Google’s Project Zero team will provide limited details of new vulnerabilities early following discovery, in a bid to speed up end users’ patching This article has been indexed from www.infosecurity-magazine.com Read the original article: Google to Publicly Report New Vulnerabilities…
Category: www.infosecurity-magazine.com
Third of Exploited Vulnerabilities Weaponized Within a Day of Disclosure
32.1% of vulnerabilities listed in VulnCheck’s Known Exploited Vulnerabilities catalog were weaponized before being detected or within the following day This article has been indexed from www.infosecurity-magazine.com Read the original article: Third of Exploited Vulnerabilities Weaponized Within a Day of…
Data Breach Costs Fall for First Time in Five Years
IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment This article has been indexed from www.infosecurity-magazine.com Read the original article: Data Breach Costs Fall for…
US Tops Hit List as 396 SharePoint Systems Compromised Globally
A total of 396 compromised Microsoft SharePoint systems have been identified globally, affecting 145 organizations across 41 countries in the wake of the ToolShell zero-day vulnerability This article has been indexed from www.infosecurity-magazine.com Read the original article: US Tops Hit…
OWASP Launches Agentic AI Security Guidance
The comprehensive guidance focuses on technical recommendations for securing agentic AI applications, from development to deployment This article has been indexed from www.infosecurity-magazine.com Read the original article: OWASP Launches Agentic AI Security Guidance
French Telco Orange Hit by Cyber-Attack
Some of Orange’s professional and consumer services may be disrupted for a few days because of the cyber incident This article has been indexed from www.infosecurity-magazine.com Read the original article: French Telco Orange Hit by Cyber-Attack
Critical Authentication Flaw Identified in Base44 Vibe Coding Platform
Flaw in Base44 allowed unauthorized access to private apps, bypassing authentication systems This article has been indexed from www.infosecurity-magazine.com Read the original article: Critical Authentication Flaw Identified in Base44 Vibe Coding Platform
Auto-Color Backdoor Malware Exploits SAP Vulnerability
Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324 This article has been indexed from www.infosecurity-magazine.com Read the original article: Auto-Color Backdoor Malware Exploits SAP Vulnerability
CISA Warns of Exploited Critical Vulnerabilities in Cisco Identity Services Engine
Hackers are actively exploiting two critical flaws in Cisco Identity Services Engine, said the US Cybersecurity and Infrastructure Security Agency This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Warns of Exploited Critical Vulnerabilities in Cisco Identity…
FBI Seizes $2.4m in Crypto from Chaos Ransomware Gang
The federal government has applied for forfeiture of the funds, which were seized by FBI Dallas in April 2025 This article has been indexed from www.infosecurity-magazine.com Read the original article: FBI Seizes $2.4m in Crypto from Chaos Ransomware Gang
Charity Fined After Destroying “Irreplaceable” Records
A Scottish charity has been fined £18,000 for systematic data protection failings This article has been indexed from www.infosecurity-magazine.com Read the original article: Charity Fined After Destroying “Irreplaceable” Records
Pro-Ukraine Hacktivists Ground Dozens of Aeroflot Flights
Two pro-Ukraine hacktivists have claimed responsibility for a destructive attack on Aeroflot This article has been indexed from www.infosecurity-magazine.com Read the original article: Pro-Ukraine Hacktivists Ground Dozens of Aeroflot Flights
Critical Flaws in WordPress Plugin Leave 10,000 Sites Vulnerable
10,000 WordPress sites vulnerable to takeover due to critical flaws in HT Contact Form Widget plugin This article has been indexed from www.infosecurity-magazine.com Read the original article: Critical Flaws in WordPress Plugin Leave 10,000 Sites Vulnerable
New Scattered Spider Tactics Target VMware vSphere Environments
Scattered Spider has targeted VMware vSphere environments, exploiting retail, airline and insurance sectors This article has been indexed from www.infosecurity-magazine.com Read the original article: New Scattered Spider Tactics Target VMware vSphere Environments
Third-Party Breach Impacts Majority of Allianz Life US Customers
Insurance firm Allianz Life said that a threat actor accessed personally identifiable information of the majority of its 1.4 million US customers This article has been indexed from www.infosecurity-magazine.com Read the original article: Third-Party Breach Impacts Majority of Allianz Life…
Naval Group Denies Hack Claims, Alleges “Reputational Attack”
Despite claims by a hacker, French defense company Naval Group has detected no intrusions into its IT environments at the time of writing This article has been indexed from www.infosecurity-magazine.com Read the original article: Naval Group Denies Hack Claims, Alleges…
US Woman Gets Eight Years for Part in $17m North Korean Scheme
Arizonan woman sentenced to 102 months for operating laptop farm for North Korean IT workers This article has been indexed from www.infosecurity-magazine.com Read the original article: US Woman Gets Eight Years for Part in $17m North Korean Scheme
Dating App Breach Exposes Images of 13,000 Women
Dating app Tea has been compromised by a hacker, resulting in the exposure of 13,000 selfies This article has been indexed from www.infosecurity-magazine.com Read the original article: Dating App Breach Exposes Images of 13,000 Women
BlackSuit Ransomware Group’s Dark Web Sites Seized in Operation Checkmate
The US and partners from nine countries have taken down part of the ransomware group’s infrastructure This article has been indexed from www.infosecurity-magazine.com Read the original article: BlackSuit Ransomware Group’s Dark Web Sites Seized in Operation Checkmate
Prolonged Chinese Cyber Espionage Campaign Targets VMware Appliances
Sygnia observed Chinese cyber campaign dubbed Fire Ant deploying sophisticated techniques to gain full compromise of victim environments, discovering isolated assets This article has been indexed from www.infosecurity-magazine.com Read the original article: Prolonged Chinese Cyber Espionage Campaign Targets VMware Appliances