Luxembourg, Luxembourg, 14th October 2025, CyberNewsWire This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: Gcore Mitigates Record-Breaking 6 Tbps DDoS Attack
Tag: EN
Salesforce data leak, SimonMed breach, Chipmaker vs. Dutch government
Millions of records exposed in Salesforce data leak SimonMed breach grows from hundreds to over a million Dutch government freezes Chinese-owned chipmaker Huge thanks to our sponsor, Vanta What’s your 2 AM security worry? Is it “Do I have…
Netherlands Takes Control Of China-Owned Nexperia
Dutch government seizes control of Chinese-owned chip manufacturer Nexperia to ensure critical car chips remain available in an emergency This article has been indexed from Silicon UK Read the original article: Netherlands Takes Control Of China-Owned Nexperia
Ivanti Patches 13 Endpoint Manager Flaws Allowing Remote Code Execution
Ivanti has disclosed 13 vulnerabilities in Ivanti Endpoint Manager (EPM), including two high-severity issues that could enable privilege escalation and remote code execution, and eleven medium-severity SQL injection flaws. While there is no evidence of in-the-wild exploitation, Ivanti urges customers…
EU biometric border system launches, suffers teeting problems
Malfunctioning equipment and manual processing cause 90-minute waits The European Union’s new biometric Exit/Entry System (EES) got off to a chaotic start at Prague’s international airport, with travelers facing lengthy queues and malfunctioning equipment forcing border staff to process arrivals…
Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain
Cybersecurity researchers have shed light on a previously undocumented threat actor called TA585 that has been observed delivering an off-the-shelf malware called MonsterV2 via phishing campaigns. The Proofpoint Threat Research Team described the threat activity cluster as sophisticated, leveraging web…
TA585 Deploys Novel Web-Injection to Deliver MonsterV2 Malware on Windows
As cybercrime continues to evolve, new adversaries and innovative tactics challenge defenders daily. The recently emerged threat group TA585 exemplifies this shift, deploying sophisticated malware campaigns that highlight the changing nature of the cybercrime landscape. TA585’s operational strategy, infrastructure control,…
Pro-Russian Hacktivist Attacking OT/ICS Devices to Steal Login Credentials
A newly identified pro-Russian hacktivist group has successfully infiltrated operational technology and industrial control systems belonging to critical infrastructure organizations, employing sophisticated techniques to steal login credentials and disrupt vital services. The threat actor, known as TwoNet, represents an emerging…
Hackers Attacking macOS Users With Spoofed Homebrew Websites to Inject Malicious Payloads
A sophisticated campaign targeting macOS users has emerged through spoofed Homebrew installer websites that deliver malicious payloads alongside legitimate package manager installations. The attack exploits the widespread trust users place in the popular Homebrew package manager by creating pixel-perfect replicas…
Russian Cybercrime Market Hub Transferring from RDP Access to Malware Stealer Logs to Access
A new evolution is underway in the Russian cybercrime ecosystem: market operators and threat actors are rapidly shifting from selling compromised Remote Desktop Protocol (RDP) access to trading malware stealer logs for unauthorized system entry. This transition marks a significant…
What if your privacy tools could learn as they go?
A new academic study proposes a way to design privacy mechanisms that can make use of prior knowledge about how data is distributed, even when that information is incomplete. The method allows privacy guarantees to stay mathematically sound while improving…
178,000+ Invoices Expose Customer Data from Invoicely Platform
A significant data exposure incident has affected the cloud-based invoicing platform Invoicely, potentially compromising sensitive information belonging to customers worldwide. The exposed database contained 178,519 files in various formats including Excel spreadsheets, CSV files, PDFs, and images. Most concerning was…
Elastic Cloud Enterprise Flaw Lets Attackers Run Malicious Commands
Elastic has released a critical security update for Elastic Cloud Enterprise (ECE) addressing a template engine injection flaw that could allow attackers with admin privileges to execute arbitrary commands and exfiltrate sensitive data. Tracked as CVE-2025-37729 and rated CVSS 9.1…
Simple Prompt Injection Lets Hackers Bypass OpenAI Guardrails Framework
Security researchers have discovered a fundamental vulnerability in OpenAI’s newly released Guardrails framework that can be exploited using basic prompt injection techniques. The vulnerability enables attackers to circumvent the system’s safety mechanisms and generate malicious content without triggering any security…
The solar power boom opened a backdoor for cybercriminals
Solar isn’t low risk anymore. Adoption has turned inverters, aggregators, and control software into attack surfaces capable of disrupting service and undermining confidence in the transition. Cyber threats expose weak spots in solar power systems Until recently, security risks in…
FBI Shuts Down Breach Forums and New Cyber Threats Unveiled
In this episode of Cybersecurity Today, host David Shipley discusses several major events, including the FBI’s takedown of the Breach Forums portal. This site was associated with a significant Salesforce data breach and extortion campaign led by groups like Shiny…
Clevo UEFI Leak Allows Signing of Malicious Firmware with BootGuard Keys
Clevo accidentally exposed private keys used in its Intel Boot Guard implementation, allowing attackers to sign malicious firmware that would be trusted during the earliest boot stages. The issue is tracked as Vulnerability Note VU#538470 and was published on October…
Apple Bug Bounty Program Now Offers Up to $5 Million
Apple has announced a massive evolution of its Apple Security Bounty program, dramatically increasing rewards to attract the… The post Apple Bug Bounty Program Now Offers Up to $5 Million appeared first on Hackers Online Club. This article has been…
Fighting the Cyber Forever War: Born Defense Blends Investment Strategy With Just War Principles
Emerging from stealth, Born Defense is betting that a new kind of investment model can reshape how the U.S. fights its endless cyber battles. The post Fighting the Cyber Forever War: Born Defense Blends Investment Strategy With Just War Principles…
JPMorgan to Invest Up to $10 Billion in US Companies With Crucial Ties to National Security
The investment plan will focus on areas including artificial intelligence, cybersecurity and quantum computing. The post JPMorgan to Invest Up to $10 Billion in US Companies With Crucial Ties to National Security appeared first on SecurityWeek. This article has been…