Your whitelist is not a wall. For nation-state attackers, it’s a map, showing exactly who to compromise to get to your assets. $1,788,000,000 STOLEN FROM INSTITUTIONS WITH WHITELISTS, MULTISIGS, AND HARDWARE WALLETS IN PLACE TL;DR When you hold significant assets…
Category: EN
2025 Security Awareness Report: Why Training Works and Where Organizations Still Fall Short
The 2025 Security Awareness and Training Global Research Report shows how security awareness training reduces incidents, how AI is reshaping cyber risk, and why employee readiness still needs work. This article has been indexed from Industry Trends & Insights…
Qualcomm Zero Day Among 129 Issues Fixed in Android Security Push
With its latest security bulletin, Google has taken steps to address a broad range of Android vulnerabilities, releasing patches for 129 vulnerabilities spanning core platform components and third party modules. These vulnerabilities include ten that are rated critical, and…
Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500)
A critical RCE vulnerability (CVE-2025-14500) in IceWarp, an EU-made business communication and collaboration platform, may be exploited by attackers to gain unauthorized access to exposed unpatched servers. According to the Shadowserver Foundation, there are currently over 1,200 internet-facing instances that…
Webinar: The True State of Security 2026
AI has become the most popular scapegoat in security. While the risk is real, the obsession is costly. Most security failures don’t start with AI. They start with people, access, and security workflows that don’t scale. This webinar aims to…
Facebook Hit By Global Service Outage
Users across the globe were unable to access their Facebook accounts following a significant technical disruption that began in the late afternoon. This article has been indexed from CyberMaterial Read the original article: Facebook Hit By Global Service Outage
LexisNexis Confirms Data Breach
LexisNexis Legal and Professional recently confirmed a data breach after a threat actor known as FulcrumSec leaked approximately 2GB of stolen files onto underground forums. This article has been indexed from CyberMaterial Read the original article: LexisNexis Confirms Data Breach
Mobile Man Pleads Guilty To Cyber Crimes
A 22-year-old man from Mobile recently pleaded guilty to federal charges involving computer fraud, extortion, and cyberstalking. This article has been indexed from CyberMaterial Read the original article: Mobile Man Pleads Guilty To Cyber Crimes
Iranian Strikes Expose Cloud Vulnerability
Recent drone attacks targeting Amazon Web Services facilities in the United Arab Emirates and Bahrain have caused physical infrastructure damage and localized service interruptions. This article has been indexed from CyberMaterial Read the original article: Iranian Strikes Expose Cloud Vulnerability
UK NCSC Warns of Iranian Cyber Threats
The National Cyber Security Centre in the United Kingdom has issued a warning regarding a heightened risk of Iranian cyber activity linked to growing instability in the Middle East. This article has been indexed from CyberMaterial Read the original article:…
Phishing in 2026: 3 Attack Tactics That Beat Most Enterprise Defenses
Phishing drives about 90% of cyberattacks in 2026, using tactics like encrypted flows, QR code scams, and trusted cloud platforms to steal credentials. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the…
Honeywell Controllers Widely Exposed Without Authentication
Security researchers at Zero Science Lab have disclosed a critical vulnerability in Honeywell’s Trend IQ4xx series of Building Management System (BMS) controllers, revealing that the devices expose their full web-based Human-Machine Interface (HMI) without any authentication in their factory-default configuration.…
Iran‑Linked “Dust Specter” APT Deploys AI‑Aided Malware Against Iraqi Officials
Iran‑nexus APT group “Dust Specter” is targeting Iraqi government officials with AI‑assisted custom .NET malware, using dual attack chains that blend DLL sideloading, in‑memory PowerShell, and ClickFix‑style lures. In January 2026, Zscaler ThreatLabz tracked a new campaign against Iraqi officials…
CISA Warns Qualcomm Chipsets Memory Corruption Vulnerability Is Actively Exploited in Attacks
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Qualcomm chipset vulnerability to its Known Exploited Vulnerabilities (KEV) catalog on March 3, 2026, confirming active exploitation in the wild. The flaw, tracked as CVE-2026-21385, affects multiple Qualcomm chipsets and…
Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks
Researchers have found that attackers are abusing OAuth to send users from legitimate Microsoft or Google login pages to phishing sites or malware downloads. This article has been indexed from Malwarebytes Read the original article: Attackers abuse OAuth’s built-in redirects…
Perplexity’s Comet Browser Hijacked Using Calendar Invite to Exfiltrate Sensitive Data
A poisoned Google Calendar invite is all it takes to weaponize Perplexity’s Comet browser. Security researchers at Zenity Labs have discovered a critical vulnerability, dubbed PerplexedBrowser, that tricks Comet’s AI agent into reading local files and stealing credentials. This zero-click…
Silver Dragon APT Group Targets Europe, Asia Using Google Drive for Covert Communication
A China-linked threat group called Silver Dragon has been targeting government and high-profile organizations across Southeast Asia and Europe since at least mid-2024. Operating under the umbrella of APT41, the group breaks into networks by exploiting public-facing internet servers and…
High-severity Qualcomm bug hits Android devices in targeted attacks
Google has patched 129 Android vulnerabilities, including an actively exploited flaw in a widely used Qualcomm component. This article has been indexed from Malwarebytes Read the original article: High-severity Qualcomm bug hits Android devices in targeted attacks
AI Security Firm JetStream Launches With $34 Million in Seed Funding
The startup aims to provide organizations with visibility into how AI operates across their environment. The post AI Security Firm JetStream Launches With $34 Million in Seed Funding appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
How Pirated Software Turns Helpful Employees Into Malware Delivery Agents
Employees seeking free versions of paid software may unknowingly install malware-laced “cracked” apps that can steal credentials, deploy cryptominers, or open the door to ransomware. The post How Pirated Software Turns Helpful Employees Into Malware Delivery Agents appeared first on…