On December 30th, 2025, we received a submission for an Authentication Bypass vulnerability in Tutor LMS Pro, a WordPress plugin estimated to have more than 30,000 active installations. The vulnerability makes it possible for an unauthenticated attacker to gain access…
Tag: EN
Fake CleanMyMac Site Uses ClickFix Trick to Install SHub Stealer on macOS
Researchers warn of a fake CleanMyMac site using a ClickFix attack to install SHub Stealer on macOS and steal passwords and crypto wallets. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the…
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CVE-2026-1603 Ivanti Endpoint Manager…
Vietnam-Based Cybercrime Network Enables Fraudulent Account Signups at Scale
A sprawling cybercrime ecosystem rooted in Vietnam has been linked to large-scale fraudulent account registration campaigns targeting service providers and online platforms worldwide. Researchers traced this activity to an infrastructure cluster internally designated O-UNC-036, which uses disposable email addresses and…
Signal Confirms Targeted Phishing Attacks Resulting in Account Takeovers
Signal has officially confirmed an ongoing wave of targeted phishing campaigns resulting in successful account takeovers for high-profile users, including journalists and government officials. The encrypted messaging service explicitly stated that its core infrastructure and end-to-end encryption protocols remain intact…
Randall Munroe’s XKCD ‘Dinosaurs And Non-Dinosaurs’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Dinosaurs And Non-Dinosaurs’ appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Randall…
Pro-Iranian Hacktivists Join Nation-State Groups in Targeting U.S., Israel, Others
More than 60 hacktivist groups, armed with AI, mobilized within hours of the U.S. and Israel first striking Iran, adding another element to an already active and expanding cyberthreat environment that includes dozens of known Iranian nation-state groups. The post…
How to Use AWS IAM Identity Center for Scalable, Compliant Cloud Access Control
What Is AWS IAM Identity Center? Think of IAM Identity Center (previously AWS SSO) as the gatekeeper to your cloud environment. Its role is to make sure only the right users or services gain access to your AWS resources, and…
Report Surfaces Higher Correlation Between API and AI Security
An analysis of 67,058 published vulnerabilities from 2025 finds 11,053, or 17%, are related to application programming interfaces (APIs). Conducted by Wallarm, the 2026 API ThreatStats Report also notes that 43% of the additions made in 2025 to the Known…
EV charger biz ELECQ zapped by ransomware crooks, customer contact data stolen
An attack on the company’s AWS platform may have exposed customers’ names and home addresses Exclusive ELECQ, maker of smart electric vehicle (EV) chargers, is warning customers that their personal details may have been stolen in a ransomware attack that…
Salt Typhoon is hacking the world’s phone and internet giants. Here’s everywhere that’s been hit.
Salt Typhoon is by far one of the most prolific hacking groups in recent years, breaching some of the top American phone companies. Here are all the countries that have been targeted. This article has been indexed from Security News…
Russian government hackers targeting Signal and WhatsApp users, Dutch spies warn
Dutch intelligence is accusing Russia-backed hackers of running a “large-scale global” hacking campaign against Signal and WhatsApp users. This article has been indexed from Security News | TechCrunch Read the original article: Russian government hackers targeting Signal and WhatsApp users,…
Russia-linked hackers target Signal, WhatsApp of officials globally
Russia-linked hackers are targeting Signal and WhatsApp accounts of government and military officials worldwide, warns Dutch intelligence. Dutch intelligence agencies (MIVD and AIVD) warn of a global campaign by Russia-linked threat actors aiming to compromise Signal and WhatsApp accounts. The…
Cybersecurity M&A Roundup: 42 Deals Announced in February 2026
Significant cybersecurity M&A deals announced by Check Point, Booz Allen, Proofpoint, Sophos, Palo Alto Networks, and Zscaler. The post Cybersecurity M&A Roundup: 42 Deals Announced in February 2026 appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
ConFoo 2026: Guardrails for Agentic AI, Prompts, and Supply Chains
Read the takeaways from ConFoo 2026, including putting guardrails where requests happen, auditing tool calls, treat dependency updates like production access. The post ConFoo 2026: Guardrails for Agentic AI, Prompts, and Supply Chains appeared first on Security Boulevard. This article…
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device
The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to…
Trump Administration Unveils New Cyber Strategy for America
US national cyber strategy focuses on stronger defenses, countering threats, fostering innovation This article has been indexed from www.infosecurity-magazine.com Read the original article: Trump Administration Unveils New Cyber Strategy for America
Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data
Huntress researchers uncover campaign exploiting vulnerabilities to steal data using Elastic Cloud as a data hub This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data
TeST 2
TEST 2 This article has been indexed from CyberMaterial Read the original article: TeST 2
State-linked actors targeted US networks in lead-up to Iran war
Researchers found backdoors installed on U.S. company networks in the weeks prior to the U.S. and Israeli bombing campaign. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: State-linked actors targeted US networks in…