The cybersecurity landscape is facing a new threat as ransomware operators have started using Microsoft’s AzCopy, a trusted command-line tool, to facilitate data exfiltration during attacks. This utility, designed for transferring data to Azure Storage, helps attackers extract sensitive information undetected by exploiting its seamless integration with business operations. Researchers at Varonis Threat Labs discovered […]
A sophisticated phishing campaign exploits Google Cloud by using its storage services to host malicious redirects, making fraudulent emails more convincing. This approach allows attackers to evade standard email security measures by leveraging Google’s trusted domain. Initially detected in March 2026, the campaign employs over 25 distinct phishing emails targeting a single user. These emails […]
In the wake of rising geopolitical tensions, Iranian APTs are intensifying cyber threats against critical infrastructure, expanding the conflict beyond traditional battlefields. Following Operation Lion’s Roar by the U.S. and Israeli forces targeting Iran, cyberspace has become a focal arena for retaliation. Iranian state-affiliated groups, known for sophisticated advanced persistent threat capabilities, are aggressively targeting […]
Iranian forces have executed drone strikes targeting Amazon data centers in the United Arab Emirates and Bahrain, raising alarm over the tech industry’s exposure to physical threats. The assault directly hit two AWS facilities in the UAE and impacted an additional center in Bahrain when a drone crashed nearby. This incident underscores the critical need […]
Security researchers have discovered critical AVideo flaws in the widely-used open-source video streaming platform, which content creators and businesses utilize to host and monetize video content. The identified vulnerabilities include a SQL injection flaw and a remote code execution risk, posing significant security threats. Exploiting these vulnerabilities could allow attackers unauthorized access to sensitive data […]
Facebook was hit by a global outage starting at 4:15 PM ET, preventing users worldwide from accessing their accounts. Many reported encountering the message, “Account Temporarily Unavailable,” indicating a site issue that the company aims to resolve quickly. According to Meta’s status page, other services such as Ads Manager, Instagram Boost, and WhatsApp Business API […]
A critical vulnerability in a widely-used WordPress plugin opens the door to admin takeover for over 60,000 websites. The flaw resides in the User Registration & Membership plugin, a favored tool for managing tiered subscription plans and custom login features. This security gap could allow malicious actors to escalate privileges, potentially gaining complete administrative control. […]
OpenStack Vitrage faces an RCE vulnerability, as security researcher Khalil Lemtaffah from Nokia has uncovered a significant remote code execution flaw in the platform’s Root Cause Analysis service. This vulnerability presents a considerable security threat, particularly given OpenStack’s extensive use in private and public cloud environments. The identified vulnerabilities, CVE-2026-2256 and CVE-2026-28370, highlight systemic risks […]
The Health-ISAC Annual Report 2025 reveals that health-isac logs a surge in threat intelligence efforts and tabletop drills, reflecting a growing emphasis on cyber resilience. This development underscores the healthcare sector’s proactive stance against rising cybersecurity threats. Detailed in the newly released report, this surge includes enhanced threat detection capabilities and collaborative exercises. Health-ISAC members […]
A recent report by Cydome reveals a dramatic 150% increase in maritime OT (Operational Technology) cyberattacks throughout 2025. As ransomware continues to exert its grip, the vulnerability of maritime operations has surged, posing significant risks to global shipping and logistics sectors. The research highlights that such attacks, targeting operational infrastructures integral to maritime operations, have […]
The APT41-linked Silver Dragon targets governments in Europe and Southeast Asia, leveraging sophisticated cyber tactics since mid-2024. Cybersecurity experts at Check Point have revealed that Silver Dragon infiltrates systems by exploiting vulnerabilities in public-facing internet servers and through phishing emails laden with malicious attachments. The group employs the notorious Cobalt Strike tool and uses Google […]
Hewlett Packard Enterprise (HPE) has sounded the alarm over a critical hpe autopass vulnerability in its AutoPass License Server (APLS). This vulnerability, identified as CVE-2026-23600, demands immediate attention, having received the highest severity rating possible. It leaves systems exposed to potential exploitation, demanding swift cybersecurity measures to mitigate the risk. HPE urges all users of […]