Over 84,000 instances of the Roundcube webmail software are vulnerable to CVE-2025-49113, a critical remote code execution (RCE) vulnerability with a publicly available exploit. [...]
SentinelLABS uncovers widespread China-linked cyber espionage targeting over 70 global organizations and cybersecurity firms between July 2024 and…
Vulnerability in PayU CommercePro plugin allows account hijacking on thousands of WordPress sites
A vulnerability allowed researchers to brute-force any Google account's recovery phone number simply by knowing a their profile name and an easily retrieved partial phone number, creating a...
The statement said the Rhode Island-based company identified unauthorized activity on its systems on Thursday, prompting officials to take systems offline. The action “has temporarily impacted the...
UNFI, a grocery distributor for Whole Foods and others, warned of disruptions to customer orders after a cyberattack.
New PathWiper malware targeted Ukrainian critical infrastructure, using legitimate tools for cyber-attacks
Disclaimer This trend report on the deep web and dark web of May 2025 is sectioned into Ransomware, Data Breach, DarkWeb, CyberAttack, and Threat Actor. Please note that there are some parts of...
Unit 221B’s Allison Nixon said crackdowns have effectively shown the group that their actions carry real consequences. The post Internet infamy drives The Com’s crime sprees appeared first on CyberScoop.
Unit 221B’s Allison Nixon said crackdowns have effectively shown the group that their actions carry real consequences. The post Internet infamy drives The Com’s crime sprees appeared first on CyberScoop.
Researchers from Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, involving a previously... The post PathWiper malware targets Ukrainian critical...
U.S. President Donald J. Trump signed a sweeping Executive Order that reorients U.S. cybersecurity strategy by focusing on... The post Trump executive order rewrites US cybersecurity playbook,...
The European Union Agency for Cybersecurity (ENISA) has refreshed its National Cybersecurity Strategies (NCSS) Interactive Map. This dynamic... The post ENISA updates NCSS Interactive Map to track...
DeNexus, vendor of end-to-end cyber risk management for operational technology (OT) environments within Industrial Enterprises and Critical Infrastructure,... The post DeNexus’ DeRISK version...
SSH Communications Security (SSH) announces that it has joined the Beyond the Limits of Post-Quantum Cryptography (BlimPQC) project,... The post SSH Communications joins BlimPQC project to help...
In its latest campaign this spring, DarkGaboon was observed deploying LockBit 3.0 ransomware against victims in Russia, Positive Technologies said in a report last week.
SentinelOne has shared more details on an attempted supply chain attack by Chinese hackers through an IT services and logistics firm that manages hardware logistics for the cybersecurity firm. [...]
A collective of former WordPress developers and contributors backed by the Linux Foundation has launched the FAIR Package Manager, a new and independent distribution system for trusted WordPress...
The bug allowed a researcher to uncover recovery phone numbers of nearly any Google account.
Phone numbers are a goldmine for SIM swappers. A researcher found how to get this precious piece of information through a clever brute-force attack.
Authorities said they busted a ring responsible for illegally extracting citizens' data from Kazakhstan's government networks and distributing it through Telegram and other ways.
The DragonForce Ransomware Cartel has quickly gained notoriety and staked its claim on the threat landscape. Rivals are going dark and accusations of exit scams and government cooperation are...
The three dominant computing platforms have each tried to build features that help you manage passwords without paying for third-party software. Are any of them worth your time and effort?
OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware...
Sensata Technologies is warning former and current employees it suffered a data breach after concluding an investigation into an April ransomware attack. [...]
Tel Aviv, Israel, 9th June 2025, CyberNewsWire
A cyberattack on London hospitals last year led to the depletion of stocks of crucial O-type blood, and the U.K.'s National Health Service is calling for a nationwide effort to shore up supplies.
A new Trump Executive Order limits the use of cybersecurity-related sanctions only against foreign malicious actors
Congress and federal agencies can take some simple steps to better protect open-source software. The post Unverified code is the next national security threat appeared first on CyberScoop.
Cisco Talos discovers PathWiper, a destructive new malware targeting critical infrastructure in Ukraine, highlighting ongoing cyber threats amidst the Russia-Ukraine conflict.