Technical details about a maximum-severity Cisco IOS XE WLC arbitrary file upload flaw tracked as CVE-2025-20188 have been made publicly available, bringing us closer to a working exploit. […]
Category: Security
Exploits, Global Security News, Security
Hackers are exploiting critical flaw in vBulletin forum software
Two critical vulnerabilities affecting the open-source forum software vBulletin have been discovered, with one confirmed to be actively exploited in the wild. […]
Global Security News, Legal, Security
Police takes down AVCheck site used by cybercriminals to scan malware
An international law enforcement operation has taken down AVCheck, a service used by cybercriminals to test whether their malware is detected by commercial antivirus software before deploying it in the wild. […]
Global Security News, Meta, NSO, NSO Group, Security, Spyware, surveillance, WhatsApp, zero days
Eight things we learned from WhatsApp vs. NSO Group spyware lawsuit
The landmark trial between WhatsApp and NSO Group unearthed several new revelations.
Global Security News, Security
Germany doxxes Conti ransomware and TrickBot ring leader
The Federal Criminal Police Office of Germany (Bundeskriminalamt or BKA) claims that Stern, the leader of the Trickbot and Conti cybercrime gangs, is a 36-year-old Russian named Vitaly Nikolaevich Kovalev. […]
cyberattack, Cybersecurity, Global Security News, Government & Policy, Security, Trump Administration
White House investigating how Trump’s chief of staff’s phone was hacked
Hackers reportedly accessed Wiles’ phone contacts, which were used to impersonate her.
Global Security News, Security
Getting Exposure Management Right: Insights from 500 CISOs
Pentesting isn’t just about finding flaws — it’s about knowing which ones matter. Pentera’s 2025 State of Pentesting report uncovers which assets attackers target most, where security teams are making progress, and which exposures still fly under the radar. Focus on reducing breach impact, not just breach count. […]
Global Security News, Microsoft, Security
Microsoft Authenticator now warns to export passwords before July cutoff
The Microsoft Authenticator app is now issuing notifications warning that the password autofill feature is being deprecated in July, suggesting users move to Microsoft Edge instead. […]
Global Security News, Security
ConnectWise breached in cyberattack linked to nation-state hackers
IT management software firm ConnectWise says a suspected state-sponsored cyberattack breached its environment and impacted a limited number of ScreenConnect customers. […]
AI, AI and ML in Security, chatbots, Cybersecurity, Global Security News, messages, Security, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X, Spotlight
Scientists Use AI Chatbots to Carry Encrypted Messages Undetectable by Cybersecurity Systems
The world has a long history of hiding messages in plain sight. My own crude attempts as a kid included hours spent inserting code words and number sequences into notes and messages to avoid detection by parents, teachers and other kids. And occasionally whipping out my Batman decoder ring to figure out messages being hidden..…
Crypto, Cybersecurity, Funnull, Global Security News, infosec, pig butchering, polyfill, Scams, Security, spam, supply chain, supply chain attack
US government sanctions tech company involved in cyber scams
The Treasury said FUNNULL was involved in providing infrastructure for pig butchering crypto scams.
Global Security News, Google, Security
Threat actors abuse Google Apps Script in evasive phishing attacks
Threat actors are abusing the trusted Google platform ‘Google Apps Script’ to host phishing pages, making them appear legitimate and eliminating the risk of them getting flagged by security tools. […]
Global Security News, Security
Apple Safari exposes users to fullscreen browser-in-the-middle attacks
A weakness in Apple’s Safari web browser allows threat actors to leverage the fullscreen browser-in-the-middle (BitM) technique to steal account credentials from unsuspecting users. […]
Global Security News, Security
US sanctions firm linked to cyber scams behind $200 million in losses
The U.S. Treasury Department has sanctioned Funnull Technology, a Philippines-based company that supports hundreds of thousands of malicious websites behind cyber scams linked to over $200 million in losses for Americans. […]
Global Security News, Security
Cybercriminals exploit AI hype to spread ransomware, malware
Threat actors linked to lesser-known ransomware and malware projects now use AI tools as lures to infect unsuspecting victims with malicious payloads. […]
bootstrapped startup, canary tokens, Cybersecurity, Global Security News, Security, thinkst
A decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC funding
Reflecting on 10 years since its launch, the honeypot maker explains why the company did not take on any VC funding.
Global Security News, Security
Attackers are mapping your attack surface—are you?
Attackers are mapping your infrastructure before you even realize what’s exposed. Sprocket ASM flips the script — giving you the same recon capabilities they use, plus change detection and actionable insights to close gaps fast. See your attack surface the way hackers do and beat them to it. […]
application security strategy, Cloud, Cloud Security, Cybersecurity, Global Security News, hybrid infrastructure, Security, Security Awareness, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X
Your IT Infrastructure is Hybrid. So Why Not Your Security Model?
A hybrid security model provides the ability to deploy a variety of rule sets for specific applications while providing a single, centralized way to manage it all. The post Your IT Infrastructure is Hybrid. So Why Not Your Security Model? appeared first on Security Boulevard.
Global Security News, Security
Victoria’s Secret takes down website after security incident
Victoria’s Secret, the fashion giant, has taken down its website and some store services because of an ongoing security incident […]
agentic ai, AI, AI agents, API security, APIs, Authentication, Automation, Cybersecurity, Development, Global Security News, Security, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X
AI Agents and APIs: Understand Complexities Today to Authenticate Tomorrow
The growth of AI agents puts the need for robust API authentication practices front and center, so today we’re highlighting two AI agent scenarios and how you could deal with their typical authentication challenges. The post AI Agents and APIs: Understand Complexities Today to Authenticate Tomorrow appeared first on Security Boulevard.
Global Security News, Security
Data broker LexisNexis discloses data breach affecting 364,000 people
Data broker giant LexisNexis Risk Solutions has revealed that unknown attackers stole the personal information of over 364,000 individuals in a December breach. […]
Authentication, B2C, CIAM, Cybersecurity, Global Security News, iam, Identity & Access, Passkeys, passwordless, Security, Security Bloggers Network
Find the Best CIAM Solution for Your Business: A Comprehensive Guide to Modern Customer Identity Management
We’ve reached a point where customers won’t wait even a few seconds for an app to load or a login to work. In this new era of digital impatience, CIAM platforms have become business critical, serving as direct contributors to conversion rates, user retention, and data protection. The post Find the Best CIAM Solution for…
Global Security News, Security
APT41 malware abuses Google Calendar for stealthy C2 communication
The Chinese APT41 hacking group uses a new malware named ‘ToughProgress’ that abuses Google Calendar for command-and-control (C2) operations, hiding malicious activity behind a trusted cloud service. […]
Craft Ventures, Exclusive, Global Security News, Horizon3, Horizon3.ai, New Enterprise Associates, Security, signalfire, Startups
Security startup Horizon3.ai is raising $100M in new round
Horizon3.ai, a cybersecurity startup that provides tools like autonomous penetration testing, is seeking to raise $100 million in a new funding round and has locked down at least $73 million, the company revealed in an SEC filing this week. NEA led the round, according to two people familiar with the deal. One person said that…
cyberattack, Cybersecurity, fashion industry, Global Security News, Security
Victoria’s Secret hit by outages as it battles security incident
The fashion retailer’s outages began Monday.
Global Security News, Security
New PumaBot botnet brute forces SSH credentials to breach devices
A newly discovered Go-based Linux botnet malware named PumaBot is brute-forcing SSH credentials on embedded IoT devices to deploy malicious payloads. […]
Global Security News, Security
Interlock ransomware gang deploys new NodeSnake RAT on universities
The Interlock ransomware gang is deploying a previously undocumented remote access trojan (RAT) named NodeSnake against educational institutes for persistent access to corporate networks. […]
Global Security News, Security
Botnet hacks 9,000+ ASUS routers to add persistent SSH backdoor
Over 9,000 ASUS routers are compromised by a novel botnet dubbed “AyySSHush” that was also observed targeting SOHO routers from Cisco, D-Link, and Linksys. […]
Global Security News, Security
Dark Partners cybercrime gang fuels large-scale crypto heists
A sprawling network of fake AI, VPN, and crypto software download sites is being used by the “Dark Partner” threat actors to conduct a crypto theft attacks worldwide. […]
Global Security News, Security
Czechia blames China for Ministry of Foreign Affairs cyberattack
The Czech Republic says the Chinese-backed APT31 hacking group was behind cyberattacks targeting the country’s Ministry of Foreign Affairs and critical infrastructure organizations. […]
cyberattack, Cybersecurity, data breach, data broker, Global Security News, lexisnexis, Security
Data broker giant LexisNexis says breach exposed personal information of over 364,000 people
The data collector said the stolen data includes Social Security numbers.
Apple, Global Security News, Security
Apple blocked over $9 billion in App Store fraud in five years
Apple says it blocked over $9 billion in fraudulent App Store transactions over the last five years, with over $2 billion in potentially fraudulent sanctions prevented in 2024 alone. […]
Global Security News, Security
DragonForce ransomware abuses MSP’s SimpleHelp RMM to encrypt customers
The DragonForce ransomware operation successfully breached a managed service provider and used its SimpleHelp remote monitoring and management (RMM) platform to steal data and deploy encryptors on downstream customers’ systems. […]
Global Security News, Security
DragonForce ransomware abuses SimpleHelp in MSP supply chain attack
The DragonForce ransomware operation successfully breached a managed service provider and used its SimpleHelp remote monitoring and management (RMM) platform to steal data and deploy encryptors on downstream customers’ systems. […]
Global Security News, Security
Iranian pleads guilty to RobbinHood ransomware attacks, faces 30 years
An Iranian national has pleaded guilty to participating in the Robbinhood ransomware operation, which was used to breach the networks, steal data, and encrypt devices of U.S. cities and organizations in an attempt to extort millions of dollars over a five-year span. […]
Emerging Tech, Global Security News, Security
Code security in the AI era: Balancing speed and safety under new EU regulations
The rapid adoption of AI for code generation has been nothing short of astonishing, and it’s completely transforming how software development teams function. According to the 2024 Stack Overflow Developer Survey, 82% of developers now use AI tools to write code. Major tech companies now depend on AI to create code for a significant portion…
Exploits, Global Security News, Security
Not Every CVE Deserves a Fire Drill: Focus on What’s Exploitable
Not every “critical” vulnerability is a critical risk. Picus Exposure Validation cuts through the noise by testing what’s actually exploitable in your environment — so you can patch what matters. […]
Global Security News, Security
MATLAB dev confirms ransomware attack behind service outage
MathWorks, a leading developer of mathematical computing and simulation software, has revealed that a recent ransomware attack is behind an ongoing service outage. […]
Global Security News, Microsoft, Security
Russian Void Blizzard cyberspies linked to Dutch police breach
A previously unknown Russian-backed cyberespionage group now tracked as Void Blizzard has been linked to a September 2024 Dutch police security breach. […]
Global Security News, Security
Adidas warns of data breach after customer service provider hack
German sportswear giant Adidas disclosed a data breach after attackers hacked a customer service provider and stole some customers’ data. […]
AI, Biotech & Health, Climate, Crypto, Disrupt 2025, Enterprise, Fintech, Fundraising, Global IT News, Global Security News, privacy, Security, Space, Startups, TC, TechCrunch Disrupt, TechCrunch Disrupt 2025, Venture
Vote for the sessions you want to see at TechCrunch Disrupt 2025
We were thrilled by the remarkable interest in speaking at TechCrunch Disrupt 2025, taking place October 27–29 at Moscone West in San Francisco. After an in-depth review process, we’ve selected 20 exceptional finalists—10 for breakout sessions and 10 for roundtables. Now, we’re putting the final decision in your hands. Audience Choice voting is open through…
advanced ai, AI & Automation, AI Blackmail, AI Engineering, ai ethics, AI Ethics and Safety, AI Evolution, AI Future, AI in Daily Life, AI in Industry, AI in Technology, AI Podcast, AI Revolution, ai safety, AI Shutdown, AI testing, ai threats, AI Uprising, Analytics & Intelligence, Anthropic, Artificial Intelligence, Claude, cyber security, cyber threat, Cybersecurity, Data Privacy, Data Security, Digital Privacy, Episodes, Global Security News, Information Security, infosec, LLM, machine learning, Podcast, Podcasts, privacy, Security, Security Bloggers Network, Technology, Weekly Edition
When AI Fights Back: Threats, Ethics, and Safety Concerns
In this episode, we explore an incident where Anthropic’s AI, Claude, didn’t just resist shutdown but allegedly blackmailed its engineers. Is this a glitch or the beginning of an AI uprising? Along with co-host Kevin Johnson, we reminisce about past episodes, discuss AI safety and ethics, and examine the implications of AI mimicking human behaviors…
Global Security News, Security
Glitch to end app hosting and user profiles on July 8
Glitch has announced it is ending app hosting and user profiles on July 8, 2025, responding to changing market dynamics and extensive abuse problems that have raised operational costs. […]
AI, Apps, Biotech & Health, Climate, Crypto, Disrupt 2025, Fintech, Fundraising, Global IT News, Global Security News, privacy, robotics, Security, Space, Startups, TC, TechCrunch Disrupt, TechCrunch Disrupt 2025, Venture
Last 24 hours: TechCrunch Disrupt 2025 Early Bird Deals will fly away after today
Just 24 hours left to lock in Early Bird pricing for TechCrunch Disrupt 2025 — happening October 27–29 at Moscone West in San Francisco. Save up to $900 on your pass, or bring someone brilliant with you for 90% off their ticket. This deal ends tonight at 11:59 p.m. PT. Grab your Early Bird discount…
Global Security News, Security
Fake Zenmap. WinMRT sites target IT staff with Bumblebee malware
The Bumblebee malware SEO poisoning campaign uncovered earlier this week aimpersonating RVTools is using more typosquatting domainsi mimicking other popular open-source projects to infect devices used by IT staff. […]
Exclusive, Global Security News, InfoEdge, Naukri.com, Security
Naukri exposed recruiter email addresses, researcher says
The recruiter website fixed the email address exposure earlier this week.
Global Security News, Government & Policy, Security
Apple CEO reportedly urged Texas’ governor to ditch online child safety bill
Apple CEO Tim Cook reportedly called Texas Gov. Greg Abbott to make changes to or veto a newly passed law in the state that would require the company to verify the ages of device owners, according to The Wall Street Journal. Abbott has yet to sign the bill. But Apple, alongside Google, has been working…
Global Security News, Security
Dozens of malicious packages on NPM collect host and network data
60 packages have been discovered in the NPM index that attempt to collect sensitive host and network data and send it to a Discord webhook controlled by the threat actor. […]
CryptoCurrency, Global Security News, Security
Hacker steals $223 million in Cetus Protocol cryptocurrency heist
The decentralized exchange Cetus Protocol announced that hackers have stolen $223 million in cryptocurrency and is offering a deal to stop all legal action if the funds are returned. […]
Global Security News, Security
FBI warns of Luna Moth extortion attacks targeting law firms
The FBI warned that an extortion gang known as the Silent Ransom Group has been targeting U.S. law firms over the last two years in callback phishing and social engineering attacks. […]
AI, Apps, Global IT News, Global Security News, Government & Policy, Security, Startups, TC, TC Sessions: AI, TechCrunch Sessions: AI
At TechCrunch Sessions: AI, Artemis Seaford and Ion Stoica confront the ethical crisis — when AI crosses the line
As generative AI becomes faster, cheaper, and more convincing, the ethical stakes are no longer theoretical. What happens when the tools to deceive become widely accessible? And how do we build systems that are powerful — but safe enough to trust? At TechCrunch Sessions: AI, taking place June 5 at UC Berkeley’s Zellerbach Hall, Artemis…
Careto, cuba, Cybersecurity, Exclusive, Global IT News, Global Security News, Hackers, hacking, infosec, Kaspersky, Security, spain, The Mask
Mysterious hacking group Careto was run by the Spanish government, sources say
The elusive hacking group Careto was never publicly linked to a specific government, but TechCrunch has learned researchers concluded privately that the Spanish government was behind the group.
Global Security News, Security
TikTok videos now push infostealer malware in ClickFix attacks
Cybercriminals are using TikTok videos to trick users into infecting themselves with Vidar and StealC information-stealing malware in ClickFix attacks. […]
Global Security News, Security
Police takes down 300 servers in ransomware supply-chain crackdown
In the latest phase of Operation Endgame, an international law enforcement operation, national authorities from seven countries seized 300 servers and 650 domains used to launch ransomware attacks. […]
Global Security News, Security
US indicts leader of Qakbot botnet linked to ransomware attacks
The U.S. government has indicted Russian national Rustam Rafailevich Gallyamov, the leader of the Qakbot botnet malware operation that compromised over 700,000 computers and enabled ransomware attacks. […]
cyberattack, Cybersecurity, Global Security News, Justice Department, malware, Microsoft, Security
Microsoft says Lumma password stealer malware found on 394,000 Windows PCs
Microsoft and law enforcement announced a coordinated takedown of the Lumma pasword-stealing malware.
CryptoCurrency, Global Security News, Security
Hackers use fake Ledger apps to steal Mac users’ seed phrases
Cybercriminal campaigns are using fake Ledger apps to target macOS users and their digital assets by deploying malware that attempts to steal seed phrases that protect access to digital cryptocurrency wallets. […]
Global Security News, Security
Police arrests 270 dark web vendors, buyers in global crackdown
Police arrested 270 suspects following an international law enforcement action codenamed ‘Operation RapTor’ that targeted dark web vendors and customers from ten countries. […]
Exploits, Global Security News, Security
Ivanti EPMM flaw exploited by Chinese hackers to breach govt agencies
Chinese hackers have been exploiting a remote code execution flaw in Ivanti Endpoint Manager Mobile (EPMM) to breach high-profile organizations worldwide. […]
Global Security News, Government, North America, Security
Chinese hackers breach US local governments using Cityworks zero-day
Chinese-speaking hackers have exploited a now-patched Trimble Cityworks zero-day to breach multiple local governing bodies across the United States. […]
Global Security News, Security
FTC finalizes order requiring GoDaddy to secure hosting services
The Federal Trade Commission (FTC) has finalized an order requiring web hosting giant GoDaddy to secure its services to settle charges of data security failures that led to several data breaches since 2018. […]
Global Security News, Microsoft, Security
Signal now blocks Microsoft Recall screenshots on Windows 11
Signal has updated its Windows app to protect users’ privacy by blocking Microsoft’s AI-powered Recall feature from taking screenshots of their conversations. […]
Global Security News, Security
Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE
Critical vulnerabilities in Versa Concerto that are still unpatched could allow remote attackers to bypass authentication and execute arbitrary code on affected systems. […]
Apps, Global Security News, Microsoft, privacy, Security, signal, Windows
Signal’s new Windows update prevents the system from capturing screenshots of chats
Signal said today that it is updating its Windows app to prevent the system from capturing screenshots, thereby protecting the content that is on display. The company said that this new “screen security” setting is enabled by default on Windows 11. Signal said that this new feature is designed to protect users’ privacy from Microsoft’s…
Global Security News, Security
Critical Samlify SSO flaw lets attackers log in as admin
A critical Samlify authentication bypass vulnerability has been discovered that allows attackers to impersonate admin users by injecting unsigned malicious assertions into legitimately signed SAML responses. […]
Global Security News, Security
Russian hackers breach orgs to track aid routes to Ukraine
A Russian state-sponsored cyberespionage campaign attributed to APT28 (Fancy Bear/Forest Blizzard) hackers has been targeting and compromising international organizations since 2022 to disrupt aid efforts to Ukraine. […]
AT&T, Global Security News, Ron Wyden, Security, senate, surveillance, T-Mobile, Verizon, wyden
Wyden: AT&T, T-Mobile, and Verizon weren’t notifying senators of surveillance requests
Sen. Ron Wyden said in a letter that one U.S. phone carrier turned over Senate data to law enforcement without notifying the target.
Global Security News, Security
3AM ransomware uses spoofed IT calls, email bombing to breach networks
A 3AM ransomware affiliate is conducting highly targeted attacks using email bombing and spoofed IT support calls to socially engineer employees into giving credentials for remote access to corporate systems. […]
Global Security News, Microsoft, Security
Lumma infostealer malware operation disrupted, 2,300 domains seized
Earlier this month, a coordinated disruption action targeting the Lumma malware-as-a-service (MaaS) information stealer operation seized thousands of domains, part of its infrastructure backbone worldwide. […]
Cybersecurity, data breach, edtech startup, extortion, Global Security News, powerschool, Security
US student agrees to plead guilty to hack affecting tens of millions of students
Prosecutors say the hacker stole information on 60 million students, an incident that matches the data breach at PowerSchool.
Global Security News, Security
Data-stealing Chrome extensions impersonate Fortinet, YouTube, VPNs
A Google Chrome Web Store campaign uses over 100 malicious browser extensions that mimic legitimate tools, such as VPNs, AI assistants, and crypto utilities, to steal browser cookies and execute remote scripts secretly. […]
Global Security News, Security
ThreatLocker Patch Management: A Security-First Approach to Closing Vulnerability Windows
Patching is basic cyber hygiene — but executing it at scale, securely, and fast? That’s the real challenge. ThreatLocker’s Patch Management flips the script with control, visibility, and Zero Trust workflows built for today’s threat landscape. […]
Europe, Global Security News, Security
European Union sanctions Stark Industries for enabling cyberattacks
The European Union has imposed strict sanctions against web-hosting provider Stark Industries and the two individuals running it, CEO Iurie Neculiti and owner Ivan Neculiti, for enabling “destabilising activities” against the Union. […]
Coinbase, Crypto, CryptoCurrency, Cybersecurity, data breach, Global Security News, Security
Coinbase says its data breach affects at least 69,000 customers
The crypto giant said the unauthorized access to customer data dates back to late December 2024.
Global Security News, Healthcare, Security
Kettering Health hit by system-wide outage after ransomware attack
Kettering Health, a healthcare network that operates 14 medical centers in Ohio, was forced to cancel inpatient and outpatient procedures following a cyberattack that caused a system-wide technology outage. […]
Global Security News, Security
Marks & Spencer faces $402 million profit hit after cyberattack
British retailer giant Marks & Spencer (M&S) is bracing for a potential profit hit of up to £300 million £300 million ($402 million) following a recent cyberattack that led to widespread operational and sales disruptions. […]
Global Security News, Security
Coinbase says recent data breach impacts 69,461 customers
Coinbase, a cryptocurrency exchange with over 100 million customers, revealed that a recent data breach in which cybercriminals stole customer and corporate data affected 69,461 individuals […]
Global Security News, Security
PowerSchool hacker pleads guilty to student data extortion scheme
A 19-year-old college student from Worcester, Massachusetts, has agreed to plead guilty to a massive cyberattack on PowerSchool that extorted millions of dollars in exchange for not leaking the personal data of millions of students and teachers. […]
Global Security News, Mobile, Security
Mobile carrier Cellcom confirms cyberattack behind extended outages
Wisconsin wireless provider Cellcom has confirmed that a cyberattack is responsible for the widespread service outage and disruptions that began on the evening of May 14, 2025. […]
Global Security News, Security
Premium WordPress ‘Motors’ theme vulnerable to admin takeover attacks
A critical privilege escalation vulnerability has been discovered in the premium WordPress theme Motors, which allows unauthenticated attackers to hijack administrator accounts and take complete control of websites. […]
Global Security News, Security
VanHelsing ransomware builder leaked on hacking forum
The VanHelsing ransomware-as-a-service operation published the source code for its affiliate panel, data leak blog, and Windows encryptor builder after an old developer tried to sell it on the RAMP cybercrime forum. […]
Global Security News, Security, Security Bloggers Network
Why Your MTTR Is Too Slow — And How to Fix It Fast
SLASH YOUR MTTR! Join Us for a Live Webinar on Faster Incident Response & Reduced Downtime. MTTR (Mean Time to Response) isn’t just a buzzword — it’s a crucial metric that can make or break your organization’s ability to bounce back from incidents quickly. But here’s the thing: most teams misunderstand what MTTR really means.…
Department of Government Efficiency, doge, Elon Musk, evergreens, Global Security News, Government & Policy, Security, SpaceX, Tesla, Trump Administration, us government
The people in Elon Musk’s DOGE universe
Meet the DOGE staffers and senior advisors in Elon Musk’s inner circle, and how they got there.
Global Security News, Security
SK Telecom says malware breach lasted 3 years, impacted 27 million numbers
SK Telecom says that a recently disclosed cybersecurity incident in April, first occurred all the way back in 2022, ultimately exposing the USIM data of 27 million subscribers. […]
Global Security News, Security
Hazy Hawk gang exploits DNS misconfigs to hijack trusted domains
A threat actor named ‘Hazy Hawk’ has been using DNS CNAME hijacking to hijack abandoned cloud endpoints of domains belonging to trusted organizations and incorporate them in large-scale scam delivery and traffic distribution systems (TDS). […]
Global Security News, Security
RVTools hit in supply chain attack to deliver Bumblebee malware
The official website for the RVTools VMware management tool was taken offline in what appears to be a supply chain attack that distributed a trojanized installer to drop the Bumblebee malware loader on users’ machines. […]
Global Security News, Security
Service desks are under attack: What can you do about it?
Service desks are on the front lines of defense—and attackers know it. Attackers are using social engineering attacks to trick agents into changing passwords, disabling MFA, and granting access. Learn more from Specops Software on how to secure your service desk. […]
Global Security News, Security
Fake KeePass password manager leads to ESXi ransomware attack
Threat actors have been distributing trojanized versions of the KeePass password manager for at least eight months to install Cobalt Strike beacons, steal credentials, and ultimately, deploy ransomware on the breached network. […]
Global Security News, Security
O2 UK patches bug leaking mobile user location from call metadata
A flaw in O2 UK’s implementation of VoLTE and WiFi Calling technologies could allow anyone to expose the general location of a person and other identifiers by calling the target. […]
Global Security News, Security
Arla Foods confirms cyberattack disrupts production, causes delays
Arla Foods has confirmed to BleepingComputer that it was targeted by a cyberattack that has disrupted its production operations. […]
Cybersecurity, data breach, Exclusive, Global Security News, Security, Spyware, stalkerware
Cocospy stalkerware apps go offline after data breach
The trio of spyware apps — hacked earlier this year — no longer work.
Global Security News, Government, Legal, Security
UK Legal Aid Agency confirms applicant data stolen in data breach
The United Kingdom’s Legal Aid Agency (LAA) has confirmed that a recent cyberattack is more serious than first believed, with hackers stealing a large trove of sensitive applicant data in a data breach. […]
23andMe, Biotech & Health, Cybersecurity, data breach, Global Security News, pharmaceutics, Security
Pharma giant Regeneron to buy 23andMe and its customers’ data for $256M
23andMe was sold by bankruptcy auction, a year after the company had a massive data breach.
Global Security News, Security
Mozilla fixes Firefox zero-days exploited at hacking contest
Mozilla released emergency security updates to address two Firefox zero-day vulnerabilities demonstrated in the recent Pwn2Own Berlin 2025 hacking competition. […]
Exploits, Global Security News, Security
Hackers earn $1,078,750 for 28 zero-days at Pwn2Own Berlin
The Pwn2Own Berlin 2025 hacking competition has concluded, with security researchers earning $1,078,750 after exploiting 29 zero-day vulnerabilities and encountering some bug collisions. […]
Coinbase, Crypto, Global Security News, Security
Crypto elite increasingly worried about their personal safety
Cryptocurrency executives and other investors with significant wealth from crypto holdings are getting more serious about personal security, according to stories this weekend in both the Wall Street Journal and Bloomberg. While cryptocurrencies have always created unique security risks, it seems there’s a rising threat of violent abduction due to the growing value of Bitcoin,…
Global Security News, Microsoft, Security
New ‘Defendnot’ tool tricks Windows into disabling Microsoft Defender
A new tool called ‘Defendnot’ can disable Microsoft Defender on Windows devices by registering a fake antivirus product, even when no real AV is installed. […]
Cybercrime, Cybersecurity, Global Security News, SEC, Securities and Exchange Commission, Security, sim swap, SIM Swapping, Twitter, U.S. Securities and Exchange Commission, X
US man who hacked SEC’s X account to spike Bitcoin price sentenced to prison
The Department of Justice announced Eric Council Jr. was sentenced to 14 months in prison for the hack.
Exploits, Global Security News, Security
Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own
During the second day of Pwn2Own Berlin 2025, competitors earned $435,000 after exploiting zero-day bugs in multiple products, including Microsoft SharePoint, VMware ESXi, Oracle VirtualBox, Red Hat Enterprise Linux, and Mozilla Firefox. […]
Global Security News, Security
Printer maker Procolored offered malware-laced drivers for months
For at least half a year, the official software supplied with Procolored printers included malware in the form of a remote access trojan and a cryptocurrency stealer. […]