Pro-Palestinian hacktivist group Handala claims a cyberattack on Stryker, alleging it wiped 200,000 systems and disrupted global operations. Pro-Palestinian hacktivist group Handala claims responsibility for a disruptive cyberattack against medical technology firm Stryker. “Medical technology giant Stryker is experiencing a…
Category: EN
Iran-linked cyber crew says they hit US med-tech firm
Meanwhile, Verifone says ‘no evidence’ to support the digital intruders’ claims A hacking crew with ties to Iran’s intelligence agency claimed to be behind a global network outage at med-tech firm Stryker on Wednesday, and said the cyberattack was in…
DirectX, OpenFOAM, Libbiosig vulnerabilities
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in the BioSig Project Libbiosig library and OpenCFD OpenFOAM, as well as an unpatched vulnerability in Microsoft DirectX. The vulnerabilities mentioned in this blog post have been patched by their…
Microsoft SQL Server Vulnerability Enables Privilege Escalation
Microsoft patched CVE-2026-21262, a SQL Server flaw that could let attackers escalate privileges to sysadmin. The post Microsoft SQL Server Vulnerability Enables Privilege Escalation appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Report: Approximately 59K Additional Vulnerabilities Will Be Discovered in 2026
A report published by the Forum of Incident Response and Security Teams (FIRST) Inc. projects approximately 59,000 new vulnerabilities will be discovered this year, an estimate that in a worst case scenario could rise to as high as 117,673. Based…
Building the Future-Proofing Forensics Pipeline with Dilithium
Digital forensics relies on a chain of custody (CoC) to protect evidence. If a defense attorney can show that a log file was edited after collection, the case can fall apart. For the past 30 years, we’ve used standard hashing…
BeatBanker malware targets Android users with banking Trojan and crypto miner
BeatBanker Android malware spreads through fake Starlink apps on websites imitating Google Play Store, hijacking devices, stealing credentials, and mining crypto. A new Android malware called BeatBanker spreads through fake Starlink apps distributed on websites posing as the Google Play…
Senate Confirms Joshua Rudd to Lead NSA and US Cyber Command
The leadership structure, commonly referred to as the “dual-hat” arrangement, assigns a single individual to oversee both organizations. The post Senate Confirms Joshua Rudd to Lead NSA and US Cyber Command appeared first on SecurityWeek. This article has been indexed…
USENIX Security ’25 (Enigma Track) – Digital Product Safety: Rejecting Software As Magic
Author, Creator & Presenter:Lisa LeVasseur Our thanks to USENIX Security ’25 (Enigma Track) (USENIX ’25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security ’25 (Enigma Track) content on the Organizations’ YouTube Channel. The post USENIX Security ’25 (Enigma…
Pro-Iran hacktivist group says it is behind attack on medical tech giant Stryker
The hacktivist group claimed the attack was in retaliation for a U.S. strike on a Tehran school that killed more than 175 people, most of them children. This article has been indexed from Security News | TechCrunch Read the original…
Phishers hide scam links with IPv6 trick in “free toothbrush” emails
United Healthcare impersonators are using an IPv6 trick to hide the real destination of phishing links in emails promising free Oral-B toothbrushes. This article has been indexed from Malwarebytes Read the original article: Phishers hide scam links with IPv6 trick…
Microsoft .NET Vulnerability Enables Remote DoS Attacks
Microsoft patched a .NET flaw (CVE-2026-26127) that could let attackers remotely trigger DoS attacks. The post Microsoft .NET Vulnerability Enables Remote DoS Attacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber…
ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites
Salesforce customers have, once again, been targeted by the ShinyHunters group – or, at least, it’s what the group claims. Attackers modified and abused benign tool On Saturday, Saleforce confirmed that its security team has identified an attack campaign by…
5 Best Companies Providing CVE-Free Container Images
Container images frequently inherit vulnerabilities from upstream operating system packages. Even simple application containers may contain dozens of… The post 5 Best Companies Providing CVE-Free Container Images appeared first on Hackers Online Club. This article has been indexed from Hackers…
BlackSanta Malware Shuts Down Protections, Targets HR and Recruiting Operations
Russian threat actors for more than a year have targeted HR and recruiting operations in a sophisticated phishing and infostealing campaign that includes a component, dubbed BlackSanta, that can shut down antivirus tools and EDR protections before deploying the malware…
Researchers Trick Perplexity’s Comet AI Browser Into Phishing Scam in Under Four Minutes
Agentic web browsers that leverage artificial intelligence (AI) capabilities to autonomously execute actions across multiple websites on behalf of a user could be trained and tricked into falling prey to phishing and scam traps. The attack, at its core, takes…
Iranian Hacktivists Strike Medical Device Maker Stryker in “Severe” Attack that Wiped Systems
Stryker, a leading maker of medical devices, was hit early this morning with a cyberattack that has reportedly caused the company's systems to shut down globally. The company has acknowledged the attack and called it "severe" in communication with employees.…
Meta, international cops use handcuffs and AI to stop scammers
150k accounts nuked, 21 suspects arrested Not every scam starts with malware or a compromised account. Sometimes all it takes is a friend request or a link shared via chat.… This article has been indexed from The Register – Security…
Researchers uncover AI-powered vishing platform
A vishing-as-a-service platform that helps scammers carry out so-called “press 1” scams is misusing text-to-speech (TTS) capabilities provided by AI voice technology company ElevenLabs, Mirage Security researchers claim. How “press 1” vishing scams work For “press 1” scams, fraudsters spoof…