A highly dangerous self-replicating malware called “Shai-Hulud” has recently swept through the global software supply chain, becoming one of the largest incidents of its kind ever documented. Named after the sandworms in the Dune series, this worm has infected…
Category: EN
National Cyber Authorities Launch OT Security Guidance
The Five Eyes countries, Germany and the Netherlands are launching a standard for managing OT security This article has been indexed from www.infosecurity-magazine.com Read the original article: National Cyber Authorities Launch OT Security Guidance
Jaguar Land Rover Confirms Gradual Restart of Operations Post-Cyberattack
Jaguar Land Rover (JLR) has announced the controlled resumption of manufacturing operations following a significant cyberattack that disrupted its production facilities. The British luxury automaker confirmed that some sections of its manufacturing operations will resume in the coming days as…
New ModStealer Evade Antivirus Detection to Attack macOS Users and Steal Sensitive Data
A sophisticated new cross-platform information stealer known as ModStealer has emerged, targeting macOS users and demonstrating concerning capabilities to evade Apple’s built-in security mechanisms. The malware represents the latest evolution in macOS-focused threats, which have seen a dramatic surge throughout…
Threat Actors Weaponizing Facebook and Google Ads as Financial Platforms to Steal Sensitive Data
In recent months, cybersecurity teams have observed an alarming trend in which malicious actors exploit Facebook and Google advertising channels to masquerade as legitimate financial services. By promoting free or premium access to well-known trading platforms, these threat actors have…
Data Is a Dish Best Served Fresh: “In the Wild” Versus Active Exploitation
The term “In the Wild” is broadly used to refer to any activity that has been observed outside of a controlled environment. It’s an important metric in security because criminals… The post Data Is a Dish Best Served Fresh: “In…
New TamperedChef Malware Exploits Productivity Tools to Access and Exfiltrate Sensitive Data
A sophisticated malware campaign dubbed “TamperedChef” is exploiting trojanized productivity tools—disguised as seemingly benign applications—to bypass security controls, establish persistence, and siphon sensitive information from targeted systems. On September 22, 2025, Field Effect researchers investigating a potentially unwanted application (PUA)…
NowSecure Privacy helps organizations protect mobile apps from data leaks
NowSecure announced the release of NowSecure Privacy, a privacy solution for mobile applications. With this launch, developers, security teams, and privacy professionals gain the capabilities needed to identify and fix systemic blind spots that compromise mobile application privacy. NowSecure Privacy…
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More
Cybersecurity never stops—and neither do hackers. While you wrapped up last week, new attacks were already underway. From hidden software bugs to massive DDoS attacks and new ransomware tricks, this week’s roundup gives you the biggest security moves to know.…
Akira Ransomware Beats SonicWall VPN MFA
Since July 2025, the Akira ransomware campaign has been exploiting SonicWall NSA and TZ series devices running SonicOS 6-8. Researchers suspect The post Akira Ransomware Beats SonicWall VPN MFA first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
DataCenter Fire Shuts South Korea Sites
A fire caused by an exploding lithium-ion battery at a key government data center in Daejeon, South Korea, has knocked more than 600 essential public The post DataCenter Fire Shuts South Korea Sites first appeared on CyberMaterial. This article has…
Ransomware Hits Ohio Union County
Union County, Ohio, discovered a ransomware attack on its computer network on May 18, 2025. Following the breach, the county immediately The post Ransomware Hits Ohio Union County first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read…
Medusa Ransomware Hits Comcast Data
The Medusa ransomware group has taken responsibility for a cyberattack on Comcast, the global media and technology giant. The post Medusa Ransomware Hits Comcast Data first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read the original article:…
MacOS XCSSET Variant Hits Firefox
A new version of a well-known macOS malware called XCSSET has been discovered by cybersecurity researchers. This updated variant of XCSSET The post MacOS XCSSET Variant Hits Firefox first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read…
Acreed Infostealer Gaining Popularity Among Cybercriminals for C2 via Steam Platform
Acreed, a novel infostealer first observed in February 2025, has rapidly gained traction among threat actors seeking discreet credential and cryptocurrency data harvesting. Leveraging a unique command-and-control (C2) mechanism via the Steam platform’s community profiles, Acreed exhibits advanced OPSEC measures…
WhatsApp 0-Click Flaw Abused via Malicious DNG Image File
A newly discovered zero-click remote code execution (RCE) vulnerability in WhatsApp is putting millions of Apple users at risk. Researchers from DarkNavyOrg have demonstrated a proof-of-concept (PoC) exploit that leverages two distinct flaws to compromise iOS, macOS, and iPadOS devices without any…
The State of AI in the SOC 2025 – Insights from Recent Study
Security leaders are embracing AI for triage, detection engineering, and threat hunting as alert volumes and burnout hit breaking points. A comprehensive survey of 282 security leaders at companies across industries reveals a stark reality facing modern Security Operations Centers:…
DarkCloud Infostealer Relaunched to Grab Credentials, Crypto and Contacts
eSentire TRU analyses the new DarkCloud V4.2 infostealer, rewritten in VB6. Find out how the malware steals browser data, crypto, and contacts via targeted phishing. This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI &…
Cybercriminals Target SonicWall Firewalls to Deploy Akira Ransomware via Malicious Login Attempts
Security teams face a rapidly evolving campaign that abuses compromised SonicWall SSL VPN credentials to deliver Akira ransomware in under four hours—dwell times among the shortest ever recorded for this type of threat. Within minutes of successful authentication—often originating from…
How to Use a Password Manager to Share Your Logins After You Die (2025)
Your logins will live on after you pass on. Make sure they end up in the right hands. This article has been indexed from Security Latest Read the original article: How to Use a Password Manager to Share Your Logins…