An extortion gang by the name of Crimson Collective claimed to have stolen approximately 570GB of compressed data from internal development repositories belonging to Red Hat. Red Hat confirmed the breach impacted one of its GitLab instances. The stolen data…
Category: EN
Auth Bypass Flaw in Service Finder WordPress Plugin Under Active Exploit
An Authentication Bypass (CVE-2025-5947) in Service Finder Bookings plugin allows any unauthenticated attacker to log in as an administrator. Over 13,800 exploit attempts detected. Update to v6.1 immediately. This article has been indexed from Hackread – Latest Cybersecurity, Hacking News,…
DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
The world’s largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected…
Homeland Security reassigns ‘hundreds’ of CISA cyber staffers to support Trump’s deportation crackdown
Staffers at U.S. cybersecurity agency CISA have been reassigned to ICE and CBP as part of the Trump administration’s crackdown on immigration. This article has been indexed from Security News | TechCrunch Read the original article: Homeland Security reassigns ‘hundreds’…
Threat Actors Exploiting SonicWall SSL VPN Devices in Wild to Deploy Akira Ransomware
Threat actors have reemerged in mid-2025 leveraging previously disclosed vulnerabilities in SonicWall SSL VPN appliances to deploy Akira ransomware on enterprise networks. Beginning in July, multiple incidents of initial access via unpatched SonicWall devices were reported across North America and…
New Chaosbot Leveraging CiscoVPN and Active Directory Passwords to Execute Network Commands
ChaosBot surfaced in late September 2025 as a sophisticated Rust-based backdoor targeting enterprise networks. Initial investigations revealed that threat actors gained entry by exploiting compromised CiscoVPN credentials coupled with over-privileged Active Directory service accounts. Once inside, ChaosBot was stealthily deployed…
Spyware maker NSO Group confirms acquisition by US investors
NSO Group confirmed to TechCrunch that an unnamed group of American investors has taken “controlling ownership” of the surveillance tech maker. This article has been indexed from Security News | TechCrunch Read the original article: Spyware maker NSO Group confirms…
Your passwords don’t need so many fiddly characters, NIST says
It’s once again time to change your passwords, but if one government agency has its way, this might be the very last time you do it. This article has been indexed from Malwarebytes Read the original article: Your passwords don’t…
Apple voices concerns over age-check law that could put user privacy at risk
The more sensitive data that companies have to collect and store, the greater the consequences for users if it’s breached. This article has been indexed from Malwarebytes Read the original article: Apple voices concerns over age-check law that could put…
What is CAA? Understanding Certificate Authority Authorization
Learn what a CAA record is, how it protects your domain from unauthorized SSL certificate issuance, and how to set it up for stronger website security. The post What is CAA? Understanding Certificate Authority Authorization appeared first on Security Boulevard.…
The Psychology of Security: Why Users Resist Better Authentication
70% of Americans feel overwhelmed by passwords, yet only half choose secure ones despite knowing the risks. The problem isn’t user education—it’s psychology. Discover why users resist better authentication and the UX design principles that make security feel human, not…
Telstra Denies Scattered Spider Data Breach Claims Amid Ransom Threats
Telstra, one of Australia’s leading telecommunications companies, has denied claims made by the hacker group Scattered Spider that it suffered a massive data breach compromising nearly 19 million personal records. The company issued a statement clarifying that its internal…
SonicWall investigation shows hackers gained wide access to customer backup files
The probe contradicts earlier claims that a limited set of MySonicWall customers were impacted. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: SonicWall investigation shows hackers gained wide access to customer backup files
Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries
A threat actor known as Storm-2657 has been observed hijacking employee accounts with the end goal of diverting salary payments to attacker-controlled accounts. “Storm-2657 is actively targeting a range of U.S.-based organizations, particularly employees in sectors like higher education, to…
Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers
Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js’ Single Executable Application (SEA) feature as a way to distribute its payloads. According to Fortinet FortiGuard Labs, select iterations have also employed the open-source…
Oracle E-Business Suite exploitation traced back as early as July
Researchers say an extortion campaign linked to the Clop ransomware group used a series of chained vulnerabilities and sophisticated malware. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Oracle E-Business Suite exploitation traced…
Stealit Malware Using Node.js to Hide in Fake Game and VPN Installers
Fortinet warns of Stealit, a MaaS infostealer, now targeting Windows systems and evading detection by using Node.js’s SEA feature while hiding in fake game and VPN installers. This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech,…
Your browser is an AI-enabled OS, so secure it like one
<p>From an application perspective, web browsers have become a sort of OS within an OS. With the introduction of agentic AI capabilities within the browser (just look at what <a href=”https://www.techtarget.com/searchenterpriseai/news/366629196/Perplexitys-Chrome-bid-shows-growing-competition-in-AI-search”>Perplexity</a>, Opera and, to some extent, Google and Microsoft are…
Ukraine sees surge in AI-Powered cyberattacks by Russia-linked Threat Actors
Russia-linked actors use AI to craft phishing and malware attacks against entities in Ukraine, says SSSCIP. Russian hackers increasingly use AI in cyberattacks against Ukraine, the country’s State Service for Special Communications and Information Protection (SSSCIP) reported. Beyond AI-generated phishing,…
Juniper patched nine critical flaws in Junos Space
Juniper fixed nearly 220 flaws in Junos OS, Junos Space, and Security Director, including nine critical bugs in Junos Space. Juniper Networks released patches to address nearly 220 vulnerabilities in Junos OS, Junos Space, and Security Director, including nine critical…