Endesa says a cyberattack exposed sensitive customer data after an unauthorized party accessed its commercial platform. The Spanish electricity giant reported that attackers may have obtained identification details, contract data, national ID numbers, and possibly bank account numbers, but no passwords. Endesa, which serves over 10 million customers and reported €21.3 billion in revenue in […]
Uganda cuts internet access nationwide just days before its January 15 election, despite earlier assurances from officials that no blackout would occur. Authorities suspended public connectivity to curb what they described as “misinformation” and “electoral fraud.” The move came after Uganda’s communications regulator ordered restrictions on roaming calls and new SIM cards, fueling concerns among […]
A recent cyber campaign targeting Ukraine’s Defense Forces has exposed new vulnerabilities in military digital infrastructure. Between October and December 2023, unidentified threat actors disguised malware delivery under the pretense of charitable aid, deploying a backdoor dubbed PluggyApe. This incident marks the latest in a series of sophisticated cyberattacks exploiting social engineering tactics to infiltrate […]
A cyberattack forced Belgium’s AZ Monica hospital to shut down its servers early Wednesday morning, disrupting medical services and prompting the transfer of several critical patients. The hospital, which operates two campuses in Antwerp and Deurne, specializes in acute and outpatient care and disconnected its systems precisely at 6:32 a.m. in response to the breach. […]
A newly disclosed Angular flaw enables code execution attacks by allowing the injection of malicious scripts through a critical vulnerability in Angular’s Template Compiler. Identified as CVE-2026-22610, the flaw affects multiple versions of the @angular/compiler and @angular/core packages, compromising the framework’s security measures. The vulnerability originates in Angular’s internal sanitization process, which fails to adequately […]
Hackers have compromised n8n nodes by exploiting a weaponized npm package posing as a legitimate Google Ads integration. The malicious package mimicked authentic functionality, tricking developers into entering their OAuth credentials. Once input, the data was exfiltrated to an attacker-controlled server during routine workflow execution. Researchers at EndorLabs uncovered eight malicious packages targeting the automation […]
Spanish utility provider Endesa says hackers accessed data from its systems in a recent security breach impacting both the main company and its regulated retailer, Energía XXI. The attack exposed contract-related information that includes customers’ personal details, according to notices the company is now sending to affected individuals. Endesa has not disclosed how many customers […]
Europol announced the arrest of 34 individuals in Spain tied to the Black Axe criminal group after a joint crackdown with Spanish police and Bavarian authorities. The operation focused heavily on Seville, with additional arrests in Madrid, Málaga and Barcelona. Black Axe, a highly organized syndicate rooted in Nigeria, engages in cyber fraud, trafficking and […]
Security researchers have discovered a critical React Router flaw that enables attackers to perform directory traversal, gaining unauthorized access to server filesystem locations. The vulnerability, tracked as CVE-2025-61686, affects several packages within the React Router ecosystem. Exploiting the flaw allows malicious users to read, write or even overwrite sensitive server files outside of expected application […]
Sweden detains an IT consultant who formerly worked with the Swedish Armed Forces, as authorities suspect him of spying for Russian intelligence. The 33-year-old man was taken into custody earlier this week, prosecutors announced. Officials believe he accessed sensitive information during his time working as a consultant and may have passed it to a foreign […]
The Amsterdam Court of Appeal on Friday ruled that a hacker who manipulated European port systems to enable cocaine smuggling played a key technical role in a criminal trafficking operation. In a decision that underscores the growing intersection of cybercrime and organized drug trade, the Amsterdam court jailed the hacker for seven years, linking him […]
British communications regulator Ofcom has launched an inquiry into social media platform X, formerly known as Twitter, over alleged failures to curb the spread of nonconsensual deepfake pornography involving both adults and minors. The move comes as Ofcom probes X under its new online safety powers, marking one of the first high-profile cases to test […]