The suspected Chinese-backed threat actors that hacked into F5’s systems and stole data from the security vendor’s BIG-IP application suite spent more than a year inside the networks dtbefore being in detected in August, according to a Bloomberg report that…
AWS outage: what it reveals about the fragility of cloud cybersecurity
The fall of the world’s leading cloud infrastructure platform has caused a blackout across websites, apps, and social networks without contingency plans. Lacking a plan… The post AWS outage: what it reveals about the fragility of cloud cybersecurity appeared first…
Prosper Confirms Data Breach Impacting 17 Million Users
Prosper confirmed a major data breach affecting 17 million people. Learn what happened, why it matters for fintech security, and how IT leaders can respond. The post Prosper Confirms Data Breach Impacting 17 Million Users appeared first on TechRepublic. This…
Amazon DNS outage breaks much of the internet
The outage affected websites like Coinbase and Fortnite, and disrupted services like Signal, Zoom and Amazon’s own products, including Ring. This article has been indexed from Security News | TechCrunch Read the original article: Amazon DNS outage breaks much of…
Criminal SIM Card Supply Network Busted by Europol
Several suspects have been arrested over links with a network running a “sophisticated” cybercrime-enabling service This article has been indexed from www.infosecurity-magazine.com Read the original article: Criminal SIM Card Supply Network Busted by Europol
PoC Released for Linux-PAM Vulnerability Enabling Local Root Privilege Escalation
A new proof-of-concept (PoC) has been released for a serious vulnerability tracked as CVE-2025-8941, affecting the Pluggable Authentication Modules (PAM) used across Linux distributions. The flaw, rated 7.8 (High) on the CVSS scale, allows local attackers to elevate privileges to…
Agentic AI’s OODA Loop Problem
The OODA loop—for observe, orient, decide, act—is a framework to understand decision-making in adversarial situations. We apply the same framework to artificial intelligence agents, who have to make their decisions with untrustworthy observations and orientation. To solve this problem, we…
F5 breach exposes 262,000 BIG-IP systems worldwide
Over 262K F5 BIG-IP devices exposed after threat actors stole source code and data on undisclosed flaws in a recent F5 breach. Over 262,000 F5 BIG-IP devices are exposed online after F5 confirmed a breach by nation-state actors who stole…
Many Online Services and Websites Affected by an AWS Outage, (Mon, Oct 20th)
The info is spreading across the news websites: For approximatively two hours, many online services or websites are suffering of an Amazon Web Services outage. Some affected services: This article has been indexed from SANS Internet Storm Center, InfoCON: green…
Does the Qantas hack include U.S. citizens?
Yes, it does. Although there is no exact number of how many U.S. citizens are affected, the number is likely enormous. Every year, Australia welcomes… The post Does the Qantas hack include U.S. citizens? appeared first on Panda Security Mediacenter.…
NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million
The judge ruled that punitive damages of $167 million awarded by a jury were excessive. The post NSO Ordered to Stop Hacking WhatsApp, but Damages Cut to $4 Million appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks
On Android, the out-of-bounds write issue can be triggered during the processing of media files without user interaction. The post Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
Microsoft Revokes 200+ Fake Certificates Used in Teams Malware Attack
Microsoft has revoked over 200 fraudulent code-signing certificates used in a ransomware campaign involving fake Teams installers by threat group Vanilla Tempest This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Revokes 200+ Fake Certificates Used in…
IT Security News Hourly Summary 2025-10-20 12h : 2 posts
2 posts were published in the last hour 9:34 : PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability 9:34 : Canva Down – Suffers Global Outage, Leaving Millions of Users Unable to Access Platform
PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability
A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Microsoft’s Windows Server Update Services (WSUS), enabling unauthenticated attackers to execute remote code with SYSTEM privileges on affected servers. Dubbed CVE-2025-59287 and assigned a CVSS v3.1 score of…
Canva Down – Suffers Global Outage, Leaving Millions of Users Unable to Access Platform
Canva, the popular graphic design platform, is reeling from a widespread outage that has rendered its services inaccessible to millions of users worldwide. As of 19:16 AEDT (02:46 IST), the platform’s status page reports “significantly increased error rates” impacting nearly…
How to migrate to passwordless from Azure B2C
A step-by-step, human-first guide on migrating from Azure AD B2C to passwordless authentication using modern OIDC providers like MojoAuth — with real-world lessons and pitfalls to avoid The post How to migrate to passwordless from Azure B2C appeared first on…
MSG Accused of Misusing Facial Recognition, Mishandling Data
A former Madison Square Garden executive alleges the company used facial recognition technology to target critics and violate privacy, leading to a wrongful termination and discrimination lawsuit. The case raises major concerns about surveillance, biometric data misuse, and privacy rights.…
Federated security: Building resilient operating models in complex organizations
Balance oversight and autonomy in complex organizations by building an aligned, scalable federated model for cybersecurity. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Federated security: Building resilient operating models in complex organizations
Micron To Exit China Data Centre Chip Business
Micron reportedly plans to stop selling server chips to data centres in China after semiconductors banned for critical infrastructure This article has been indexed from Silicon UK Read the original article: Micron To Exit China Data Centre Chip Business
Pony.ai, Stellantis To Collaborate On Robotaxis In Europe
Autonomous car firm Pony.ai to work with Stellantis on autonomous taxi services in Europe, as Chinese firms expand abroad This article has been indexed from Silicon UK Read the original article: Pony.ai, Stellantis To Collaborate On Robotaxis In Europe
American Airlines Subsidiary Envoy Air Hit by Oracle Hack
Envoy Air, which operates the American Eagle brand, has confirmed that business information was stolen by hackers. The post American Airlines Subsidiary Envoy Air Hit by Oracle Hack appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
US Congress Probes Starlink Over Asia Scam Centres
US Congress investigates allegations that SpaceX’s Starlink is providing internet access to scam compounds in Myanmar This article has been indexed from Silicon UK Read the original article: US Congress Probes Starlink Over Asia Scam Centres
Carmakers Brace For Nexperia Chip Disruption
Automakers in US, Europe, say they expect production to be disrupted after China blocks export of chips made by Netherlands’ Nexperia This article has been indexed from Silicon UK Read the original article: Carmakers Brace For Nexperia Chip Disruption