Arla Foods has confirmed that it was targeted by a cyberattack that disrupted production operations, causing delays across its supply chain. The dairy giant disclosed the incident to BleepingComputer, stating that the attack affected its ability to produce and distribute goods efficiently. While the company did not provide details about the nature or scope of […]
A critical vulnerability in vBulletin, one of the most widely used internet forum platforms, has exposed thousands of websites to unauthenticated remote code execution (RCE), cybersecurity researchers have disclosed. The flaw affects vBulletin versions 5.x and 6.x running on PHP 8.1 or later, where changes to PHP’s Reflection API allow attackers to invoke protected methods […]
Cybersecurity analysts have uncovered two sophisticated investment scam operations that leverage Facebook advertisements, deceptive domains, and IP-based filtering to target victims. Identified by DNS threat intelligence firm Infoblox as “Reckless Rabbit” and “Ruthless Rabbit,” the campaigns employ spoofed celebrity endorsements to lure users into fraudulent schemes. The scams are structured around traffic distribution systems (TDSes), […]
A malicious Python package uploaded to the Python Package Index (PyPI) has been discovered delivering remote access trojan (RAT) malware, with its activity traced back to 2022. The package specifically targets developers involved with Discord, a popular communication platform used by both gamers and developers. Despite being available on PyPI for more than three years, […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has altered how it disseminates updates on security vulnerabilities, shifting its notifications to the social media platform X and email alerts. The move marks a significant change in the way the federal agency communicates with cybersecurity professionals and the public, as it steps away from more traditional […]
ASUSTeK Computer Inc. has issued patches addressing two security vulnerabilities in its DriverHub utility, according to a report from The Hacker News. The flaws, if left unremedied, could have enabled attackers to execute arbitrary code remotely on affected systems. The company released the updates to mitigate the risks associated with the bugs, which posed a […]
Proofpoint has reached an agreement to acquire Germany-based Hornetsecurity Group in a deal valued at over $1 billion, the companies announced. The acquisition will expand Proofpoint’s capabilities in cloud-based email and collaboration security, particularly for Microsoft 365 environments. Hornetsecurity provides a suite of security tools tailored for Microsoft’s productivity platform, including email filtering, backup, and […]
Hackers are ramping up efforts to compromise macOS users by deploying malware through counterfeit versions of Ledger Live, the software used to manage Ledger hardware cryptocurrency wallets, according to research by Moonlock. Since August 2024, at least four distinct campaigns have been identified, with attackers refining tactics to bypass Apple’s security measures and steal users’ […]
SK Telecom, South Korea’s largest wireless carrier, has disclosed a major cybersecurity breach involving a stealthy malware attack that persisted undetected for two years. The breach resulted in the unauthorized leakage of approximately 26 million International Mobile Subscriber Identity (IMSI) records—unique identifiers tied to mobile users and critical for network authentication and tracking. The attack, […]
A newly surfaced adversary-in-the-middle (AiTM) attack framework known as “EvilWorker” is gaining attention within the cybersecurity community for its innovative use of service workers to intercept and manipulate web traffic. Highlighted in a recent post on the r/netsec forum, EvilWorker is being compared to the widely known Evilginx2 tool, with users suggesting it may be […]
Cybersecurity news site KrebsOnSecurity was targeted in a massive distributed denial-of-service (DDoS) attack that peaked at 6.3 terabits per second, according to HackRead. The attack was reportedly carried out by the Aisuru botnet, a network of compromised devices used to flood websites with traffic in an attempt to disrupt access. The scale of the incident […]
A critical flaw in O2 UK’s Voice over LTE (VoLTE) service exposed the real-time location and device identifiers of its mobile customers during phone calls, according to a recent disclosure. The vulnerability, present since the service’s launch in March 2017, leaked sensitive data—including IMSI, IMEI, and precise cell tower information—via improperly configured SIP headers in […]