The alleged Everest ransomware breach could expose millions of Under Armour customers to serious security and privacy risks. The post Everest Ransomware Alleges Major Data Breach Targeting Under Armour appeared first on eSecurity Planet. This article has been indexed from…
Category: eSecurity Planet
Iranian Hackers Use SpearSpecter to Target Senior Government Leaders
An Iranian campaign called SpearSpecter is quietly targeting senior officials with tailored social engineering and fileless malware. The post Iranian Hackers Use SpearSpecter to Target Senior Government Leaders appeared first on eSecurity Planet. This article has been indexed from eSecurity…
EchoGram: The Attack That Can Break AI Guardrails
EchoGram is a new attack that can silently flip AI guardrail decisions and bypass safety checks. The post EchoGram: The Attack That Can Break AI Guardrails appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
ShadowMQ: Critical AI Flaws Impact Meta, NVIDIA, and More
ShadowMQ exposes how insecure code reuse can quietly spread dangerous vulnerabilities across the AI ecosystem. The post ShadowMQ: Critical AI Flaws Impact Meta, NVIDIA, and More appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
The Human Perimeter: How the COM Became a Cybercrime Powerhouse
The COM’s rise highlights how attackers increasingly exploit identity and trust to drive modern cybercrime. The post The Human Perimeter: How the COM Became a Cybercrime Powerhouse appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
FortiWeb Flaw Actively Exploited to Create Rogue Admin Accounts
A critical FortiWeb path traversal flaw is being actively exploited to create rogue admin accounts on unpatched devices worldwide. The post FortiWeb Flaw Actively Exploited to Create Rogue Admin Accounts appeared first on eSecurity Planet. This article has been indexed…
Imunify360 Zero-Day Leaves Millions of Websites Open to RCE
A critical flaw in Imunify360 allowed attacker code to run during scans, putting millions of websites at risk. The post Imunify360 Zero-Day Leaves Millions of Websites Open to RCE appeared first on eSecurity Planet. This article has been indexed from…
Inside the First AI-Driven Cyber Espionage Campaign
Anthropic uncovered the first large-scale cyber espionage campaign powered largely by autonomous AI. The post Inside the First AI-Driven Cyber Espionage Campaign appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Inside…
5 Key Cybersecurity Trends to Know in 2025
The cybersecurity space is constantly changing. Discover the cybersecurity trends of 2025 — and how security teams are simplifying complexity through clarity, context, and control. The post 5 Key Cybersecurity Trends to Know in 2025 appeared first on eSecurity Planet.…
Multiple GitLab Vulnerabilities Allow Prompt Injection and Data Theft
GitLab has released urgent fixes for vulnerabilities that allow prompt injection and data exposure across its platform. The post Multiple GitLab Vulnerabilities Allow Prompt Injection and Data Theft appeared first on eSecurity Planet. This article has been indexed from eSecurity…
How 43,000 NPM Spam Packages Hid in Plain Sight for Two Years
A two-year campaign quietly flooded npm with 43,000 dormant packages, exposing major supply-chain security gaps. The post How 43,000 NPM Spam Packages Hid in Plain Sight for Two Years appeared first on eSecurity Planet. This article has been indexed from…
SAP Patches Severe Code Injection Flaw Enabling System Takeover
SAP’s latest emergency patches reveal how one critical flaw in core management systems can expose an entire enterprise to takeover. The post SAP Patches Severe Code Injection Flaw Enabling System Takeover appeared first on eSecurity Planet. This article has been…
Dangerous runC Flaws Could Allow Hackers to Escape Docker Containers
New runC vulnerabilities allow potential container escapes and host takeover, putting Docker, Kubernetes, and cloud-native environments at risk. The post Dangerous runC Flaws Could Allow Hackers to Escape Docker Containers appeared first on eSecurity Planet. This article has been indexed…
Operation Endgame Dismantles 1,025 Malware Servers
Europol and Eurojust dismantled major criminal infrastructure powering widespread infostealer, RAT, and botnet operations. The post Operation Endgame Dismantles 1,025 Malware Servers appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Operation…
ChatGPT Exploited Through SSRF Flaw in Custom GPT Actions
A patched SSRF flaw in ChatGPT’s Custom GPTs exposed how AI features can unintentionally reveal sensitive cloud metadata. The post ChatGPT Exploited Through SSRF Flaw in Custom GPT Actions appeared first on eSecurity Planet. This article has been indexed from…
Google Debuts Private AI Compute to Protect Data in Cloud AI
Google’s Private AI Compute delivers powerful cloud AI while keeping user data fully private. The post Google Debuts Private AI Compute to Protect Data in Cloud AI appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
U.S. Launches Strike Force to Combat Global Crypto Fraud
The U.S. launched a Strike Force to dismantle global crypto scam networks. The post U.S. Launches Strike Force to Combat Global Crypto Fraud appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
AppleScript Abused to Spread Fake Zoom and Teams macOS Updates
Hackers use AppleScript to disguise macOS malware as fake app updates, bypassing Apple’s protections. The post AppleScript Abused to Spread Fake Zoom and Teams macOS Updates appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Phishing Campaign Exploits Meta Business Suite to Target SMBs
Hackers are exploiting Meta Business Suite to launch global phishing attacks. The post Phishing Campaign Exploits Meta Business Suite to Target SMBs appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Phishing…
North Korean APT Uses Remote Wipe to Target Android Users
North Korean hackers are exploiting Google’s Find Hub to wipe Android devices. The post North Korean APT Uses Remote Wipe to Target Android Users appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…