WestJet announced a cybersecurity incident in which a sophisticated third-party actor gained unauthorized access to internal systems, exposing personal information of some customers. The breach, discovered on June 13, 2025, has since been contained and remediated, but not before sensitive…
Category: EN
MatrixPDF Attacks Gmail Users Bypassing Email Filters and Fetch Malicious Payload
In recent weeks, a novel malware campaign dubbed MatrixPDF has surfaced, targeting Gmail users with carefully crafted emails that slip past conventional spam and phishing filters. This campaign has been active since mid-September 2025 and leverages PDF attachments that, when…
CISA Warns of Cisco IOS and IOS XE SNMP Vulnerabilities Exploited in Attacks
Cisco’s Simple Network Management Protocol (SNMP) implementations in IOS and IOS XE have come under intense scrutiny following reports of active exploitation in the wild. First disclosed in August 2025, CVE-2025-20352 describes a critical buffer overflow in the SNMP engine…
Medusa Ransomware Gang Offers BBC Reporter Millions for Inside Hack Access
A ransomware operation claiming affiliation with the Medusa gang attempted to recruit BBC cybersecurity correspondent Joe Tidy as an insider threat, offering him substantial financial incentives in exchange for access to the broadcaster’s systems. The threat actor, using the…
Massive Breach Allows Hackers to Steal Employee Data from the US Federal Agencies
An incident at the Federal Emergency Management Agency allowed threat actors to steal employee data from the US Customs and Border Protection and the disaster management office. The breach has allegedly triggered the removal of dozens of Federal Emergency Management…
Datzbro Android Banking Trojan Targets Seniors With Device-Takeover Attacks
Researchers have uncovered a previously undocumented Android banking trojan, dubbed Datzbro, that is being used in device-takeover campaigns aimed squarely at older adults. ThreatFabric, a Dutch mobile security firm, first tied the activity to a social-engineering network in August…
Navigating Complexity: CISO Strategies for Security Tool Consolidation and Budget Optimization
In the dynamic landscape of modern cybersecurity, Chief Information Security Officers (CISOs) often face a paradoxical challenge: the proliferation of security tools. While each solution promises to strengthen defenses, the… The post Navigating Complexity: CISO Strategies for Security Tool Consolidation…
Top 10 Best Vulnerability Management Software in 2025
In today’s fast-paced digital environment, organizations face constant threats from cybercriminals exploiting weaknesses in IT systems. Vulnerability management software is one of the most crucial elements in safeguarding a network, as it helps identify, evaluate, and remediate security gaps before…
Shortcut-based Credential Lures Deliver DLL Implants
A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script This article has been indexed from www.infosecurity-magazine.com Read the original article: Shortcut-based Credential Lures Deliver DLL Implants
Landmark US cyber-information-sharing program expires, bringing uncertainty
Without legal protections, companies might stop reporting information about cybersecurity threats. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Landmark US cyber-information-sharing program expires, bringing uncertainty
Data breach at Canadian airline WestJet affects 1.2M passengers
The June data breach of Canada’s second largest airline WestJet was blamed on the Scattered Spider hacking group. This article has been indexed from Security News | TechCrunch Read the original article: Data breach at Canadian airline WestJet affects 1.2M…
UK government tries again to access encrypted Apple customer data: report
The U.K. Home Office is seeking access to Apple users’ encrypted iCloud backups for a second time, after an earlier attempt failed earlier this year. This article has been indexed from Security News | TechCrunch Read the original article: UK…
KnowBe4 Is a Proud Participant in the Microsoft Security Store Partner Ecosystem
KnowBe4, the platform that comprehensively addresses human and agentic AI risk management, today announced its inclusion in the Microsoft Security Store Partner Ecosystem. KnowBe4 was selected based on their proven experience with Microsoft Security technologies, willingness to explore and provide…
200,000 More SIM Cards Found Linked to Secret Telecom Network in NYC
Federal investigators have found 200,000 more SIM cards at a site in New Jersey that were part of a sprawling hidden telecommunications network that initially included 100,000 other SIM cards and 300 servers scattered across at least five locations that…
Proofpoint Previews Strategy for Applying AI Agents to Better Secure Data
Proofpoint is launching AI agents and a Secure Agent Gateway to automate security tasks, govern data use, and defend against AI-driven cyberattacks. The post Proofpoint Previews Strategy for Applying AI Agents to Better Secure Data appeared first on Security Boulevard.…
Learn How Leading Security Teams Blend AI + Human Workflows (Free Webinar)
AI is changing automation—but not always for the better. That’s why we’re hosting a new webinar, “Workflow Clarity: Where AI Fits in Modern Automation,” with Thomas Kinsella, Co-founder & Chief Customer Officer at Tines, to explore how leading teams are…
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps
A high-severity security flaw has been disclosed in the One Identity OneLogin Identity and Access Management (IAM) solution that, if successfully exploited, could expose sensitive OpenID Connect (OIDC) application client secrets under certain circumstances. The vulnerability, tracked as CVE-2025-59363, has…
Ukraine Warns of Weaponized XLL Files Delivering CABINETRAT Malware via Zip Archives
Ukraine’s national cyber incident response team, CERT-UA, has issued an urgent warning about a new malware campaign that weaponizes Excel add-in (XLL) files to deploy the CABINETRAT backdoor. Throughout September 2025, CERT-UA analysts discovered multiple malicious XLL files masquerading as…
World’s Largest Crypto Seizure Nets £5.5 Billion in Bitcoin
UK police seized £5.5B in Bitcoin, convicting fraudsters behind the world’s largest crypto bust. The post World’s Largest Crypto Seizure Nets £5.5 Billion in Bitcoin appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Final 3 days to score extra discounts on community passes to TechCrunch Disrupt 2025
Only 3 days left to lock in even bigger savings on group passes to TechCrunch Disrupt 2025! Exclusive to founders and investors, save up to 20% on groups of 4–9 until Friday, October 3 at 11:59 p.m. PT. This article…