right now, you can grab “Cybersecurity For Dummies, 3rd Edition” – a $29.99 value – completely FREE for a limited time. […]

Apple now offers $2 million for zero-click RCE vulnerabilities

October 10, 2025

Apple is announcing a major expansion and redesign of its bug bounty program, doubling maximum payouts, adding new research categories, and introducing a more transparent reward structure. […]

Auth Bypass Flaw in Service Finder WordPress Plugin Under Active Exploit

October 10, 2025

An Authentication Bypass (CVE-2025-5947) in Service Finder Bookings plugin allows any unauthenticated attacker to log in as an administrator. Over 13,800 exploit attempts detected. Update to v6.1 immediately.

Stealit Malware Using Node.js to Hide in Fake Game and VPN Installers

October 10, 2025

Fortinet warns of Stealit, a MaaS infostealer, now targeting Windows systems and evading detection by using Node.js’s SEA feature while hiding in fake game and VPN installers.

Juniper patched nine critical flaws in Junos Space

October 10, 2025

Juniper fixed nearly 220 flaws in Junos OS, Junos Space, and Security Director, including nine critical bugs in Junos Space. Juniper Networks released patches to address nearly 220 vulnerabilities in Junos OS, Junos Space, and Security Director, including nine critical flaws in Junos Space. One of these flaws, tracked as CVE-2025-59978 (CVSS score of 9.0),…

From Lab to Leadership: How VMware Certification Transformed My Career

October 10, 2025

From lab work to leadership — VMware certification can transform your IT career. Learn from VMware User Group (VMUG) how the VMUG Advantage can help you build real skills, gain confidence, and join a global IT community. […]

it-sa-Special

October 10, 2025

Salesforce rekrutiert Security- und Privacy-Agenten Salesforce erweitert seine KI-Plattform für den Einsatz im Bereich Security und Privacy. Im Security Center soll Agentforce neue Sicherheitsfunktionen hinzufügen. Dazu zählen schnelle, gründliche Sicherheitsanalysen, Unterstützung beim Beheben von Sicherheitsvorfällen oder autonomes Thread Detection und Monitoring. Das Privacy Center wird laut Salesforce durch die KI-Agenten um Automatisierungen erweitert. Als wichtigste Funktionen…

U.S. CISA adds Grafana flaw to its Known Exploited Vulnerabilities catalog

October 10, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Grafana flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Grafana flaw, tracked as CVE-2021-43798 (CVSS score 7.5), to its Known Exploited Vulnerabilities (KEV) catalog. Grafana is an open-source platform for monitoring and observability. This flaw is a directory traversal vulnerability affecting versions…

FBI takes down BreachForums portal used for Salesforce extortion

October 10, 2025

The FBI has seized last night all domains for the BreachForums hacking forum operated by the ShinyHunters group mostly as a portal for leaking corporate data stolen in attacks from ransomware and extortion gangs. […]

New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube

October 9, 2025

A new Android spyware called ClayRat is luring potential victims by posing as popular apps and services like WhatsApp, Google Photos, TikTok, and YouTube. […]

SonicWall Says All Firewall Backups Were Accessed by Hackers

October 9, 2025

SonicWall has confirmed that attackers accessed cloud backup configuration files for all customers using its backup service exposing encrypted credentials and network configurations.

Microsoft: Hackers target universities in “payroll pirate” attacks

October 9, 2025

A cybercrime gang tracked as Storm-2657 has been targeting university employees in the United States to hijack salary payments in “pirate payroll” attacks since March 2025. […]

Hackers now use Velociraptor DFIR tool in ransomware attacks

October 9, 2025

Threat actors have started to use the Velociraptor digital forensics and incident response (DFIR) tool in attacks that deploy LockBit and Babuk ransomware. […]

Fake TikTok and WhatsApp Apps Infect Android Devices with ClayRat Spyware

October 9, 2025

Zimperium’s zLabs warns of ClayRat, a fast-spreading Android spyware targeting Russia. It hides in fake apps like TikTok and steals texts, calls records, and camera photos.

RondoDox botnet targets 56 n-day flaws in worldwide attacks

October 9, 2025

A new large-scale botnet called RondoDox is targeting 56 vulnerabilities in more than 30 distinct devices, including flaws first disclosed during Pwn2Own hacking competitions. […]