Tata Motors Leak Exposes more than 70 terabytes of customer and operational data due to critical flaws in the company’s cloud infrastructure. Security researcher Eaton Zveare found hardcoded AWS access keys embedded in Tata’s E-Dukaan platform, giving unrestricted access to cloud storage buckets containing sensitive customer records, market data, and financial documents. The exposed credentials […]
A newly disclosed vulnerability in MPDV Mikrolab’s manufacturing execution systems could allow unauthenticated local file access, raising concerns across industrial network environments. The MPDV MES flaw exposes sensitive data in MIP 2, FEDRA 2, and HYDRA X platforms, potentially compromising operational integrity in automated production systems. SEC Consult identified the issue under CVE-2025-12055 and published […]
Cybercriminals are using a new method to bypass email security systems by embedding invisible characters in subject lines through MIME encoding. These phishing emails hide malware and credential theft schemes by leveraging Unicode soft hyphens to split key terms undetectable to automated filters. The attack disguises malicious intent while maintaining a clean appearance in the […]
IBM has issued a critical advisory for a severe vulnerability in IBM Maximo Manage, part of the IBM Maximo Application Suite. Tracked as CVE-2025-36386 and rated 9.8 on the CVSS scale, the IBM Maximo flaw lets hackers gain unauthenticated access to Cognos Analytics. The company urges users to apply recommended remediation steps immediately to prevent […]
The Cybersecurity and Infrastructure Security Agency added two critical DELMIA Apriso flaws to its Known Exploited Vulnerabilities catalog on Oct. 29, warning that attackers are actively exploiting them. The vulnerabilities enable remote code execution and unauthorized privileged access, posing a severe threat to industrial and manufacturing systems using Dassault Systèmes’ DELMIA Apriso software. CISA’s alert […]
Australian authorities have developed an artificial intelligence tool designed to decipher the hidden meanings behind emoji used by criminals online. As part of a joint effort within the Five Eyes intelligence alliance, the new system highlights how Australia builds AI to decode messages that exploit digital symbols to target children. The Australian Federal Police (AFP) […]
A new Android banking trojan identified as Herodotus is raising red flags among mobile security researchers for its advanced evasion tactics. Discovered during routine malware monitoring, Herodotus Android Malware Foolsnaturally by mimicking human behavior to sidestep biometric detection systems. Although it shares infrastructure with known malware like Hook and Octo, Herodotus blends elements from the […]
A recent investigation by cybersecurity firm HelixGuard uncovered a dozen malicious plugins infiltrating the VSCode Marketplace, highlighting growing concerns over supply chain risks in integrated development environments. Attackers used these extensions to target software developers directly, embedding harmful code into seemingly legitimate tools. The plugins, once installed, could grant unauthorized access or leak sensitive development […]