A suspected Iranian espionage campaign impersonated a model agency site for data collection, including fictitious models as possible social engineering lures. The post Iranian Cyber Actors...
Kaspersky researchers review ransomware trends for 2024, analyze the most active groups and forecast how this threat will evolve in 2025.
Exploit used by Play-linked attackers targets the CVE-2025-29824 zero-day vulnerability patched on April 8.
Medical device company Masimo Corporation warns that a cyberattack is impacting production operations and causing delays in fulfilling customers' orders. [...]
Half of UK firms have over 10 cyber positions unfilled, according to Cisco
CISA warned critical infrastructure organizations of "unsophisticated" threat actors actively targeting the U.S. oil and natural gas sectors. [...]
After covering cloud security posture management (CSPM) and cloud workload protection (CWP) in the first two installments of Tenable’s “Stronger Cloud Security in Five” blog series, today we focus...
When we get the call, it’s our legal responsibility to attend jury service. But sometimes that call won’t come from the courts – it will be a scammer.
Cyware, a vendor of threat intelligence operationalization, collaboration, and orchestrated response, has launched its suite of cybersecurity solutions... The post New Cyware platform empowers...
Lastwall, vendor of identity-first security and quantum resilient solutions, announced that its Identity Platform (IdP) has achieved FedRAMP... The post Lastwall’s Identity Platform secures...
New threat intelligence from CYFIRMA sheds light on the emergence of Gunra ransomware, a rapidly spreading cyber threat... The post CYFIRMA warns of Gunra ransomware surge targeting critical...
The U.S. Department of Energy (DOE) has announced key leadership appointments aimed at strengthening the nation’s energy system... The post DOE announces Alex Fitzsimmons will lead CESER, as...
Google has published its Android Security Bulletin for May 2025, delivering critical updates to the Android ecosystem. This monthly update resolves 46 vulnerabilities, one of...
SK Group Chairman Chey Tae-won issued a public apology at the SK Telecom headquarters, following a recent SK Telecom cyberattack that affected millions of users. The cyberattack on SK Telecom,...
Polish authorities have detained four suspects linked to six DDoS-for-hire platforms, believed to have facilitated thousands of attacks targeting schools, government services, businesses, and...
This article is the result of a collaboration with TjekDet, Denmark’s fact-checking media outlet, Danish newspaper Politiken, and the Canadian Broadcasting Corporation. Warning: This article...
The California Privacy Protection Agency (CPPA) has announced that national clothing retailer Todd Snyder, Inc. must pay a $345,178 fine and make substantial changes to its privacy practices. The...
Microsoft says the April 2025 security updates are causing authentication issues on some Windows Server 2025 domain controllers. [...]
Huntress has verified Samsung’s MagicINFO 9 Server (version 21.1050.0) is vulnerable to a publicly available proof-of-concept (PoC). Understand why MagicINFO 9 Server shouldn’t be internet-facing...
Scroll is a ZK EVM blockchain. Recently, they made some changes to the code that led to some pretty serious issues. One via an individual and another through Immunefi by a user named WhiteHatMage....
A consortium of organizations published a groundbreaking specification for interoperable and efficient energy management in industrial and process automation.
Honeywell will equip LG Energy Solution’s 1.3-million-square-foot facility with advanced building automation technologies.
IIoT support is now available for Acromag’s Ethernet I/O Modules to simplify cloud connectivity and data sharing across the network.
Clickjacking, also known as the UI Redress attack, is a mechanism to steal clicks to perform sensitive actions on a website. This is done by iFraming the victim website in the attackers website...
Cybercriminals are using fake Social Security Administration emails to distribute the ScreenConnect RAT (Remote Access Trojan) and compromise…
It’s a major ruling in a landmark lawsuit that has had plenty of twists and turns — with more likely to come. The post NSO Group owes $168M in damages to WhatsApp over spyware infections, jury...
The five-year legal battle between the Meta-owned company and the most notorious spyware maker in the world ends with a huge win for WhatsApp.
Threat actors have been observed actively exploiting security flaws in GeoVision end-of-life (EoL) Internet of Things (IoT) devices to corral them into a Mirai botnet for conducting distributed...
A new analysis of TM Signal’s source code appears to show that the app sends users’ message logs in plaintext. At least one top Trump administration official used the app.
The state’s AG vowed to defend the prosecution of Tina Peters, an election clerk behind one of the most serious breaches of voting systems in U.S. history. The post Trump calls on Colorado to...