A ransomware attack by KillSec on Brazil software provider MedicSolution threatens healthcare, impacting providers and patients This article has been indexed from www.infosecurity-magazine.com Read the original article: KillSec Ransomware Hits Brazilian Healthcare IT Vendor
Category: www.infosecurity-magazine.com
Cursor Autorun Flaw Lets Repositories Execute Code Without Consent
A flaw in the Cursor extension allows unauthorized code execution when opening repositories in Visual Studio This article has been indexed from www.infosecurity-magazine.com Read the original article: Cursor Autorun Flaw Lets Repositories Execute Code Without Consent
Adobe Releases Emergency Patch for Critical Flaw in Commerce and Magento
The vulnerability, dubbed SessionReaper, allows customer account takeover and unauthenticated remote code execution This article has been indexed from www.infosecurity-magazine.com Read the original article: Adobe Releases Emergency Patch for Critical Flaw in Commerce and Magento
Ransomware Payments Plummet in Education Amid Enhanced Resiliency
Sophos found that average ransom demands and payments fell substantially in the education sector in 2025, as recovery time and costs fell This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Payments Plummet in Education Amid Enhanced…
Two Zero-Days Among Patch Tuesday CVEs This Month
Microsoft has fixed over 80 vulnerabilities including two publicly disclosed zero-days in its latest Patch Tuesday release This article has been indexed from www.infosecurity-magazine.com Read the original article: Two Zero-Days Among Patch Tuesday CVEs This Month
Malicious npm Code Reached 10% of Cloud Environments
Wiz Security warns that a recently discovered supply chain attack campaign targeting npm is far from over This article has been indexed from www.infosecurity-magazine.com Read the original article: Malicious npm Code Reached 10% of Cloud Environments
Threat Actor Accidentally Exposes AI-Powered Operations
A threat actor accidentally revealed their AI-powered methods by installing Huntress security software This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actor Accidentally Exposes AI-Powered Operations
Salty2FA Phishing Kit Unveils New Level of Sophistication
Salty2FA phishing campaign showcases advanced techniques and professionalism of cybercrime operations This article has been indexed from www.infosecurity-magazine.com Read the original article: Salty2FA Phishing Kit Unveils New Level of Sophistication
Axios User Agent Helps Automate Phishing on “Unprecedented Scale”
ReliaQuest warns that phishing campaigns abusing the Axios user agent have surged 241% in three months This article has been indexed from www.infosecurity-magazine.com Read the original article: Axios User Agent Helps Automate Phishing on “Unprecedented Scale”
Open Source Community Thwarts Massive npm Supply Chain Attack
What could have been a historic supply chain attack seems to have been averted due to the rapid response of the open source community This article has been indexed from www.infosecurity-magazine.com Read the original article: Open Source Community Thwarts Massive…
Chinese Cyber Espionage Campaign Impersonates US Congressman
A House select committee said Chinese actors impersonated Representative John Moolenaar to steal information that could be used to influence trade talks This article has been indexed from www.infosecurity-magazine.com Read the original article: Chinese Cyber Espionage Campaign Impersonates US Congressman
Salesloft: GitHub Account Breach Was Ground Zero in Drift Campaign
Salesloft has revealed that threat actors targeted customer Salesforce data after breaching its GitHub account This article has been indexed from www.infosecurity-magazine.com Read the original article: Salesloft: GitHub Account Breach Was Ground Zero in Drift Campaign
Wealthsimple Confirms Data Breach After Supply Chain Attack
Wealthsimple confirmed a third-party vendor data breach affecting roughly 30,000 customers This article has been indexed from www.infosecurity-magazine.com Read the original article: Wealthsimple Confirms Data Breach After Supply Chain Attack
MostereRAT Targets Windows Users With Stealth Tactics
Phishing campaign unveiled MostereRAT, targeting Windows systems with advanced evasion techniques This article has been indexed from www.infosecurity-magazine.com Read the original article: MostereRAT Targets Windows Users With Stealth Tactics
Remote Access Abuse Biggest Pre-Ransomware Indicator
Cisco Talos found that abuse of remote services and remote access software are the most prevalent ‘pre-ransomware’ tactics deployed by threat actors This article has been indexed from www.infosecurity-magazine.com Read the original article: Remote Access Abuse Biggest Pre-Ransomware Indicator
Qualys, Tenable Latest Victims of Salesloft Drift Hack
Palo Alto Networks, Cloudflare and Zscaler were also among confirmed victims of the attack This article has been indexed from www.infosecurity-magazine.com Read the original article: Qualys, Tenable Latest Victims of Salesloft Drift Hack
GhostAction Supply Chain Attack Compromises 3000+ Secrets
Security researchers have discovered a new malicious campaign impacting hundreds of GitHub users This article has been indexed from www.infosecurity-magazine.com Read the original article: GhostAction Supply Chain Attack Compromises 3000+ Secrets
SAP S/4HANA Users Urged to Patch Critical Exploited Bug
Critical SAP S/4HANA vulnerability CVE-2025-42957 is being exploited in the wild This article has been indexed from www.infosecurity-magazine.com Read the original article: SAP S/4HANA Users Urged to Patch Critical Exploited Bug
Bridgestone Confirms “Limited Cyber Incident” Impacting Facilities in North America
Bridgestone Americas confirmed the incident but has not detailed the scope of the attack This article has been indexed from www.infosecurity-magazine.com Read the original article: Bridgestone Confirms “Limited Cyber Incident” Impacting Facilities in North America
South Carolina School District Data Breach Affects 31,000 People
An investigation has revealed that files were stolen in a data breach affecting a South Carolina school district This article has been indexed from www.infosecurity-magazine.com Read the original article: South Carolina School District Data Breach Affects 31,000 People