ESET found that the FSB-affiliated groups, Gamaredon and Turla, are sharing tools to help conduct espionage attacks against Ukrainian organizations This article has been indexed from www.infosecurity-magazine.com Read the original article: Russian State Hackers Collaborate in Attacks Against Ukraine
Category: EN
Beyond Tick Boxes: An Auditor’s Perspective on Information Security Compliance
Introduction As cyber threats evolve and regulatory requirements tighten, businesses face increasing pressure to protect their sensitive data and strengthen security practices. This blog will give you some helpful insights… The post Beyond Tick Boxes: An Auditor’s Perspective on Information…
HubSpot’s Jinjava Engine Flaw Exposes Thousands of Sites to RCE Attacks
A critical security vulnerability has been discovered in HubSpot’s Jinjava template engine, potentially exposing thousands of websites and applications to remote code execution attacks. The flaw, tracked as CVE-2025-59340, carries the maximum CVSS score of 10.0, indicating the severity of the…
One token to pwn them all: Entra ID bug could have granted access to every tenant
Until Microsoft lobbed it into a virtual volcano A security researcher claims to have found a flaw that could have handed him the keys to almost every Entra ID tenant worldwide.… This article has been indexed from The Register –…
Netskope Raises Over 908 Million
California-based cybersecurity firm Netskope has successfully gone public, raising over $908 million in its initial public offering. Trading on the Nasdaq The post Netskope Raises Over 908 Million first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read…
Gold Salem Warlock Joins Ransomware
Since March 2025, a new threat group known as the Warlock Group has been actively compromising networks and deploying its Warlock ransomware The post Gold Salem Warlock Joins Ransomware first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
UK Police Arrest Two Scattered Spider Teens
The arrests of two teenagers tied to the Scattered Spider hacking group highlight the growing threat of cybercrime and the global efforts to combat it. The post UK Police Arrest Two Scattered Spider Teens first appeared on CyberMaterial. This article…
New York Blood Center Data Breach
New York Blood Center Enterprises (NYBCe) recently confirmed that a cybersecurity incident in January 2025 led to a significant data breach The post New York Blood Center Data Breach first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
Russian Hackers Hit Polish Hospitals
Poland’s government is substantially increasing its cybersecurity budget to a record €1bn this year, a direct response to a rise in Russian sabotage The post Russian Hackers Hit Polish Hospitals first appeared on CyberMaterial. This article has been indexed from…
AI-Driven Phishing Attacks: Deceptive Tactics to Bypass Security Systems
Since January, Trend Micro has tracked a surge in phishing campaigns using AI-powered platforms (Lovable, Netlify, Vercel) to host fake captcha pages that lead to phishing websites. This ploy misleads users and evades security tools. Victims are first shown a…
Luxury Jewelry Creator Tiffany Confirms Data breach – Hackers Stolen Users Personal Information
Luxury jewelry brand Tiffany and Company has confirmed a data breach that resulted in the theft of customers’ personal information. The company is in the process of sending out notification letters to affected individuals, detailing the scope of the incident…
HubSpot’s Jinjava Engine Vulnerability Exposes Thousands of Websites to RCE Attacks
A newly disclosed flaw in HubSpot’s open-source Jinjava template engine could allow attackers to bypass sandbox restrictions and achieve remote code execution (RCE) on thousands of websites relying on versions prior to 2.8.1. Tracked as CVE-2025-59340 and rated Critical with…
Critical GoAnywhere MFT Platform Vulnerability Exposes Enterprises to Remote Exploitation
A deserialization flaw in the License Servlet component of Fortra GoAnywhere Managed File Transfer (MFT) platform. Identified as CVE-2025-10035, this vulnerability permits an unauthenticated attacker who can deliver a forged license response signature to trigger Java deserialization of attacker-supplied objects,…
RDP vs SSH Comparison – Features, Protocols, Security, And Use Cases
Remote Desktop Protocol (RDP) and Secure Shell (SSH) have changed how organizations manage their IT systems. These tools allow employees to access and control their computers from anywhere, which helps teams work together better. By enabling secure connections to work…
ChatGPT Deep Research zero-click vulnerability fixed by OpenAI
OpenAI has fixed a vulnerability in ChatGPT Deep Research after researchers found a prompt injection method to exfiltrate PII. This article has been indexed from Malwarebytes Read the original article: ChatGPT Deep Research zero-click vulnerability fixed by OpenAI
ImmuniWeb offers free tool to test quantum resilience of TLS stacks
ImmuniWeb has released a free online tool that checks whether websites are protected by post-quantum cryptography (PQC). The tool analyzes SSL/TLS configurations and verifies their compliance with the latest quantum-resilient encryption standards from NIST. It also checks for adherence to…
Zero-Click Vulnerability in ChatGPT’s Agent Enables Silent Gmail Data Theft
Researchers at Radware found a zero-click flaw in ChatGPT Deep Research agent when connected to Gmail and browsing This article has been indexed from www.infosecurity-magazine.com Read the original article: Zero-Click Vulnerability in ChatGPT’s Agent Enables Silent Gmail Data Theft
UK police arrested two teen Scattered Spider members linked to the 2024 attack on Transport for London
U.K. police arrested two teens from the Scattered Spider group for their role in the August 2024 cyberattack on Transport for London. U.K. law enforcement authorities arrested two teenagers who are members of the notorious Scattered Spider hacking group in connection with…
How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines
Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community – all free to import and deploy through the platform’s Community Edition. The…
Luxury Jeweler Tiffany Reports Data Breach Exposing User Personal Data
Luxury jeweler Tiffany and Company has confirmed a data breach that exposed the personal information of 2,590 customers. The company discovered unauthorized access to an external system on September 9, 2025, but determined the incident first occurred on May 12, 2025.…