A 19-year-old college student faces charges after pleading guilty to cyber extortion targeting PowerSchool, exposing data of 60…
The EC-Council has earned official reaccreditation from the U.K.’s National Cyber Security Centre (NCSC), a validation of its... The post EC-Council earns reaccreditation from UK NCSC, reaffirms...
Immersive, a vendor of people-centric cyber resilience, launched on Wednesday its OT (operational technology) security solution to help... The post New Immersive tool aims to strengthen OT cyber...
The U.S. Department of Homeland Security’s Science and Technology Directorate (DHS S&T) released details of a new tool... The post DHS releases GNSS Test Vector Suite to boost PNT security for...
Cellcom, a regional wireless provider based in Wisconsin, is continuing efforts to restore full service following a cybersecurity incident that has disrupted customers’ ability to make phone calls...
Chinese hackers have been exploiting a remote code execution flaw in Ivanti Endpoint Manager Mobile (EPMM) to breach high-profile organizations worldwide. [...]
Talos has observed exploitation of CVE-2025-0994 in the wild by UAT-6382, a Chinese-speaking threat actor, who then deployed malware payloads via TetraLoader.
West Lothian Council confirmed that ransomware attackers have stolen personal and sensitive information held on its education network
The trove has now been taken down but included users’ logins for platforms including Apple, Google, and Meta, plus services from multiple governments.
Chinese-speaking hackers have exploited a now-patched Trimble Cityworks zero-day to breach multiple local governing bodies across the United States. [...]
2025-05-21 • Twitter (@VMRay) • VMRay • jar.akemi Open article on Malpedia
2025-05-21 • Datadog • Andy Giron, Eslam Salem, Ian Kretz, Tesnim Hamdouni • win.unidentified_122 Open article on Malpedia
Law enforcers worldwide have teamed up with Microsoft to disrupt the infrastructure behind Lumma Stealer
2025-05-20 • US Department of Defense • US Department of Defense • ps1.steelhook, py.masepie, win.headlace Open article on Malpedia
While credential abuse is a primary initial access vector, identity compromise plays a key role in most stages of a cyber attack. Here’s what you need to know — and how Tenable can help.Identity...
2025-05-20 • Europol • Europol • win.lumma Open article on Malpedia
2025-05-21 • Microsoft • Steven Masada • win.lumma Open article on Malpedia
2025-05-20 • European Council • Council of the European Union Open article on Malpedia
2025-05-21 • Bleeping Computer • Bill Toulas Open article on Malpedia
Google’s quiet rollout of its AI-powered Gemini chatbot to children under the age of 13 has sparked intense debate or I should say backlash, from privacy and child advocacy groups. Critics argue...
A new report from Forescout Technologies highlights a troubling surge in the frequency and impact of data breaches,... The post Healthcare sector bears brunt of 2024 data breaches driven by...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have issued a joint advisory warning of... The post Active LummaC2 malware campaigns targeting US critical...
NSA, NCSC and allies warn Western tech and logistics firms of Russian APT28 cyber-espionage threat
The Federal Trade Commission (FTC) has finalized an order requiring web hosting giant GoDaddy to secure its services to settle charges of data security failures that led to several data breaches...
UK businesses should start to plan for required changes to their cybersecurity programs ahead of the Cyber Security and Resilience Bill
Signal said today that it is updating its Windows app to prevent the system from capturing screenshots, thereby protecting the content that is on display. The company said that this new “screen...
Cary, North Carolina, 22nd May 2025, CyberNewsWire
A flaw has been discovered in OpenPGP.js, a widely used JavaScript library for OpenPGP encryption. Tracked as CVE-2025-47934, the vulnerability allows threat actors to spoof both signed and...
Signal has updated its Windows app to protect users' privacy by blocking Microsoft's AI-powered Recall feature from taking screenshots of their conversations. [...]
The U.S. Department of Justice (DOJ) announced that it had obtained and acted on the two court-approved warrants authorizing the seizure of five internet domains linked to a global malware...