Telecommunications provider Orange Communication faces a potential data breach after a threat actor using the pseudonym “Rey” claimed responsibility for leaking 380,000 email records and sensitive corporate data on a dark web forum. The alleged breach, disclosed earlier this week, includes source code, internal invoices,…
New LightSpy spyware variant comes with enhanced data collection features targeting social media platforms
Researchers found an updated LightSpy spyware with enhanced data collection features targeting social media platforms like Facebook and Instagram. Cybersecurity researchers at Hunt.io have found an updated version of the LightSpy spyware that supports an expanded set of data collection…
Geopolitical Tension Fuels APT and Hacktivism Surge
Europe is hit hard as geopolitics drives increase in state-backed APT and hacktivist activity This article has been indexed from www.infosecurity-magazine.com Read the original article: Geopolitical Tension Fuels APT and Hacktivism Surge
Fortifying Financial Services Cybersecurity with Threat Intelligence and Cybersecurity Automation
The World Economic Forum’s Global Cybersecurity Outlook 2025 Insight Report paints a bleak picture of what the year ahead holds for technology security teams worldwide. However, some industries are likely to be worse off than others. The financial sector, for…
ExpressVPN gets faster and more secure, thanks to Rust
By leveraging the power of Rust, ExpressVPN is setting a new standard for speed, security, and adaptability in VPN protocols. This article has been indexed from Latest stories for ZDNET in Security Read the original article: ExpressVPN gets faster and…
CIS Controls Version 8.1: What you need to know
The latest version of the CIS Controls was released in June 2024. The new version, 8.1, introduces some minor updates via design principles. Context New asset classes are updated to better match the specific parts of an enterprise’s infrastructure that…
WordPress Plugin Vulnerability Exposes Millions of Websites to Script Injection Attacks
A critical security vulnerability in the Essential Addons for Elementor plugin (CVE-2025-24752) has put over two million WordPress websites at risk of cross-site scripting (XSS) attacks. The vulnerability discovered in the plugin’s handling of user inputs allowed attackers to inject…
Pentera Cyber Pulse identifies new threats and vulnerabilities
Pentera has unveiled Cyber Pulse, a new mechanism to update the Pentera platform with the latest vulnerabilities and attack techniques from the Pentera research team. Cyber Pulse delivers a continuous stream of new cyber exposure validation capabilities, enabling organizations to…
Blackout in Chile: Millionen Menschen plötzlich ohne Strom
Ein mehrere Stunden andauernder Blackout hat fast ganz Chile ins Chaos gestürzt. Soldaten und eine Ausgangssperre sollten für Ordnung sorgen. (Blackout, Security) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Blackout in Chile: Millionen Menschen…
U.S. CISA adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Partner Center and Synacor Zimbra Collaboration Suite vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall SonicOS and Palo Alto PAN-OS vulnerabilities to its Known…
Have I Been Pwned Added 284 Million Accounts Stolen by Information Stealer Malware
Have I Been Pwned (HIBP) has incorporated 284 million email addresses compromised by information-stealer malware into its breach notification service. The data originates from a 1.5TB corpus of stealer logs dubbed “ALIEN TXTBASE”, marking one of the largest malware-related dataset…
2850+ Ivanti Connect Secure Devices Vulnerable to Remote Code Execution Attacks
A critical vulnerability, CVE-2025-22467, in Ivanti Connect Secure (ICS) devices has left approximately 2,850 instances worldwide unpatched and vulnerable to remote code execution (RCE) attacks. This flaw, with a CVSS score of 9.9, is categorized as a stack-based buffer overflow…
US Employee Screening Giant Hacked – 3M People Data at Risk
DISA Global Solutions, a leading provider of employment screening services, has confirmed a massive data breach exposing sensitive information of approximately 3.3 million individuals. The incident, classified as an external system breach (CVE pending), occurred between February 9 and April…
Fully Undetected Batch Script Leverages PowerShell & Visual Basic to Drop XWorm
A recent discovery has unveiled a sophisticated and fully undetected batch script capable of delivering the powerful malware families XWorm and AsyncRAT. This script, which remained undetected on VirusTotal for over two days, employs advanced obfuscation techniques and leverages PowerShell…
It’s Time for Defense Tech Companies to Get Ahead of CMMC Before They Get Left Behind
The Cybersecurity Maturity Model Certification (CMMC) process is just around the corner and is expected by most to go into effect early next year. This is why defense tech companies need to act today to start their compliance journey. The…
Seal OS fixes vulnerabilities in Linux operating systems
Seal Security launched Seal OS, a solution designed to automatically fix vulnerabilities in both Linux operating systems and application code. Seal OS delivers long-term support for a wide range of Linux distributions, encompassing Red Hat Enterprise Linux, CentOS, Oracle Linux,…
Red Hat OpenShift 4.18 enhances security across IT environments
Red Hat announced Red Hat OpenShift 4.18, the latest version of the hybrid cloud application platform powered by Kubernetes. Red Hat OpenShift 4.18 introduces new features and capabilities designed to streamline operations and security across IT environments and deliver greater…
New Phishing Scam Uses Authentic PayPal Address: Cyber Security Today February 26, 2025
In this episode, host Jim Love covers a $1.5 billion Ethereum heist attributed to the North Korean Lazarus Group, Google’s shift from SMS to QR codes for multifactor authentication, a massive botnet targeting Microsoft 365 accounts, and new phishing scams…
KI-Plattformen: UEFI-Sicherheitslücke bedroht Nvidia Jetson und IGX Orin
Angreifer können Nvidias Jetson Linux und IGX OS attackieren, um Systeme zu kompromittieren. Sicherheitsupdates stehen zum Download bereit. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: KI-Plattformen: UEFI-Sicherheitslücke bedroht Nvidia Jetson und IGX Orin
X.Org und Xwayland: Sicherheitslücken ermöglichen Codeschmuggel
Mehrere Sicherheitslücken in X.Org und Xwayland ermöglichen Angreifern das Einschmuggeln von Schadcode. Updates stehen zum Teil bereit. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: X.Org und Xwayland: Sicherheitslücken ermöglichen Codeschmuggel
RSync Vulnerabilities Allow Hackers to Take Full Control of Servers – PoC Released
A series of critical security vulnerabilities in the widely-used Rsync file synchronization tool have been uncovered, exposing millions of servers to potential takeover by anonymous attackers. The flaws, discovered in Rsync version 3.2.7 and earlier, enable remote code execution, sensitive…
Deceptive Signatures: Advanced Techniques in BEC Attacks
KEY TAKEAWAYS Sophistication of BEC Attacks: Business Email Compromise (BEC) attacks are becoming increasingly sophisticated, leveraging advanced social engineering, AI-driven personalization, and phishing kits in order to overcome MFA protections. Exploitation of Trust: Some threat actor groups have been discovered…
DISA breach, Swedish backdoors, Dems looking into system access
US employee screening firm confirms breach Swedish law enforcement seeking messaging app backdoors Dems warn of exposed entry points on government systems Huge thanks to our sponsor, Conveyor Ever wish you had a teammate that could handle the most annoying…
KI sicher für sichere Netzwerke nutzen
Künstliche Intelligenz (KI) hält weltweit Einzug in Cybersicherheitssysteme und dieser Trend steht erst am Anfang. KI kann dabei die Netzwerksicherheit verbessern, allerdings nutzen auch Cyberkriminelle die Technologie vermehrt für ausgefeilte Angriffe. Wie also Sicherheit gewährleisten? Dieser Artikel wurde indexiert von…