Google Project Zero has uncovered a sophisticated technique for bypassing Address Space Layout Randomization (ASLR) protections on Apple devices, targeting a fundamental issue in Apple’s serialization framework. Security researcher Jann Horn described how deterministic behaviors in NSKeyedArchiver and NSKeyedUnarchiver…
Oracle customers targeted with emails claiming E-Business Suite breach, data theft
Unknown attackers claiming affiliation with the Cl0p extortion gang are hitting business and IT executives at various companies with emails claiming that they have exfiltrated sensitive data from the firms’ Oracle E-Business Suite (EBS). The email campaign According to Google,…
Rethinking NHI Security: The Essential Shift to Zero Trust Security and Ephemeral Identities
As identity security becomes increasingly critical in cybersecurity, the focus has shifted from safeguarding human identities to protecting Non-Human Identities (NHIs)—such as API keys, service accounts, secrets, tokens, and certificates. While… The post Rethinking NHI Security: The Essential Shift to Zero…
Clop-linked crims shake down Oracle execs with data theft claims
Extortion emails name-drop Big Red’s E-Business Suite, though Google and Mandiant yet to find proof of any breach Criminals with potential links to the notorious Clop ransomware mob are bombarding Oracle execs with extortion emails, claiming to have stolen sensitive…
1.2 Million Impacted by WestJet Data Breach
The Canadian airline fell victim to a cyberattack in June and has completed the analysis of stolen information. The post 1.2 Million Impacted by WestJet Data Breach appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
Free VPN Apps Found Riddled With Security Flaws
A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws This article has been indexed from www.infosecurity-magazine.com Read the original article: Free VPN Apps Found Riddled With Security Flaws
EU funds are flowing into spyware companies, and politicians are demanding answers
Experts say Commission is ‘fanning the flames’ of the continent’s own Watergate An arsenal of angry European Parliament members (MEPs) is demanding answers from senior commissioners about why EU subsidies are ending up in the pockets of spyware companies.… This…
Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware
Google Mandiant and Google Threat Intelligence Group (GTIG) have disclosed that they are tracking a new cluster of activity possibly linked to a financially motivated threat actor known as Cl0p. The malicious activity involves sending extortion emails to executives at…
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More
From unpatched cars to hijacked clouds, this week’s Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding…
Automating Pentest Delivery: 7 Key Workflows for Maximum Impact
Penetration testing is critical to uncovering real-world security weaknesses. With the shift into continuous testing and validation, it is time we automate the delivery of these results. The way results are delivered hasn’t kept up with today’s fast-moving threat landscape.…
Oneleet raises $33M to shake up the world of security compliance
Founder Bryan Onel says too many companies are doing the bare minimum to meet their security compliance obligations, and raised $33 million to help his customers get both compliant and secure. This article has been indexed from Security News |…
766,000 Impacted by Data Breach at Dealership Software Provider Motility
The hackers stole names, contact details, Social Security numbers, and driver’s license numbers in an August 19 ransomware attack. The post 766,000 Impacted by Data Breach at Dealership Software Provider Motility appeared first on SecurityWeek. This article has been indexed…
Fake npm Package Hijacks Postmark Emails in Supply Chain Breach
A single line of malicious code hidden in a counterfeit npm package has exposed potentially thousands of sensitive emails every day, raising fresh alarms about software supply-chain security. The package, uploaded to npm under the name postmark-mcp, impersonated the legitimate…
WireTap Attack Breaks Intel SGX Security
The attack uses a passive interposer to control the SGX enclave and extract the DCAP attestation key, breaking the mechanism. The post WireTap Attack Breaks Intel SGX Security appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
How to Close Threat Detection Gaps: Your SOC’s Action Plan
Running a SOC often feels like drowning in alerts. Every morning, dashboards light up with thousands of signals; some urgent, many irrelevant. The job is to find the real threats fast enough to keep cases from piling up, prevent analyst…
IT Security News Hourly Summary 2025-10-02 12h : 9 posts
9 posts were published in the last hour 10:2 : UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud 10:2 : Red Hat Data Breach – Threat Actors Claim Breach of 28K Private GitHub Repositories 10:2 : Zania Raises…
Cybercrime group claims to have breached Red Hat ‘s private GitHub repositories
The cybercrime group calling itself the Crimson Collective claimed to have compromised Red Hat ‘s private GitHub repositories. The Crimson Collective claimed it had stolen 570GB from Red Hat ’s private GitHub repositories, including 28,000 projects and approximately 800 Customer…
Expired US Cyber Law Puts Data Sharing and Threat Response at Risk
Experts argued that the lapse of the Cybersecurity Information Sharing Act could have far-reaching consequences in US national cyber defenses This article has been indexed from www.infosecurity-magazine.com Read the original article: Expired US Cyber Law Puts Data Sharing and Threat…
Malicious ZIP Files Use Windows Shortcuts to Drop Malware
Cybersecurity firm Blackpoint Cyber reveals a new spear phishing campaign targeting executives. Learn how attackers use fraudulent document ZIPs containing malicious shortcut files, leveraging ‘living off the land’ tactics, and a unique Anti-Virus check to deliver a custom payload This…
Cybercriminals Claim Theft of Data From Oracle E-Business Suite Customers
The attackers are claiming to be affiliated with the notorious Cl0p ransomware group and links have been found to FIN11. The post Cybercriminals Claim Theft of Data From Oracle E-Business Suite Customers appeared first on SecurityWeek. This article has been…
Allianz Life July Breach Hits 1.5M
Allianz Life’s recent investigation into a cyberattack it suffered in July has concluded, revealing that nearly 1.5 million individuals were impacted. The post Allianz Life July Breach Hits 1.5M first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
MatrixPDF Toolkit Turns PDFs Into Lures
A new phishing and malware distribution toolkit called MatrixPDF is turning ordinary PDF files into dangerous interactive lures. Spotted by Varonis researchers The post MatrixPDF Toolkit Turns PDFs Into Lures first appeared on CyberMaterial. This article has been indexed from…
Outlook Bug Causes Repeated Crashes
A significant bug is currently preventing some users from accessing their email through the classic Outlook for Windows desktop application. When affected users attempt The post Outlook Bug Causes Repeated Crashes first appeared on CyberMaterial. This article has been indexed…
Smishing targets routers in Belgium 2025
A newly identified series of smishing attacks has been linked to compromised Milesight Industrial Cellular Routers. Researchers at Sekoia.io’s Threat Detection The post Smishing targets routers in Belgium 2025 first appeared on CyberMaterial. This article has been indexed from CyberMaterial…