Adidas AG, the German sportswear company, has disclosed a data breach following a cyberattack on one of its customer service providers. The incident resulted in unauthorized access to customer data, though the company did not specify the number of affected individuals or the type of information compromised. The breach was linked to a third-party service […]
Hackers are leveraging search engine optimization (SEO) poisoning techniques to deceive employees into handing over payroll credentials, according to findings from threat researchers. The campaign, first identified in May 2025 by cybersecurity firm ReliaQuest, targeted an unnamed manufacturing company. Attackers created fake payroll login pages that appeared in Google search results when employees searched for […]
More than 70 malicious packages targeting JavaScript developers have been uncovered in the npm registry and Visual Studio Code (VS Code) ecosystem, posing a significant threat to software supply chains. According to research, approximately 60 of these were found in the npm package registry, embedded with install-time scripts designed to execute automatically during installation. Once […]
Cisco has released security updates addressing 35 vulnerabilities across multiple products, with a significant focus on its widely used IOS and IOS XE software platforms. Of these, 26 flaws were found in IOS and IOS XE, including 17 that have been classified as critical or high severity. The company has urged users to apply the […]
Qilin-linked threat actors were responsible for a significant spike in ransomware activity in April 2025, accounting for 45 breaches, according to cybersecurity researchers. The group employed a combination of the known malware SmokeLoader and a newly identified .NET-based loader dubbed NETXLOADER in a campaign first observed in November 2024. Researchers say NETXLOADER functions as a […]
Europol has announced the takedown of several websites offering distributed denial-of-service (DDoS)-for-hire services, along with the arrest of four individuals in Poland as part of its ongoing crackdown on cybercrime. The operation targeted illicit platforms that enable users to launch DDoS attacks without technical expertise, disrupting online services by overwhelming them with traffic. The arrests […]
Google is rolling out new artificial intelligence-based protections designed to detect online scams across its Chrome browser, Search engine, and Android operating system, the company announced Thursday. The initiative leverages Gemini Nano, Google’s on-device large language model, to enhance Safe Browsing features in Chrome version 137 on desktop platforms. By processing data locally, Gemini Nano […]
A newly identified phishing technique is exploiting blob URLs to bypass Secure Email Gateways (SEGs) and evade traditional security analysis tools, according to researchers at Cofense. The method leverages blob URIs—browser-generated, temporary data URLs—to create credential harvesting pages that reside solely in the victim’s browser memory. The attack begins with emails linking to allowlisted services […]
Moldovan authorities have arrested a 45-year-old foreign national suspected of carrying out a €4.5 million ransomware attack on a Dutch research agency, officials said Monday. The suspect is believed to have orchestrated a series of cyber intrusions targeting companies in the Netherlands in 2021, according to a statement from law enforcement. The individual is wanted […]
SAP has issued security patches to fix a second zero-day vulnerability that was actively exploited in recent cyberattacks targeting its NetWeaver application servers. The flaw, which had not been previously disclosed, allowed attackers to compromise systems before a fix was made available, highlighting the urgency of the update. This marks the second such vulnerability in […]
A malicious package published to the Node Package Manager (NPM) repository has been found using Unicode-based steganography to conceal its true functionality, evading detection by traditional security tools. The package hides harmful code by embedding invisible Unicode characters within its script, a technique that obscures malicious instructions from both human reviewers and automated scanners. In […]
Hackers earned over $1 million in cash prizes during the Pwn2Own Berlin 2025 competition, where cybersecurity researchers showcased high-impact vulnerabilities across a range of modern digital systems. Participants successfully demonstrated exploits targeting virtual machines, artificial intelligence platforms, web browsers, servers, containers, and operating systems. The event, designed to uncover critical security flaws before they can […]